./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1699376814 <...> ATE, 1000000) = 0 [pid 6043] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6043] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6043] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1024]}, 88) = 1024 [pid 6043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6043] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6044 attached [pid 6044] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6044] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6044] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6044] memfd_create("syzkaller", 0) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 68.347915][ T6041] loop0: detected capacity change from 0 to 1024 [pid 6044] munmap(0x7f15b9a45000, 524288) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6044] close(3) = 0 [pid 6044] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6044] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6044] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6044] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6044] ioctl(4, LOOP_CLR_FD) = 0 [pid 6044] close(4) = 0 [pid 6044] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6043] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6044] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6043] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6043] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1025]}, 88) = 1025 [pid 6043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6043] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6045 attached [pid 6045] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6045] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6045] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6045] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6045] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6044] <... mknodat resumed>) = 0 [pid 6044] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6044] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] <... mount resumed>) = 0 [pid 6045] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6045] chdir(".") = 0 [pid 6045] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6045] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] close(3) = 0 [pid 6043] close(4) = 0 [pid 6043] close(5) = -1 EBADF (Bad file descriptor) [pid 6043] close(6) = -1 EBADF (Bad file descriptor) [pid 6043] close(7) = -1 EBADF (Bad file descriptor) [pid 6043] close(8) = -1 EBADF (Bad file descriptor) [pid 6043] close(9) = -1 EBADF (Bad file descriptor) [pid 6043] close(10) = -1 EBADF (Bad file descriptor) [pid 6043] close(11) = -1 EBADF (Bad file descriptor) [pid 6043] close(12) = -1 EBADF (Bad file descriptor) [pid 6043] close(13) = -1 EBADF (Bad file descriptor) [pid 6043] close(14) = -1 EBADF (Bad file descriptor) [pid 6043] close(15) = -1 EBADF (Bad file descriptor) [pid 6043] close(16) = -1 EBADF (Bad file descriptor) [pid 6043] close(17) = -1 EBADF (Bad file descriptor) [pid 6043] close(18) = -1 EBADF (Bad file descriptor) [pid 6043] close(19) = -1 EBADF (Bad file descriptor) [pid 6043] close(20) = -1 EBADF (Bad file descriptor) [pid 6043] close(21) = -1 EBADF (Bad file descriptor) [pid 6043] close(22) = -1 EBADF (Bad file descriptor) [pid 6043] close(23) = -1 EBADF (Bad file descriptor) [pid 6043] close(24) = -1 EBADF (Bad file descriptor) [pid 6043] close(25) = -1 EBADF (Bad file descriptor) [pid 6043] close(26) = -1 EBADF (Bad file descriptor) [pid 6043] close(27) = -1 EBADF (Bad file descriptor) [pid 6043] close(28) = -1 EBADF (Bad file descriptor) [pid 6043] close(29) = -1 EBADF (Bad file descriptor) [pid 6043] exit_group(0) = ? [pid 6044] <... futex resumed>) = ? [pid 6044] +++ exited with 0 +++ [pid 6045] <... futex resumed>) = ? [pid 6045] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1023, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./341/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./341") = 0 [pid 5019] mkdir("./342", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1026 ./strace-static-x86_64: Process 6046 attached [pid 6046] set_robust_list(0x555556a426a0, 24) = 0 [pid 6046] chdir("./342") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6046] setpgid(0, 0) = 0 [ 68.410918][ T6044] loop0: detected capacity change from 0 to 1024 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6046] write(3, "1000", 4) = 4 [pid 6046] close(3) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6046] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6046] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1027]}, 88) = 1027 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6046] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6047 attached [pid 6047] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6047] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6047] memfd_create("syzkaller", 0) = 3 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6047] munmap(0x7f15b9a45000, 524288) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6047] close(3) = 0 [pid 6047] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6047] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6047] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6047] ioctl(4, LOOP_CLR_FD) = 0 [pid 6047] close(4) = 0 [pid 6047] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6047] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] <... futex resumed>) = 0 [pid 6046] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6046] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1028]}, 88) = 1028 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6046] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 0 [pid 6047] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6048 attached [pid 6048] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6048] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6048] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6048] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6047] <... mknodat resumed>) = 0 [pid 6047] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6047] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6048] <... mount resumed>) = 0 [pid 6048] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6048] chdir(".") = 0 [pid 6048] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6046] <... futex resumed>) = 0 [pid 6048] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] close(3) = 0 [pid 6046] close(4) = 0 [pid 6046] close(5) = -1 EBADF (Bad file descriptor) [pid 6046] close(6) = -1 EBADF (Bad file descriptor) [pid 6046] close(7) = -1 EBADF (Bad file descriptor) [pid 6046] close(8) = -1 EBADF (Bad file descriptor) [pid 6046] close(9) = -1 EBADF (Bad file descriptor) [pid 6046] close(10) = -1 EBADF (Bad file descriptor) [pid 6046] close(11) = -1 EBADF (Bad file descriptor) [pid 6046] close(12) = -1 EBADF (Bad file descriptor) [pid 6046] close(13) = -1 EBADF (Bad file descriptor) [pid 6046] close(14) = -1 EBADF (Bad file descriptor) [pid 6046] close(15) = -1 EBADF (Bad file descriptor) [pid 6046] close(16) = -1 EBADF (Bad file descriptor) [pid 6046] close(17) = -1 EBADF (Bad file descriptor) [pid 6046] close(18) = -1 EBADF (Bad file descriptor) [pid 6046] close(19) = -1 EBADF (Bad file descriptor) [pid 6046] close(20) = -1 EBADF (Bad file descriptor) [pid 6046] close(21) = -1 EBADF (Bad file descriptor) [pid 6046] close(22) = -1 EBADF (Bad file descriptor) [pid 6046] close(23) = -1 EBADF (Bad file descriptor) [pid 6046] close(24) = -1 EBADF (Bad file descriptor) [pid 6046] close(25) = -1 EBADF (Bad file descriptor) [pid 6046] close(26) = -1 EBADF (Bad file descriptor) [pid 6046] close(27) = -1 EBADF (Bad file descriptor) [pid 6046] close(28) = -1 EBADF (Bad file descriptor) [pid 6046] close(29) = -1 EBADF (Bad file descriptor) [pid 6046] exit_group(0 [pid 6047] <... futex resumed>) = ? [pid 6046] <... exit_group resumed>) = ? [pid 6047] +++ exited with 0 +++ [pid 6048] <... futex resumed>) = ? [pid 6048] +++ exited with 0 +++ [pid 6046] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1026, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./342/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./342") = 0 [pid 5019] mkdir("./343", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1029 ./strace-static-x86_64: Process 6049 attached [pid 6049] set_robust_list(0x555556a426a0, 24) = 0 [pid 6049] chdir("./343") = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [ 68.485162][ T6047] loop0: detected capacity change from 0 to 1024 [pid 6049] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6049] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1030]}, 88) = 1030 ./strace-static-x86_64: Process 6050 attached [pid 6050] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6050] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6049] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6049] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6050] memfd_create("syzkaller", 0) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6050] munmap(0x7f15b9a45000, 524288) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6050] close(3) = 0 [pid 6050] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6050] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6050] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6050] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6050] ioctl(4, LOOP_CLR_FD) = 0 [pid 6050] close(4) = 0 [pid 6050] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6049] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6050] <... mknodat resumed>) = 0 [pid 6049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1031]}, 88) = 1031 ./strace-static-x86_64: Process 6051 attached [pid 6049] rt_sigprocmask(SIG_SETMASK, [], [pid 6051] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6051] <... rseq resumed>) = 0 [pid 6049] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] set_robust_list(0x7f15b9ac49a0, 24 [pid 6049] <... futex resumed>) = 0 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6049] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6051] rt_sigprocmask(SIG_SETMASK, [], [pid 6050] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6051] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6051] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6050] <... futex resumed>) = 0 [pid 6050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] <... mount resumed>) = 0 [pid 6051] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6051] chdir(".") = 0 [pid 6051] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] close(3) = 0 [pid 6049] close(4) = 0 [pid 6049] close(5) = -1 EBADF (Bad file descriptor) [pid 6049] close(6) = -1 EBADF (Bad file descriptor) [pid 6049] close(7) = -1 EBADF (Bad file descriptor) [pid 6049] close(8) = -1 EBADF (Bad file descriptor) [pid 6049] close(9) = -1 EBADF (Bad file descriptor) [pid 6049] close(10) = -1 EBADF (Bad file descriptor) [pid 6049] close(11) = -1 EBADF (Bad file descriptor) [pid 6049] close(12) = -1 EBADF (Bad file descriptor) [pid 6049] close(13) = -1 EBADF (Bad file descriptor) [pid 6049] close(14) = -1 EBADF (Bad file descriptor) [pid 6049] close(15) = -1 EBADF (Bad file descriptor) [pid 6049] close(16) = -1 EBADF (Bad file descriptor) [pid 6049] close(17) = -1 EBADF (Bad file descriptor) [pid 6049] close(18) = -1 EBADF (Bad file descriptor) [pid 6049] close(19) = -1 EBADF (Bad file descriptor) [pid 6049] close(20) = -1 EBADF (Bad file descriptor) [pid 6049] close(21) = -1 EBADF (Bad file descriptor) [pid 6049] close(22) = -1 EBADF (Bad file descriptor) [pid 6049] close(23) = -1 EBADF (Bad file descriptor) [pid 6049] close(24) = -1 EBADF (Bad file descriptor) [pid 6049] close(25) = -1 EBADF (Bad file descriptor) [pid 6049] close(26) = -1 EBADF (Bad file descriptor) [pid 6049] close(27 [pid 6051] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6049] close(28) = -1 EBADF (Bad file descriptor) [pid 6049] close(29) = -1 EBADF (Bad file descriptor) [pid 6049] exit_group(0 [pid 6050] <... futex resumed>) = ? [pid 6049] <... exit_group resumed>) = ? [pid 6051] <... futex resumed>) = ? [pid 6050] +++ exited with 0 +++ [pid 6051] +++ exited with 0 +++ [pid 6049] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1029, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./343/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./343") = 0 [pid 5019] mkdir("./344", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1032 ./strace-static-x86_64: Process 6052 attached [pid 6052] set_robust_list(0x555556a426a0, 24) = 0 [pid 6052] chdir("./344") = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6052] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6052] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6052] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1033]}, 88) = 1033 [pid 6052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6052] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6053 attached [pid 6053] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6053] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6053] memfd_create("syzkaller", 0) = 3 [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 68.564228][ T6050] loop0: detected capacity change from 0 to 1024 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6053] munmap(0x7f15b9a45000, 524288) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6053] close(3) = 0 [pid 6053] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6053] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6053] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6053] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6053] ioctl(4, LOOP_CLR_FD) = 0 [pid 6053] close(4) = 0 [pid 6053] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6053] <... futex resumed>) = 1 [pid 6052] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6053] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6052] <... futex resumed>) = 0 [pid 6052] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6052] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6052] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6053] <... mknodat resumed>) = 0 [pid 6052] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6053] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6053] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6054 attached [pid 6053] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6054] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6052] <... clone3 resumed> => {parent_tid=[1034]}, 88) = 1034 [pid 6054] <... rseq resumed>) = 0 [pid 6052] rt_sigprocmask(SIG_SETMASK, [], [pid 6054] set_robust_list(0x7f15b9ac49a0, 24 [pid 6052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6054] <... set_robust_list resumed>) = 0 [pid 6052] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] rt_sigprocmask(SIG_SETMASK, [], [pid 6052] <... futex resumed>) = 0 [pid 6054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6052] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6054] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6054] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6054] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6054] chdir(".") = 0 [pid 6054] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6052] close(3) = 0 [pid 6052] close(4) = 0 [pid 6052] close(5) = -1 EBADF (Bad file descriptor) [pid 6052] close(6) = -1 EBADF (Bad file descriptor) [pid 6052] close(7) = -1 EBADF (Bad file descriptor) [pid 6052] close(8) = -1 EBADF (Bad file descriptor) [pid 6052] close(9) = -1 EBADF (Bad file descriptor) [pid 6052] close(10) = -1 EBADF (Bad file descriptor) [pid 6052] close(11) = -1 EBADF (Bad file descriptor) [pid 6052] close(12) = -1 EBADF (Bad file descriptor) [pid 6052] close(13) = -1 EBADF (Bad file descriptor) [pid 6052] close(14) = -1 EBADF (Bad file descriptor) [pid 6052] close(15) = -1 EBADF (Bad file descriptor) [pid 6052] close(16) = -1 EBADF (Bad file descriptor) [pid 6052] close(17) = -1 EBADF (Bad file descriptor) [pid 6052] close(18) = -1 EBADF (Bad file descriptor) [pid 6052] close(19) = -1 EBADF (Bad file descriptor) [pid 6052] close(20) = -1 EBADF (Bad file descriptor) [pid 6052] close(21) = -1 EBADF (Bad file descriptor) [pid 6052] close(22) = -1 EBADF (Bad file descriptor) [pid 6052] close(23) = -1 EBADF (Bad file descriptor) [pid 6052] close(24) = -1 EBADF (Bad file descriptor) [pid 6052] close(25) = -1 EBADF (Bad file descriptor) [pid 6052] close(26) = -1 EBADF (Bad file descriptor) [pid 6052] close(27) = -1 EBADF (Bad file descriptor) [pid 6052] close(28 [pid 6054] <... futex resumed>) = 1 [pid 6052] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6052] close(29) = -1 EBADF (Bad file descriptor) [pid 6052] exit_group(0 [pid 6053] <... futex resumed>) = ? [pid 6052] <... exit_group resumed>) = ? [pid 6053] +++ exited with 0 +++ [pid 6054] +++ exited with 0 +++ [pid 6052] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1032, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./344/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./344") = 0 [pid 5019] mkdir("./345", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1035 ./strace-static-x86_64: Process 6055 attached [pid 6055] set_robust_list(0x555556a426a0, 24) = 0 [pid 6055] chdir("./345") = 0 [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6055] setpgid(0, 0) = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6055] write(3, "1000", 4) = 4 [pid 6055] close(3) = 0 [pid 6055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6055] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6055] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6055] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 68.628162][ T6053] loop0: detected capacity change from 0 to 1024 [pid 6055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6056 attached => {parent_tid=[1036]}, 88) = 1036 [pid 6055] rt_sigprocmask(SIG_SETMASK, [], [pid 6056] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6056] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6056] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6055] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6055] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6056] memfd_create("syzkaller", 0) = 3 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6056] munmap(0x7f15b9a45000, 524288) = 0 [pid 6056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6056] close(3) = 0 [pid 6056] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6056] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6056] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6056] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6056] ioctl(4, LOOP_CLR_FD) = 0 [pid 6056] close(4) = 0 [pid 6056] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6055] <... futex resumed>) = 0 [pid 6055] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6055] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6056] <... futex resumed>) = 1 [pid 6055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1037]}, 88) = 1037 ./strace-static-x86_64: Process 6057 attached [pid 6056] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6055] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6055] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6057] <... rseq resumed>) = 0 [pid 6057] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6057] mkdir(".", 0777 [pid 6056] <... mknodat resumed>) = 0 [pid 6057] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6056] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6056] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6057] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6057] chdir(".") = 0 [pid 6057] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6055] close(3) = 0 [pid 6057] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] close(4) = 0 [pid 6055] close(5) = -1 EBADF (Bad file descriptor) [pid 6055] close(6) = -1 EBADF (Bad file descriptor) [pid 6055] close(7) = -1 EBADF (Bad file descriptor) [pid 6055] close(8) = -1 EBADF (Bad file descriptor) [pid 6055] close(9) = -1 EBADF (Bad file descriptor) [pid 6055] close(10) = -1 EBADF (Bad file descriptor) [pid 6055] close(11) = -1 EBADF (Bad file descriptor) [pid 6055] close(12) = -1 EBADF (Bad file descriptor) [pid 6055] close(13) = -1 EBADF (Bad file descriptor) [pid 6055] close(14) = -1 EBADF (Bad file descriptor) [pid 6055] close(15) = -1 EBADF (Bad file descriptor) [pid 6055] close(16) = -1 EBADF (Bad file descriptor) [pid 6055] close(17) = -1 EBADF (Bad file descriptor) [pid 6055] close(18) = -1 EBADF (Bad file descriptor) [pid 6055] close(19) = -1 EBADF (Bad file descriptor) [pid 6055] close(20) = -1 EBADF (Bad file descriptor) [pid 6055] close(21) = -1 EBADF (Bad file descriptor) [pid 6055] close(22) = -1 EBADF (Bad file descriptor) [pid 6055] close(23) = -1 EBADF (Bad file descriptor) [pid 6055] close(24) = -1 EBADF (Bad file descriptor) [pid 6055] close(25) = -1 EBADF (Bad file descriptor) [pid 6055] close(26) = -1 EBADF (Bad file descriptor) [pid 6055] close(27) = -1 EBADF (Bad file descriptor) [pid 6055] close(28) = -1 EBADF (Bad file descriptor) [pid 6055] close(29) = -1 EBADF (Bad file descriptor) [pid 6055] exit_group(0 [pid 6057] <... futex resumed>) = ? [pid 6056] <... futex resumed>) = ? [pid 6055] <... exit_group resumed>) = ? [pid 6057] +++ exited with 0 +++ [pid 6056] +++ exited with 0 +++ [pid 6055] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1035, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./345/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./345") = 0 [pid 5019] mkdir("./346", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 68.698605][ T6056] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6058 attached [pid 6058] set_robust_list(0x555556a426a0, 24) = 0 [pid 6058] chdir("./346" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1038 [pid 6058] <... chdir resumed>) = 0 [pid 6058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6058] setpgid(0, 0) = 0 [pid 6058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6058] write(3, "1000", 4) = 4 [pid 6058] close(3) = 0 [pid 6058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6058] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6058] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6059 attached => {parent_tid=[1039]}, 88) = 1039 [pid 6059] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6059] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6058] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6058] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6059] memfd_create("syzkaller", 0) = 3 [pid 6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6059] munmap(0x7f15b9a45000, 524288) = 0 [pid 6059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6059] close(3) = 0 [pid 6059] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6059] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6059] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6059] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6059] ioctl(4, LOOP_CLR_FD) = 0 [pid 6059] close(4) = 0 [pid 6059] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6058] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6059] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6058] <... mprotect resumed>) = 0 [pid 6058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1040]}, 88) = 1040 [pid 6058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6058] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6060 attached [pid 6060] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6060] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6060] rt_sigprocmask(SIG_SETMASK, [], [pid 6059] <... mknodat resumed>) = 0 [pid 6059] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6060] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6060] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6060] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6060] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6060] chdir(".") = 0 [pid 6060] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6058] <... futex resumed>) = 0 [pid 6058] close(3) = 0 [pid 6058] close(4) = 0 [pid 6058] close(5) = -1 EBADF (Bad file descriptor) [pid 6058] close(6) = -1 EBADF (Bad file descriptor) [pid 6058] close(7 [pid 6060] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6058] close(8) = -1 EBADF (Bad file descriptor) [pid 6058] close(9) = -1 EBADF (Bad file descriptor) [pid 6058] close(10) = -1 EBADF (Bad file descriptor) [pid 6058] close(11) = -1 EBADF (Bad file descriptor) [pid 6058] close(12) = -1 EBADF (Bad file descriptor) [pid 6058] close(13) = -1 EBADF (Bad file descriptor) [pid 6058] close(14) = -1 EBADF (Bad file descriptor) [pid 6058] close(15) = -1 EBADF (Bad file descriptor) [pid 6058] close(16) = -1 EBADF (Bad file descriptor) [pid 6058] close(17) = -1 EBADF (Bad file descriptor) [pid 6058] close(18) = -1 EBADF (Bad file descriptor) [pid 6058] close(19) = -1 EBADF (Bad file descriptor) [pid 6058] close(20) = -1 EBADF (Bad file descriptor) [pid 6058] close(21) = -1 EBADF (Bad file descriptor) [pid 6058] close(22) = -1 EBADF (Bad file descriptor) [pid 6058] close(23) = -1 EBADF (Bad file descriptor) [pid 6058] close(24) = -1 EBADF (Bad file descriptor) [pid 6058] close(25) = -1 EBADF (Bad file descriptor) [pid 6058] close(26) = -1 EBADF (Bad file descriptor) [pid 6058] close(27) = -1 EBADF (Bad file descriptor) [pid 6058] close(28) = -1 EBADF (Bad file descriptor) [pid 6058] close(29) = -1 EBADF (Bad file descriptor) [pid 6058] exit_group(0 [pid 6059] <... futex resumed>) = ? [pid 6058] <... exit_group resumed>) = ? [pid 6060] <... futex resumed>) = ? [pid 6059] +++ exited with 0 +++ [pid 6060] +++ exited with 0 +++ [pid 6058] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1038, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./346/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./346") = 0 [pid 5019] mkdir("./347", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1041 ./strace-static-x86_64: Process 6061 attached [pid 6061] set_robust_list(0x555556a426a0, 24) = 0 [pid 6061] chdir("./347") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6061] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1042]}, 88) = 1042 [pid 6061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6061] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6062 attached [pid 6062] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6062] set_robust_list(0x7f15c1e659a0, 24) = 0 [ 68.780975][ T6059] loop0: detected capacity change from 0 to 1024 [pid 6062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6062] memfd_create("syzkaller", 0) = 3 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6062] munmap(0x7f15b9a45000, 524288) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6062] close(3) = 0 [pid 6062] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6062] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6062] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6062] ioctl(4, LOOP_CLR_FD) = 0 [pid 6062] close(4) = 0 [pid 6062] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] <... futex resumed>) = 0 [pid 6061] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6061] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1043]}, 88) = 1043 [pid 6061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6061] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6062] <... futex resumed>) = 1 [pid 6062] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6062] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6063 attached [pid 6063] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6063] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6063] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6063] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6063] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6063] chdir(".") = 0 [pid 6063] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] close(5) = -1 EBADF (Bad file descriptor) [pid 6061] close(6) = -1 EBADF (Bad file descriptor) [pid 6061] close(7) = -1 EBADF (Bad file descriptor) [pid 6061] close(8) = -1 EBADF (Bad file descriptor) [pid 6061] close(9) = -1 EBADF (Bad file descriptor) [pid 6061] close(10) = -1 EBADF (Bad file descriptor) [pid 6061] close(11) = -1 EBADF (Bad file descriptor) [pid 6061] close(12) = -1 EBADF (Bad file descriptor) [pid 6063] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] close(13) = -1 EBADF (Bad file descriptor) [pid 6061] close(14) = -1 EBADF (Bad file descriptor) [pid 6061] close(15) = -1 EBADF (Bad file descriptor) [pid 6061] close(16) = -1 EBADF (Bad file descriptor) [pid 6061] close(17) = -1 EBADF (Bad file descriptor) [pid 6061] close(18) = -1 EBADF (Bad file descriptor) [pid 6061] close(19) = -1 EBADF (Bad file descriptor) [pid 6061] close(20) = -1 EBADF (Bad file descriptor) [pid 6061] close(21) = -1 EBADF (Bad file descriptor) [pid 6061] close(22) = -1 EBADF (Bad file descriptor) [pid 6061] close(23) = -1 EBADF (Bad file descriptor) [pid 6061] close(24) = -1 EBADF (Bad file descriptor) [pid 6061] close(25) = -1 EBADF (Bad file descriptor) [pid 6061] close(26) = -1 EBADF (Bad file descriptor) [pid 6061] close(27) = -1 EBADF (Bad file descriptor) [pid 6061] close(28) = -1 EBADF (Bad file descriptor) [pid 6061] close(29) = -1 EBADF (Bad file descriptor) [pid 6061] exit_group(0 [pid 6063] <... futex resumed>) = ? [pid 6062] <... futex resumed>) = ? [pid 6061] <... exit_group resumed>) = ? [pid 6062] +++ exited with 0 +++ [pid 6063] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1041, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./347/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./347") = 0 [pid 5019] mkdir("./348", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1044 ./strace-static-x86_64: Process 6064 attached [pid 6064] set_robust_list(0x555556a426a0, 24) = 0 [pid 6064] chdir("./348") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0) = 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6064] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6064] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 68.849621][ T6062] loop0: detected capacity change from 0 to 1024 [pid 6064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6065 attached => {parent_tid=[1045]}, 88) = 1045 [pid 6065] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6065] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6064] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6064] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6065] memfd_create("syzkaller", 0) = 3 [pid 6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6065] munmap(0x7f15b9a45000, 524288) = 0 [pid 6065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6065] close(3) = 0 [pid 6065] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6065] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6065] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6065] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6065] ioctl(4, LOOP_CLR_FD) = 0 [pid 6065] close(4) = 0 [pid 6065] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6064] <... futex resumed>) = 0 [pid 6065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6064] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6064] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6064] <... clone3 resumed> => {parent_tid=[1046]}, 88) = 1046 ./strace-static-x86_64: Process 6066 attached [pid 6064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6064] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6064] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6065] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6066] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6066] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6066] rt_sigprocmask(SIG_SETMASK, [], [pid 6065] <... mknodat resumed>) = 0 [pid 6066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6066] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6066] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6065] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6066] <... mount resumed>) = 0 [pid 6066] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6066] chdir(".") = 0 [pid 6066] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6064] <... futex resumed>) = 0 [pid 6064] close(3) = 0 [pid 6064] close(4) = 0 [pid 6064] close(5) = -1 EBADF (Bad file descriptor) [pid 6064] close(6) = -1 EBADF (Bad file descriptor) [pid 6064] close(7) = -1 EBADF (Bad file descriptor) [pid 6064] close(8) = -1 EBADF (Bad file descriptor) [pid 6064] close(9) = -1 EBADF (Bad file descriptor) [pid 6066] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6064] close(10) = -1 EBADF (Bad file descriptor) [pid 6064] close(11) = -1 EBADF (Bad file descriptor) [pid 6064] close(12) = -1 EBADF (Bad file descriptor) [pid 6064] close(13) = -1 EBADF (Bad file descriptor) [pid 6064] close(14) = -1 EBADF (Bad file descriptor) [pid 6064] close(15) = -1 EBADF (Bad file descriptor) [pid 6064] close(16) = -1 EBADF (Bad file descriptor) [pid 6064] close(17) = -1 EBADF (Bad file descriptor) [pid 6064] close(18) = -1 EBADF (Bad file descriptor) [pid 6064] close(19) = -1 EBADF (Bad file descriptor) [pid 6064] close(20) = -1 EBADF (Bad file descriptor) [pid 6064] close(21) = -1 EBADF (Bad file descriptor) [pid 6064] close(22) = -1 EBADF (Bad file descriptor) [pid 6064] close(23) = -1 EBADF (Bad file descriptor) [pid 6064] close(24) = -1 EBADF (Bad file descriptor) [pid 6064] close(25) = -1 EBADF (Bad file descriptor) [pid 6064] close(26) = -1 EBADF (Bad file descriptor) [pid 6064] close(27) = -1 EBADF (Bad file descriptor) [pid 6064] close(28) = -1 EBADF (Bad file descriptor) [pid 6064] close(29) = -1 EBADF (Bad file descriptor) [pid 6064] exit_group(0 [pid 6065] <... futex resumed>) = ? [pid 6064] <... exit_group resumed>) = ? [pid 6066] <... futex resumed>) = ? [pid 6065] +++ exited with 0 +++ [pid 6066] +++ exited with 0 +++ [pid 6064] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1044, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./348/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./348") = 0 [pid 5019] mkdir("./349", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 68.918903][ T6065] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1047 ./strace-static-x86_64: Process 6067 attached [pid 6067] set_robust_list(0x555556a426a0, 24) = 0 [pid 6067] chdir("./349") = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6067] setpgid(0, 0) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6067] write(3, "1000", 4) = 4 [pid 6067] close(3) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6067] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6067] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6068 attached [pid 6068] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6068] set_robust_list(0x7f15c1e659a0, 24 [pid 6067] <... clone3 resumed> => {parent_tid=[1048]}, 88) = 1048 [pid 6068] <... set_robust_list resumed>) = 0 [pid 6068] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6068] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6067] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6068] <... futex resumed>) = 0 [pid 6068] memfd_create("syzkaller", 0) = 3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6067] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6068] munmap(0x7f15b9a45000, 524288) = 0 [pid 6068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6068] close(3) = 0 [pid 6068] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6068] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6068] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6068] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6068] ioctl(4, LOOP_CLR_FD) = 0 [pid 6068] close(4) = 0 [pid 6068] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] <... futex resumed>) = 0 [pid 6068] <... futex resumed>) = 1 [pid 6067] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6067] <... futex resumed>) = 0 [pid 6067] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6067] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6069 attached [pid 6068] <... mknodat resumed>) = 0 [pid 6069] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6067] <... clone3 resumed> => {parent_tid=[1049]}, 88) = 1049 [pid 6068] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6068] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6069] <... rseq resumed>) = 0 [pid 6069] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6069] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6067] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6069] <... futex resumed>) = 0 [pid 6069] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6069] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6069] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6069] chdir(".") = 0 [pid 6069] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6067] <... futex resumed>) = 0 [pid 6067] close(3) = 0 [pid 6067] close(4) = 0 [pid 6067] close(5) = -1 EBADF (Bad file descriptor) [pid 6067] close(6) = -1 EBADF (Bad file descriptor) [pid 6067] close(7) = -1 EBADF (Bad file descriptor) [pid 6067] close(8) = -1 EBADF (Bad file descriptor) [pid 6067] close(9) = -1 EBADF (Bad file descriptor) [pid 6067] close(10) = -1 EBADF (Bad file descriptor) [pid 6067] close(11) = -1 EBADF (Bad file descriptor) [pid 6067] close(12) = -1 EBADF (Bad file descriptor) [pid 6067] close(13) = -1 EBADF (Bad file descriptor) [pid 6067] close(14) = -1 EBADF (Bad file descriptor) [pid 6067] close(15) = -1 EBADF (Bad file descriptor) [pid 6067] close(16) = -1 EBADF (Bad file descriptor) [pid 6067] close(17) = -1 EBADF (Bad file descriptor) [pid 6067] close(18) = -1 EBADF (Bad file descriptor) [pid 6067] close(19) = -1 EBADF (Bad file descriptor) [pid 6067] close(20) = -1 EBADF (Bad file descriptor) [pid 6067] close(21) = -1 EBADF (Bad file descriptor) [pid 6067] close(22) = -1 EBADF (Bad file descriptor) [pid 6067] close(23) = -1 EBADF (Bad file descriptor) [pid 6067] close(24) = -1 EBADF (Bad file descriptor) [pid 6067] close(25) = -1 EBADF (Bad file descriptor) [pid 6067] close(26) = -1 EBADF (Bad file descriptor) [pid 6067] close(27) = -1 EBADF (Bad file descriptor) [pid 6067] close(28) = -1 EBADF (Bad file descriptor) [pid 6067] close(29) = -1 EBADF (Bad file descriptor) [pid 6067] exit_group(0) = ? [pid 6068] <... futex resumed>) = ? [pid 6068] +++ exited with 0 +++ [pid 6069] <... futex resumed>) = ? [pid 6069] +++ exited with 0 +++ [pid 6067] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1047, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./349/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./349") = 0 [pid 5019] mkdir("./350", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 68.995421][ T6068] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1050 ./strace-static-x86_64: Process 6070 attached [pid 6070] set_robust_list(0x555556a426a0, 24) = 0 [pid 6070] chdir("./350") = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0) = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6070] write(3, "1000", 4) = 4 [pid 6070] close(3) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6070] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6070] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6070] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1051]}, 88) = 1051 [pid 6070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6070] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6071 attached [pid 6071] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6071] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6071] memfd_create("syzkaller", 0) = 3 [pid 6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6071] munmap(0x7f15b9a45000, 524288) = 0 [pid 6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6071] close(3) = 0 [pid 6071] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6071] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6071] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6071] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6071] ioctl(4, LOOP_CLR_FD) = 0 [pid 6071] close(4) = 0 [pid 6071] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] <... futex resumed>) = 0 [pid 6070] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6071] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6070] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6070] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1052]}, 88) = 1052 [pid 6070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6070] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6070] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6072 attached [pid 6072] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6072] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6072] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6072] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6071] <... mknodat resumed>) = 0 [pid 6071] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6071] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6072] <... mount resumed>) = 0 [pid 6072] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6072] chdir(".") = 0 [pid 6072] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = 0 [pid 6072] <... futex resumed>) = 1 [pid 6070] close(3) = 0 [pid 6070] close(4) = 0 [pid 6070] close(5) = -1 EBADF (Bad file descriptor) [pid 6070] close(6) = -1 EBADF (Bad file descriptor) [pid 6070] close(7 [pid 6072] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6070] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6070] close(8) = -1 EBADF (Bad file descriptor) [pid 6070] close(9) = -1 EBADF (Bad file descriptor) [pid 6070] close(10) = -1 EBADF (Bad file descriptor) [pid 6070] close(11) = -1 EBADF (Bad file descriptor) [pid 6070] close(12) = -1 EBADF (Bad file descriptor) [pid 6070] close(13) = -1 EBADF (Bad file descriptor) [pid 6070] close(14) = -1 EBADF (Bad file descriptor) [pid 6070] close(15) = -1 EBADF (Bad file descriptor) [pid 6070] close(16) = -1 EBADF (Bad file descriptor) [pid 6070] close(17) = -1 EBADF (Bad file descriptor) [pid 6070] close(18) = -1 EBADF (Bad file descriptor) [pid 6070] close(19) = -1 EBADF (Bad file descriptor) [pid 6070] close(20) = -1 EBADF (Bad file descriptor) [pid 6070] close(21) = -1 EBADF (Bad file descriptor) [pid 6070] close(22) = -1 EBADF (Bad file descriptor) [pid 6070] close(23) = -1 EBADF (Bad file descriptor) [pid 6070] close(24) = -1 EBADF (Bad file descriptor) [pid 6070] close(25) = -1 EBADF (Bad file descriptor) [pid 6070] close(26) = -1 EBADF (Bad file descriptor) [pid 6070] close(27) = -1 EBADF (Bad file descriptor) [pid 6070] close(28) = -1 EBADF (Bad file descriptor) [pid 6070] close(29) = -1 EBADF (Bad file descriptor) [pid 6070] exit_group(0 [pid 6071] <... futex resumed>) = ? [pid 6070] <... exit_group resumed>) = ? [pid 6071] +++ exited with 0 +++ [pid 6072] <... futex resumed>) = ? [pid 6072] +++ exited with 0 +++ [pid 6070] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1050, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 69.071159][ T6071] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./350/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./350") = 0 [pid 5019] mkdir("./351", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1053 ./strace-static-x86_64: Process 6073 attached [pid 6073] set_robust_list(0x555556a426a0, 24) = 0 [pid 6073] chdir("./351") = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6073] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6073] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6074 attached => {parent_tid=[1054]}, 88) = 1054 [pid 6074] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6073] rt_sigprocmask(SIG_SETMASK, [], [pid 6074] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6074] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6073] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6074] <... futex resumed>) = 0 [pid 6073] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6074] munmap(0x7f15b9a45000, 524288) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6074] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6074] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6074] ioctl(4, LOOP_CLR_FD) = 0 [pid 6074] close(4) = 0 [pid 6074] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] <... futex resumed>) = 0 [pid 6073] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6073] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1055]}, 88) = 1055 [pid 6073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6075 attached [pid 6074] <... futex resumed>) = 1 [pid 6073] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6073] <... futex resumed>) = 0 [pid 6075] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6073] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6075] <... rseq resumed>) = 0 [pid 6075] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6074] <... mknodat resumed>) = 0 [pid 6074] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6074] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6075] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6075] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6075] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6075] chdir(".") = 0 [pid 6075] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6075] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] close(3) = 0 [pid 6073] close(4) = 0 [pid 6073] close(5) = -1 EBADF (Bad file descriptor) [pid 6073] close(6) = -1 EBADF (Bad file descriptor) [pid 6073] close(7) = -1 EBADF (Bad file descriptor) [pid 6073] close(8) = -1 EBADF (Bad file descriptor) [pid 6073] close(9) = -1 EBADF (Bad file descriptor) [pid 6073] close(10) = -1 EBADF (Bad file descriptor) [pid 6073] close(11) = -1 EBADF (Bad file descriptor) [pid 6073] close(12) = -1 EBADF (Bad file descriptor) [pid 6073] close(13) = -1 EBADF (Bad file descriptor) [pid 6073] close(14) = -1 EBADF (Bad file descriptor) [pid 6073] close(15) = -1 EBADF (Bad file descriptor) [pid 6073] close(16) = -1 EBADF (Bad file descriptor) [pid 6073] close(17) = -1 EBADF (Bad file descriptor) [pid 6073] close(18) = -1 EBADF (Bad file descriptor) [pid 6073] close(19) = -1 EBADF (Bad file descriptor) [pid 6073] close(20) = -1 EBADF (Bad file descriptor) [pid 6073] close(21) = -1 EBADF (Bad file descriptor) [pid 6073] close(22) = -1 EBADF (Bad file descriptor) [pid 6073] close(23) = -1 EBADF (Bad file descriptor) [pid 6073] close(24) = -1 EBADF (Bad file descriptor) [pid 6073] close(25) = -1 EBADF (Bad file descriptor) [pid 6073] close(26) = -1 EBADF (Bad file descriptor) [pid 6073] close(27) = -1 EBADF (Bad file descriptor) [pid 6073] close(28) = -1 EBADF (Bad file descriptor) [pid 6073] close(29) = -1 EBADF (Bad file descriptor) [pid 6073] exit_group(0 [pid 6075] <... futex resumed>) = ? [pid 6074] <... futex resumed>) = ? [pid 6075] +++ exited with 0 +++ [pid 6074] +++ exited with 0 +++ [pid 6073] <... exit_group resumed>) = ? [pid 6073] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1053, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 69.162458][ T6074] loop0: detected capacity change from 0 to 1024 [pid 5019] unlink("./351/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./351") = 0 [pid 5019] mkdir("./352", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1056 ./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x555556a426a0, 24) = 0 [pid 6076] chdir("./352") = 0 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6076] setpgid(0, 0) = 0 [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6076] write(3, "1000", 4) = 4 [pid 6076] close(3) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6076] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6076] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6076] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6076] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6076] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6077 attached [pid 6077] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6077] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6077] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] <... clone3 resumed> => {parent_tid=[1057]}, 88) = 1057 [pid 6076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6076] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6076] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6077] memfd_create("syzkaller", 0) = 3 [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6077] munmap(0x7f15b9a45000, 524288) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6077] close(3) = 0 [pid 6077] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6077] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6077] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6077] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6077] ioctl(4, LOOP_CLR_FD) = 0 [pid 6077] close(4) = 0 [pid 6077] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6077] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6076] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6076] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6076] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6076] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1058]}, 88) = 1058 [pid 6076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6076] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6078 attached [pid 6077] <... mknodat resumed>) = 0 [pid 6078] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6078] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6077] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6078] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] <... mount resumed>) = 0 [pid 6078] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6078] chdir(".") = 0 [pid 6078] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = 0 [pid 6076] close(3) = 0 [pid 6076] close(4) = 0 [pid 6076] close(5) = -1 EBADF (Bad file descriptor) [pid 6076] close(6) = -1 EBADF (Bad file descriptor) [pid 6076] close(7) = -1 EBADF (Bad file descriptor) [pid 6076] close(8) = -1 EBADF (Bad file descriptor) [pid 6076] close(9) = -1 EBADF (Bad file descriptor) [pid 6076] close(10) = -1 EBADF (Bad file descriptor) [pid 6076] close(11) = -1 EBADF (Bad file descriptor) [pid 6076] close(12) = -1 EBADF (Bad file descriptor) [pid 6076] close(13) = -1 EBADF (Bad file descriptor) [pid 6076] close(14) = -1 EBADF (Bad file descriptor) [pid 6076] close(15) = -1 EBADF (Bad file descriptor) [pid 6076] close(16) = -1 EBADF (Bad file descriptor) [pid 6076] close(17) = -1 EBADF (Bad file descriptor) [pid 6076] close(18) = -1 EBADF (Bad file descriptor) [pid 6076] close(19) = -1 EBADF (Bad file descriptor) [pid 6076] close(20) = -1 EBADF (Bad file descriptor) [pid 6076] close(21) = -1 EBADF (Bad file descriptor) [pid 6076] close(22) = -1 EBADF (Bad file descriptor) [pid 6076] close(23) = -1 EBADF (Bad file descriptor) [pid 6076] close(24) = -1 EBADF (Bad file descriptor) [pid 6076] close(25) = -1 EBADF (Bad file descriptor) [pid 6076] close(26) = -1 EBADF (Bad file descriptor) [pid 6076] close(27) = -1 EBADF (Bad file descriptor) [pid 6076] close(28) = -1 EBADF (Bad file descriptor) [pid 6076] close(29) = -1 EBADF (Bad file descriptor) [pid 6076] exit_group(0 [pid 6077] <... futex resumed>) = ? [pid 6076] <... exit_group resumed>) = ? [pid 6077] +++ exited with 0 +++ [pid 6078] <... futex resumed>) = ? [pid 6078] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1056, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./352/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./352") = 0 [pid 5019] mkdir("./353", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1059 ./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x555556a426a0, 24) = 0 [pid 6079] chdir("./353") = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6079] setpgid(0, 0) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6079] write(3, "1000", 4) = 4 [pid 6079] close(3) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6079] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6079] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6079] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6079] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1060]}, 88) = 1060 [pid 6079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6079] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6080 attached [pid 6080] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6080] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 69.246862][ T6077] loop0: detected capacity change from 0 to 1024 [pid 6080] munmap(0x7f15b9a45000, 524288) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6080] close(3) = 0 [pid 6080] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6080] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6080] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6080] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6080] ioctl(4, LOOP_CLR_FD) = 0 [pid 6080] close(4) = 0 [pid 6080] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6080] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6079] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6079] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6079] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6081 attached => {parent_tid=[1061]}, 88) = 1061 [pid 6081] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6079] rt_sigprocmask(SIG_SETMASK, [], [pid 6081] <... rseq resumed>) = 0 [pid 6079] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6081] set_robust_list(0x7f15b9ac49a0, 24 [pid 6079] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... set_robust_list resumed>) = 0 [pid 6079] <... futex resumed>) = 0 [pid 6081] rt_sigprocmask(SIG_SETMASK, [], [pid 6079] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6081] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6081] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6081] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6080] <... mknodat resumed>) = 0 [pid 6080] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6080] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] <... mount resumed>) = 0 [pid 6081] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6081] chdir(".") = 0 [pid 6081] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... futex resumed>) = 0 [pid 6079] close(3) = 0 [pid 6079] close(4) = 0 [pid 6079] close(5) = -1 EBADF (Bad file descriptor) [pid 6079] close(6) = -1 EBADF (Bad file descriptor) [pid 6079] close(7) = -1 EBADF (Bad file descriptor) [pid 6079] close(8) = -1 EBADF (Bad file descriptor) [pid 6079] close(9) = -1 EBADF (Bad file descriptor) [pid 6079] close(10) = -1 EBADF (Bad file descriptor) [pid 6079] close(11) = -1 EBADF (Bad file descriptor) [pid 6079] close(12) = -1 EBADF (Bad file descriptor) [pid 6079] close(13) = -1 EBADF (Bad file descriptor) [pid 6079] close(14) = -1 EBADF (Bad file descriptor) [pid 6079] close(15) = -1 EBADF (Bad file descriptor) [pid 6079] close(16) = -1 EBADF (Bad file descriptor) [pid 6079] close(17) = -1 EBADF (Bad file descriptor) [pid 6079] close(18) = -1 EBADF (Bad file descriptor) [pid 6079] close(19) = -1 EBADF (Bad file descriptor) [pid 6079] close(20) = -1 EBADF (Bad file descriptor) [pid 6079] close(21) = -1 EBADF (Bad file descriptor) [pid 6079] close(22) = -1 EBADF (Bad file descriptor) [pid 6079] close(23) = -1 EBADF (Bad file descriptor) [pid 6079] close(24) = -1 EBADF (Bad file descriptor) [pid 6079] close(25) = -1 EBADF (Bad file descriptor) [pid 6079] close(26) = -1 EBADF (Bad file descriptor) [pid 6079] close(27) = -1 EBADF (Bad file descriptor) [pid 6079] close(28) = -1 EBADF (Bad file descriptor) [pid 6079] close(29) = -1 EBADF (Bad file descriptor) [pid 6079] exit_group(0) = ? [pid 6080] <... futex resumed>) = ? [pid 6080] +++ exited with 0 +++ [pid 6081] <... futex resumed>) = ? [pid 6081] +++ exited with 0 +++ [pid 6079] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1059, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./353/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./353") = 0 [pid 5019] mkdir("./354", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1062 ./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x555556a426a0, 24) = 0 [pid 6082] chdir("./354") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs") = 0 [ 69.308691][ T6080] loop0: detected capacity change from 0 to 1024 [pid 6082] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6082] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6082] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6083 attached => {parent_tid=[1063]}, 88) = 1063 [pid 6083] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6082] rt_sigprocmask(SIG_SETMASK, [], [pid 6083] <... rseq resumed>) = 0 [pid 6082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6083] set_robust_list(0x7f15c1e659a0, 24 [pid 6082] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] <... set_robust_list resumed>) = 0 [pid 6082] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6083] memfd_create("syzkaller", 0) = 3 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6083] munmap(0x7f15b9a45000, 524288) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6083] close(3) = 0 [pid 6083] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6083] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6083] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6083] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6083] ioctl(4, LOOP_CLR_FD) = 0 [pid 6083] close(4) = 0 [pid 6083] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6082] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6083] <... mknodat resumed>) = 0 [pid 6082] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6083] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6083] <... futex resumed>) = 0 [pid 6083] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] <... mprotect resumed>) = 0 [pid 6082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6084 attached [pid 6084] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6082] <... clone3 resumed> => {parent_tid=[1064]}, 88) = 1064 [pid 6084] <... rseq resumed>) = 0 [pid 6082] rt_sigprocmask(SIG_SETMASK, [], [pid 6084] set_robust_list(0x7f15b9ac49a0, 24 [pid 6082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6082] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6084] <... set_robust_list resumed>) = 0 [pid 6084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6084] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6084] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6084] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6084] chdir(".") = 0 [pid 6084] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6082] close(3) = 0 [pid 6082] close(4) = 0 [pid 6084] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] close(5) = -1 EBADF (Bad file descriptor) [pid 6082] close(6) = -1 EBADF (Bad file descriptor) [pid 6082] close(7) = -1 EBADF (Bad file descriptor) [pid 6082] close(8) = -1 EBADF (Bad file descriptor) [pid 6082] close(9) = -1 EBADF (Bad file descriptor) [pid 6082] close(10) = -1 EBADF (Bad file descriptor) [pid 6082] close(11) = -1 EBADF (Bad file descriptor) [pid 6082] close(12) = -1 EBADF (Bad file descriptor) [pid 6082] close(13) = -1 EBADF (Bad file descriptor) [pid 6082] close(14) = -1 EBADF (Bad file descriptor) [pid 6082] close(15) = -1 EBADF (Bad file descriptor) [pid 6082] close(16) = -1 EBADF (Bad file descriptor) [pid 6082] close(17) = -1 EBADF (Bad file descriptor) [pid 6082] close(18) = -1 EBADF (Bad file descriptor) [pid 6082] close(19) = -1 EBADF (Bad file descriptor) [pid 6082] close(20) = -1 EBADF (Bad file descriptor) [pid 6082] close(21) = -1 EBADF (Bad file descriptor) [pid 6082] close(22) = -1 EBADF (Bad file descriptor) [pid 6082] close(23) = -1 EBADF (Bad file descriptor) [pid 6082] close(24) = -1 EBADF (Bad file descriptor) [pid 6082] close(25) = -1 EBADF (Bad file descriptor) [pid 6082] close(26) = -1 EBADF (Bad file descriptor) [pid 6082] close(27) = -1 EBADF (Bad file descriptor) [pid 6082] close(28) = -1 EBADF (Bad file descriptor) [pid 6082] close(29) = -1 EBADF (Bad file descriptor) [pid 6082] exit_group(0 [pid 6083] <... futex resumed>) = ? [pid 6082] <... exit_group resumed>) = ? [pid 6084] <... futex resumed>) = ? [pid 6083] +++ exited with 0 +++ [pid 6084] +++ exited with 0 +++ [pid 6082] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1062, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./354/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./354") = 0 [pid 5019] mkdir("./355", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 69.383253][ T6083] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1065 ./strace-static-x86_64: Process 6085 attached [pid 6085] set_robust_list(0x555556a426a0, 24) = 0 [pid 6085] chdir("./355") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6085] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6085] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6085] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6086 attached => {parent_tid=[1066]}, 88) = 1066 [pid 6086] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6085] rt_sigprocmask(SIG_SETMASK, [], [pid 6086] <... rseq resumed>) = 0 [pid 6085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6086] set_robust_list(0x7f15c1e659a0, 24 [pid 6085] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... set_robust_list resumed>) = 0 [pid 6085] <... futex resumed>) = 0 [pid 6086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6085] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6086] memfd_create("syzkaller", 0) = 3 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6086] munmap(0x7f15b9a45000, 524288) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6086] close(3) = 0 [pid 6086] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6086] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6086] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6086] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6086] ioctl(4, LOOP_CLR_FD) = 0 [pid 6086] close(4) = 0 [pid 6086] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6086] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6085] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6086] <... futex resumed>) = 0 [pid 6085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6086] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6087 attached [pid 6085] <... clone3 resumed> => {parent_tid=[1067]}, 88) = 1067 [pid 6085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6087] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6085] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... mknodat resumed>) = 0 [pid 6085] <... futex resumed>) = 0 [pid 6085] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6086] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... rseq resumed>) = 0 [pid 6087] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6087] mkdir(".", 0777 [pid 6086] <... futex resumed>) = 0 [pid 6087] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6087] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6086] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] <... mount resumed>) = 0 [pid 6087] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6087] chdir(".") = 0 [pid 6087] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] close(5) = -1 EBADF (Bad file descriptor) [pid 6085] close(6) = -1 EBADF (Bad file descriptor) [pid 6085] close(7) = -1 EBADF (Bad file descriptor) [pid 6085] close(8) = -1 EBADF (Bad file descriptor) [pid 6085] close(9) = -1 EBADF (Bad file descriptor) [pid 6085] close(10) = -1 EBADF (Bad file descriptor) [pid 6085] close(11) = -1 EBADF (Bad file descriptor) [pid 6085] close(12) = -1 EBADF (Bad file descriptor) [pid 6085] close(13) = -1 EBADF (Bad file descriptor) [pid 6085] close(14) = -1 EBADF (Bad file descriptor) [pid 6085] close(15) = -1 EBADF (Bad file descriptor) [pid 6085] close(16) = -1 EBADF (Bad file descriptor) [pid 6085] close(17) = -1 EBADF (Bad file descriptor) [pid 6085] close(18) = -1 EBADF (Bad file descriptor) [pid 6085] close(19) = -1 EBADF (Bad file descriptor) [pid 6085] close(20) = -1 EBADF (Bad file descriptor) [pid 6085] close(21) = -1 EBADF (Bad file descriptor) [pid 6085] close(22) = -1 EBADF (Bad file descriptor) [pid 6085] close(23) = -1 EBADF (Bad file descriptor) [pid 6085] close(24) = -1 EBADF (Bad file descriptor) [pid 6085] close(25) = -1 EBADF (Bad file descriptor) [pid 6085] close(26) = -1 EBADF (Bad file descriptor) [pid 6085] close(27) = -1 EBADF (Bad file descriptor) [pid 6085] close(28) = -1 EBADF (Bad file descriptor) [pid 6085] close(29) = -1 EBADF (Bad file descriptor) [pid 6085] exit_group(0 [pid 6086] <... futex resumed>) = ? [pid 6085] <... exit_group resumed>) = ? [pid 6086] +++ exited with 0 +++ [pid 6087] +++ exited with 0 +++ [pid 6085] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1065, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./355/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./355") = 0 [pid 5019] mkdir("./356", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1068 ./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x555556a426a0, 24) = 0 [pid 6088] chdir("./356") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6088] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1069]}, 88) = 1069 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6088] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6089 attached [pid 6089] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6089] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 69.466956][ T6086] loop0: detected capacity change from 0 to 1024 [pid 6089] memfd_create("syzkaller", 0) = 3 [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6089] munmap(0x7f15b9a45000, 524288) = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6089] close(3) = 0 [pid 6089] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6089] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6089] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6089] ioctl(4, LOOP_CLR_FD) = 0 [pid 6089] close(4) = 0 [pid 6089] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = 0 [pid 6089] <... futex resumed>) = 1 [pid 6089] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6088] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6088] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6090 attached => {parent_tid=[1070]}, 88) = 1070 [pid 6088] rt_sigprocmask(SIG_SETMASK, [], [pid 6090] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6090] set_robust_list(0x7f15b9ac49a0, 24 [pid 6088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6088] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6088] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6090] <... set_robust_list resumed>) = 0 [pid 6090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6090] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6089] <... mknodat resumed>) = 0 [pid 6090] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6089] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6089] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] <... mount resumed>) = 0 [pid 6090] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6090] chdir(".") = 0 [pid 6090] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6088] <... futex resumed>) = 0 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] close(5) = -1 EBADF (Bad file descriptor) [pid 6088] close(6) = -1 EBADF (Bad file descriptor) [pid 6088] close(7) = -1 EBADF (Bad file descriptor) [pid 6088] close(8) = -1 EBADF (Bad file descriptor) [pid 6088] close(9) = -1 EBADF (Bad file descriptor) [pid 6088] close(10) = -1 EBADF (Bad file descriptor) [pid 6088] close(11) = -1 EBADF (Bad file descriptor) [pid 6088] close(12) = -1 EBADF (Bad file descriptor) [pid 6088] close(13) = -1 EBADF (Bad file descriptor) [pid 6088] close(14) = -1 EBADF (Bad file descriptor) [pid 6088] close(15) = -1 EBADF (Bad file descriptor) [pid 6088] close(16) = -1 EBADF (Bad file descriptor) [pid 6088] close(17) = -1 EBADF (Bad file descriptor) [pid 6088] close(18) = -1 EBADF (Bad file descriptor) [pid 6088] close(19) = -1 EBADF (Bad file descriptor) [pid 6088] close(20) = -1 EBADF (Bad file descriptor) [pid 6088] close(21) = -1 EBADF (Bad file descriptor) [pid 6088] close(22) = -1 EBADF (Bad file descriptor) [pid 6088] close(23) = -1 EBADF (Bad file descriptor) [pid 6088] close(24) = -1 EBADF (Bad file descriptor) [pid 6088] close(25) = -1 EBADF (Bad file descriptor) [pid 6088] close(26) = -1 EBADF (Bad file descriptor) [pid 6088] close(27) = -1 EBADF (Bad file descriptor) [pid 6088] close(28 [pid 6090] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6088] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6088] close(29) = -1 EBADF (Bad file descriptor) [pid 6088] exit_group(0 [pid 6089] <... futex resumed>) = ? [pid 6088] <... exit_group resumed>) = ? [pid 6090] <... futex resumed>) = ? [pid 6089] +++ exited with 0 +++ [pid 6090] +++ exited with 0 +++ [pid 6088] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1068, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./356/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./356") = 0 [pid 5019] mkdir("./357", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1071 ./strace-static-x86_64: Process 6091 attached [pid 6091] set_robust_list(0x555556a426a0, 24) = 0 [pid 6091] chdir("./357") = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6091] setpgid(0, 0) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6091] write(3, "1000", 4) = 4 [pid 6091] close(3) = 0 [pid 6091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6091] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.533491][ T6089] loop0: detected capacity change from 0 to 1024 [pid 6091] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6091] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6091] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6092 attached => {parent_tid=[1072]}, 88) = 1072 [pid 6092] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6092] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6091] rt_sigprocmask(SIG_SETMASK, [], [pid 6092] rt_sigprocmask(SIG_SETMASK, [], [pid 6091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6091] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6092] memfd_create("syzkaller", 0) = 3 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6092] munmap(0x7f15b9a45000, 524288) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6092] close(3) = 0 [pid 6092] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6092] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6092] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6092] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6092] ioctl(4, LOOP_CLR_FD) = 0 [pid 6092] close(4) = 0 [pid 6092] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6091] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1073]}, 88) = 1073 [pid 6091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6091] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6091] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6092] <... futex resumed>) = 1 [pid 6092] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6093 attached [pid 6093] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6092] <... mknodat resumed>) = 0 [pid 6092] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] <... rseq resumed>) = 0 [pid 6093] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6093] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6093] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6093] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6093] chdir(".") = 0 [pid 6093] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = 0 [pid 6091] close(3) = 0 [pid 6091] close(4) = 0 [pid 6091] close(5) = -1 EBADF (Bad file descriptor) [pid 6091] close(6) = -1 EBADF (Bad file descriptor) [pid 6091] close(7) = -1 EBADF (Bad file descriptor) [pid 6091] close(8) = -1 EBADF (Bad file descriptor) [pid 6091] close(9) = -1 EBADF (Bad file descriptor) [pid 6091] close(10) = -1 EBADF (Bad file descriptor) [pid 6091] close(11) = -1 EBADF (Bad file descriptor) [pid 6091] close(12) = -1 EBADF (Bad file descriptor) [pid 6091] close(13) = -1 EBADF (Bad file descriptor) [pid 6091] close(14) = -1 EBADF (Bad file descriptor) [pid 6091] close(15) = -1 EBADF (Bad file descriptor) [pid 6093] <... futex resumed>) = 1 [pid 6091] close(16 [pid 6093] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6091] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] close(17) = -1 EBADF (Bad file descriptor) [pid 6091] close(18) = -1 EBADF (Bad file descriptor) [pid 6091] close(19) = -1 EBADF (Bad file descriptor) [pid 6091] close(20) = -1 EBADF (Bad file descriptor) [pid 6091] close(21) = -1 EBADF (Bad file descriptor) [pid 6091] close(22) = -1 EBADF (Bad file descriptor) [pid 6091] close(23) = -1 EBADF (Bad file descriptor) [pid 6091] close(24) = -1 EBADF (Bad file descriptor) [pid 6091] close(25) = -1 EBADF (Bad file descriptor) [pid 6091] close(26) = -1 EBADF (Bad file descriptor) [pid 6091] close(27) = -1 EBADF (Bad file descriptor) [pid 6091] close(28) = -1 EBADF (Bad file descriptor) [pid 6091] close(29) = -1 EBADF (Bad file descriptor) [pid 6091] exit_group(0 [pid 6093] <... futex resumed>) = ? [pid 6092] <... futex resumed>) = ? [pid 6091] <... exit_group resumed>) = ? [pid 6093] +++ exited with 0 +++ [pid 6092] +++ exited with 0 +++ [pid 6091] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1071, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./357/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./357") = 0 [pid 5019] mkdir("./358", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 69.604480][ T6092] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1074 ./strace-static-x86_64: Process 6094 attached [pid 6094] set_robust_list(0x555556a426a0, 24) = 0 [pid 6094] chdir("./358") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6094] write(3, "1000", 4) = 4 [pid 6094] close(3) = 0 [pid 6094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6094] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6094] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6094] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6095 attached [pid 6095] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6095] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6095] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] <... clone3 resumed> => {parent_tid=[1075]}, 88) = 1075 [pid 6094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6094] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6095] <... futex resumed>) = 0 [pid 6095] memfd_create("syzkaller", 0) = 3 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6095] munmap(0x7f15b9a45000, 524288) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6095] close(3) = 0 [pid 6095] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6095] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6095] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6095] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6095] ioctl(4, LOOP_CLR_FD) = 0 [pid 6095] close(4) = 0 [pid 6095] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... futex resumed>) = 0 [pid 6094] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6094] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1076]}, 88) = 1076 ./strace-static-x86_64: Process 6096 attached [pid 6094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6094] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6094] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6095] <... futex resumed>) = 1 [pid 6095] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6096] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6095] <... mknodat resumed>) = 0 [pid 6096] set_robust_list(0x7f15b9ac49a0, 24 [pid 6095] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6095] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6096] <... set_robust_list resumed>) = 0 [pid 6096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6096] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6096] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6096] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6096] chdir(".") = 0 [pid 6096] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... futex resumed>) = 0 [pid 6094] close(3) = 0 [pid 6094] close(4) = 0 [pid 6094] close(5) = -1 EBADF (Bad file descriptor) [pid 6094] close(6) = -1 EBADF (Bad file descriptor) [pid 6094] close(7) = -1 EBADF (Bad file descriptor) [pid 6094] close(8) = -1 EBADF (Bad file descriptor) [pid 6094] close(9) = -1 EBADF (Bad file descriptor) [pid 6094] close(10) = -1 EBADF (Bad file descriptor) [pid 6094] close(11) = -1 EBADF (Bad file descriptor) [pid 6094] close(12) = -1 EBADF (Bad file descriptor) [pid 6094] close(13) = -1 EBADF (Bad file descriptor) [pid 6094] close(14 [pid 6096] <... futex resumed>) = 1 [pid 6094] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6096] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] close(15) = -1 EBADF (Bad file descriptor) [pid 6094] close(16) = -1 EBADF (Bad file descriptor) [pid 6094] close(17) = -1 EBADF (Bad file descriptor) [pid 6094] close(18) = -1 EBADF (Bad file descriptor) [pid 6094] close(19) = -1 EBADF (Bad file descriptor) [pid 6094] close(20) = -1 EBADF (Bad file descriptor) [pid 6094] close(21) = -1 EBADF (Bad file descriptor) [pid 6094] close(22) = -1 EBADF (Bad file descriptor) [pid 6094] close(23) = -1 EBADF (Bad file descriptor) [pid 6094] close(24) = -1 EBADF (Bad file descriptor) [pid 6094] close(25) = -1 EBADF (Bad file descriptor) [pid 6094] close(26) = -1 EBADF (Bad file descriptor) [pid 6094] close(27) = -1 EBADF (Bad file descriptor) [pid 6094] close(28) = -1 EBADF (Bad file descriptor) [pid 6094] close(29) = -1 EBADF (Bad file descriptor) [pid 6094] exit_group(0 [pid 6096] <... futex resumed>) = ? [pid 6095] <... futex resumed>) = ? [pid 6094] <... exit_group resumed>) = ? [pid 6096] +++ exited with 0 +++ [pid 6095] +++ exited with 0 +++ [pid 6094] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1074, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./358/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./358") = 0 [pid 5019] mkdir("./359", 0777) = 0 [ 69.683852][ T6095] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6097 attached [pid 6097] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1077 [pid 6097] <... set_robust_list resumed>) = 0 [pid 6097] chdir("./359") = 0 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6097] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6097] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6097] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6097] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6098 attached [pid 6098] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6098] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6098] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6098] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] <... clone3 resumed> => {parent_tid=[1078]}, 88) = 1078 [pid 6097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6097] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6098] <... futex resumed>) = 0 [pid 6097] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6098] memfd_create("syzkaller", 0) = 3 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6098] munmap(0x7f15b9a45000, 524288) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6098] close(3) = 0 [pid 6098] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6098] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6098] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6098] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6098] ioctl(4, LOOP_CLR_FD) = 0 [pid 6098] close(4) = 0 [pid 6098] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6098] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6097] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6097] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6097] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6097] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1079]}, 88) = 1079 [pid 6097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6097] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6099 attached [pid 6098] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6099] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6098] <... mknodat resumed>) = 0 [pid 6099] <... rseq resumed>) = 0 [pid 6098] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6099] set_robust_list(0x7f15b9ac49a0, 24 [pid 6098] <... futex resumed>) = 0 [pid 6099] <... set_robust_list resumed>) = 0 [pid 6098] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6099] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6099] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6099] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6099] chdir(".") = 0 [pid 6099] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6097] close(3) = 0 [pid 6097] close(4 [pid 6099] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] <... close resumed>) = 0 [pid 6097] close(5) = -1 EBADF (Bad file descriptor) [pid 6097] close(6) = -1 EBADF (Bad file descriptor) [pid 6097] close(7) = -1 EBADF (Bad file descriptor) [pid 6097] close(8) = -1 EBADF (Bad file descriptor) [pid 6097] close(9) = -1 EBADF (Bad file descriptor) [pid 6097] close(10) = -1 EBADF (Bad file descriptor) [pid 6097] close(11) = -1 EBADF (Bad file descriptor) [pid 6097] close(12) = -1 EBADF (Bad file descriptor) [pid 6097] close(13) = -1 EBADF (Bad file descriptor) [pid 6097] close(14) = -1 EBADF (Bad file descriptor) [pid 6097] close(15) = -1 EBADF (Bad file descriptor) [pid 6097] close(16) = -1 EBADF (Bad file descriptor) [pid 6097] close(17) = -1 EBADF (Bad file descriptor) [pid 6097] close(18) = -1 EBADF (Bad file descriptor) [pid 6097] close(19) = -1 EBADF (Bad file descriptor) [pid 6097] close(20) = -1 EBADF (Bad file descriptor) [pid 6097] close(21) = -1 EBADF (Bad file descriptor) [pid 6097] close(22) = -1 EBADF (Bad file descriptor) [pid 6097] close(23) = -1 EBADF (Bad file descriptor) [pid 6097] close(24) = -1 EBADF (Bad file descriptor) [pid 6097] close(25) = -1 EBADF (Bad file descriptor) [pid 6097] close(26) = -1 EBADF (Bad file descriptor) [pid 6097] close(27) = -1 EBADF (Bad file descriptor) [pid 6097] close(28) = -1 EBADF (Bad file descriptor) [pid 6097] close(29) = -1 EBADF (Bad file descriptor) [pid 6097] exit_group(0 [pid 6098] <... futex resumed>) = ? [pid 6097] <... exit_group resumed>) = ? [pid 6099] <... futex resumed>) = ? [pid 6098] +++ exited with 0 +++ [pid 6099] +++ exited with 0 +++ [pid 6097] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1077, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./359/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./359") = 0 [pid 5019] mkdir("./360", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 69.762470][ T6098] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6100 attached [pid 6100] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1080 [pid 6100] <... set_robust_list resumed>) = 0 [pid 6100] chdir("./360") = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6100] setpgid(0, 0) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6100] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6100] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6100] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1081]}, 88) = 1081 [pid 6100] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6101 attached [pid 6101] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6101] set_robust_list(0x7f15c1e659a0, 24 [pid 6100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6101] <... set_robust_list resumed>) = 0 [pid 6101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6101] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6100] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6101] memfd_create("syzkaller", 0) = 3 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6101] munmap(0x7f15b9a45000, 524288) = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6101] close(3) = 0 [pid 6101] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6101] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6101] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6101] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6101] ioctl(4, LOOP_CLR_FD) = 0 [pid 6101] close(4) = 0 [pid 6101] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] <... futex resumed>) = 0 [pid 6100] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6100] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6102 attached => {parent_tid=[1082]}, 88) = 1082 [pid 6102] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6100] rt_sigprocmask(SIG_SETMASK, [], [pid 6102] <... rseq resumed>) = 0 [pid 6100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6102] set_robust_list(0x7f15b9ac49a0, 24 [pid 6100] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6102] <... set_robust_list resumed>) = 0 [pid 6101] <... futex resumed>) = 1 [pid 6101] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6101] <... mknodat resumed>) = 0 [pid 6102] mkdir(".", 0777 [pid 6101] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6101] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6102] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6102] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6102] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6102] chdir(".") = 0 [pid 6102] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6100] close(3) = 0 [pid 6100] close(4) = 0 [pid 6100] close(5 [pid 6102] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6100] close(6) = -1 EBADF (Bad file descriptor) [pid 6100] close(7) = -1 EBADF (Bad file descriptor) [pid 6100] close(8) = -1 EBADF (Bad file descriptor) [pid 6100] close(9) = -1 EBADF (Bad file descriptor) [pid 6100] close(10) = -1 EBADF (Bad file descriptor) [pid 6100] close(11) = -1 EBADF (Bad file descriptor) [pid 6100] close(12) = -1 EBADF (Bad file descriptor) [pid 6100] close(13) = -1 EBADF (Bad file descriptor) [pid 6100] close(14) = -1 EBADF (Bad file descriptor) [pid 6100] close(15) = -1 EBADF (Bad file descriptor) [pid 6100] close(16) = -1 EBADF (Bad file descriptor) [pid 6100] close(17) = -1 EBADF (Bad file descriptor) [pid 6100] close(18) = -1 EBADF (Bad file descriptor) [pid 6100] close(19) = -1 EBADF (Bad file descriptor) [pid 6100] close(20) = -1 EBADF (Bad file descriptor) [pid 6100] close(21) = -1 EBADF (Bad file descriptor) [pid 6100] close(22) = -1 EBADF (Bad file descriptor) [pid 6100] close(23) = -1 EBADF (Bad file descriptor) [pid 6100] close(24) = -1 EBADF (Bad file descriptor) [pid 6100] close(25) = -1 EBADF (Bad file descriptor) [pid 6100] close(26) = -1 EBADF (Bad file descriptor) [pid 6100] close(27) = -1 EBADF (Bad file descriptor) [pid 6100] close(28) = -1 EBADF (Bad file descriptor) [pid 6100] close(29) = -1 EBADF (Bad file descriptor) [pid 6100] exit_group(0) = ? [pid 6102] <... futex resumed>) = ? [pid 6101] <... futex resumed>) = ? [pid 6101] +++ exited with 0 +++ [pid 6102] +++ exited with 0 +++ [pid 6100] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1080, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./360/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./360") = 0 [pid 5019] mkdir("./361", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1083 ./strace-static-x86_64: Process 6103 attached [pid 6103] set_robust_list(0x555556a426a0, 24) = 0 [pid 6103] chdir("./361") = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6103] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6103] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6103] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6104 attached [pid 6104] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6104] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6104] rt_sigprocmask(SIG_SETMASK, [], [pid 6103] <... clone3 resumed> => {parent_tid=[1084]}, 88) = 1084 [pid 6104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6104] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6103] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] <... futex resumed>) = 0 [pid 6104] memfd_create("syzkaller", 0 [pid 6103] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6104] <... memfd_create resumed>) = 3 [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 69.842631][ T6101] loop0: detected capacity change from 0 to 1024 [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6104] munmap(0x7f15b9a45000, 524288) = 0 [pid 6104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6104] close(3) = 0 [pid 6104] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6104] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6104] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6104] ioctl(4, LOOP_CLR_FD) = 0 [pid 6104] close(4) = 0 [pid 6104] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] <... futex resumed>) = 0 [pid 6103] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6104] <... futex resumed>) = 0 [pid 6104] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6103] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6103] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1085]}, 88) = 1085 [pid 6104] <... mknodat resumed>) = 0 [pid 6103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6103] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6105 attached [pid 6105] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6105] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6104] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] mkdir(".", 0777 [pid 6104] <... futex resumed>) = 0 [pid 6105] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6105] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6104] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] <... mount resumed>) = 0 [pid 6105] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6105] chdir(".") = 0 [pid 6105] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] <... futex resumed>) = 0 [pid 6103] close(3) = 0 [pid 6103] close(4) = 0 [pid 6103] close(5) = -1 EBADF (Bad file descriptor) [pid 6103] close(6) = -1 EBADF (Bad file descriptor) [pid 6103] close(7) = -1 EBADF (Bad file descriptor) [pid 6103] close(8) = -1 EBADF (Bad file descriptor) [pid 6103] close(9) = -1 EBADF (Bad file descriptor) [pid 6103] close(10) = -1 EBADF (Bad file descriptor) [pid 6103] close(11) = -1 EBADF (Bad file descriptor) [pid 6103] close(12) = -1 EBADF (Bad file descriptor) [pid 6103] close(13) = -1 EBADF (Bad file descriptor) [pid 6103] close(14) = -1 EBADF (Bad file descriptor) [pid 6103] close(15) = -1 EBADF (Bad file descriptor) [pid 6103] close(16) = -1 EBADF (Bad file descriptor) [pid 6103] close(17) = -1 EBADF (Bad file descriptor) [pid 6103] close(18) = -1 EBADF (Bad file descriptor) [pid 6103] close(19) = -1 EBADF (Bad file descriptor) [pid 6103] close(20) = -1 EBADF (Bad file descriptor) [pid 6103] close(21) = -1 EBADF (Bad file descriptor) [pid 6103] close(22) = -1 EBADF (Bad file descriptor) [pid 6103] close(23) = -1 EBADF (Bad file descriptor) [pid 6103] close(24) = -1 EBADF (Bad file descriptor) [pid 6103] close(25) = -1 EBADF (Bad file descriptor) [pid 6103] close(26) = -1 EBADF (Bad file descriptor) [pid 6103] close(27) = -1 EBADF (Bad file descriptor) [pid 6103] close(28) = -1 EBADF (Bad file descriptor) [pid 6103] close(29) = -1 EBADF (Bad file descriptor) [pid 6103] exit_group(0) = ? [pid 6105] <... futex resumed>) = ? [pid 6104] <... futex resumed>) = ? [pid 6104] +++ exited with 0 +++ [pid 6105] +++ exited with 0 +++ [pid 6103] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1083, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./361/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./361") = 0 [pid 5019] mkdir("./362", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1086 ./strace-static-x86_64: Process 6106 attached [pid 6106] set_robust_list(0x555556a426a0, 24) = 0 [pid 6106] chdir("./362") = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6106] setpgid(0, 0) = 0 [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6106] write(3, "1000", 4) = 4 [pid 6106] close(3) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6106] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 69.909485][ T6104] loop0: detected capacity change from 0 to 1024 [pid 6106] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6107 attached => {parent_tid=[1087]}, 88) = 1087 [pid 6107] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6107] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6107] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6106] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6107] memfd_create("syzkaller", 0 [pid 6106] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6107] <... memfd_create resumed>) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6107] munmap(0x7f15b9a45000, 524288) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6107] close(3) = 0 [pid 6107] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6107] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6107] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6107] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6107] ioctl(4, LOOP_CLR_FD) = 0 [pid 6107] close(4) = 0 [pid 6107] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6107] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] <... mknodat resumed>) = 0 [pid 6106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6106] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6108 attached => {parent_tid=[1088]}, 88) = 1088 [pid 6106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6106] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6107] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6107] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6108] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6108] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6108] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6108] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6108] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6108] chdir(".") = 0 [pid 6108] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] close(3) = 0 [pid 6106] close(4 [pid 6108] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... close resumed>) = 0 [pid 6106] close(5) = -1 EBADF (Bad file descriptor) [pid 6106] close(6) = -1 EBADF (Bad file descriptor) [pid 6106] close(7) = -1 EBADF (Bad file descriptor) [pid 6106] close(8) = -1 EBADF (Bad file descriptor) [pid 6106] close(9) = -1 EBADF (Bad file descriptor) [pid 6106] close(10) = -1 EBADF (Bad file descriptor) [pid 6106] close(11) = -1 EBADF (Bad file descriptor) [pid 6106] close(12) = -1 EBADF (Bad file descriptor) [pid 6106] close(13) = -1 EBADF (Bad file descriptor) [pid 6106] close(14) = -1 EBADF (Bad file descriptor) [pid 6106] close(15) = -1 EBADF (Bad file descriptor) [pid 6106] close(16) = -1 EBADF (Bad file descriptor) [pid 6106] close(17) = -1 EBADF (Bad file descriptor) [pid 6106] close(18) = -1 EBADF (Bad file descriptor) [pid 6106] close(19) = -1 EBADF (Bad file descriptor) [pid 6106] close(20) = -1 EBADF (Bad file descriptor) [pid 6106] close(21) = -1 EBADF (Bad file descriptor) [pid 6106] close(22) = -1 EBADF (Bad file descriptor) [pid 6106] close(23) = -1 EBADF (Bad file descriptor) [pid 6106] close(24) = -1 EBADF (Bad file descriptor) [pid 6106] close(25) = -1 EBADF (Bad file descriptor) [pid 6106] close(26) = -1 EBADF (Bad file descriptor) [pid 6106] close(27) = -1 EBADF (Bad file descriptor) [pid 6106] close(28) = -1 EBADF (Bad file descriptor) [pid 6106] close(29) = -1 EBADF (Bad file descriptor) [pid 6106] exit_group(0 [pid 6107] <... futex resumed>) = ? [pid 6106] <... exit_group resumed>) = ? [pid 6108] <... futex resumed>) = ? [pid 6107] +++ exited with 0 +++ [pid 6108] +++ exited with 0 +++ [pid 6106] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1086, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./362/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./362") = 0 [pid 5019] mkdir("./363", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1089 ./strace-static-x86_64: Process 6109 attached [ 69.981555][ T6107] loop0: detected capacity change from 0 to 1024 [pid 6109] set_robust_list(0x555556a426a0, 24) = 0 [pid 6109] chdir("./363") = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4) = 4 [pid 6109] close(3) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6109] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6109] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6109] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6109] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6110 attached => {parent_tid=[1090]}, 88) = 1090 [pid 6110] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6110] set_robust_list(0x7f15c1e659a0, 24 [pid 6109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6110] <... set_robust_list resumed>) = 0 [pid 6110] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6110] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] memfd_create("syzkaller", 0) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6110] munmap(0x7f15b9a45000, 524288) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6110] close(3) = 0 [pid 6110] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6110] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6110] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6110] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6110] ioctl(4, LOOP_CLR_FD) = 0 [pid 6110] close(4) = 0 [pid 6110] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6110] <... futex resumed>) = 1 [pid 6109] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6109] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6109] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6110] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6109] <... clone3 resumed> => {parent_tid=[1091]}, 88) = 1091 [pid 6109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6109] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] <... mknodat resumed>) = 0 [pid 6110] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6110] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6111 attached [pid 6111] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6111] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6111] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6111] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6111] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6111] chdir(".") = 0 [pid 6111] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] <... futex resumed>) = 0 [pid 6109] close(3) = 0 [pid 6109] close(4 [pid 6111] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] <... close resumed>) = 0 [pid 6109] close(5) = -1 EBADF (Bad file descriptor) [pid 6109] close(6) = -1 EBADF (Bad file descriptor) [pid 6109] close(7) = -1 EBADF (Bad file descriptor) [pid 6109] close(8) = -1 EBADF (Bad file descriptor) [pid 6109] close(9) = -1 EBADF (Bad file descriptor) [pid 6109] close(10) = -1 EBADF (Bad file descriptor) [pid 6109] close(11) = -1 EBADF (Bad file descriptor) [pid 6109] close(12) = -1 EBADF (Bad file descriptor) [pid 6109] close(13) = -1 EBADF (Bad file descriptor) [pid 6109] close(14) = -1 EBADF (Bad file descriptor) [pid 6109] close(15) = -1 EBADF (Bad file descriptor) [pid 6109] close(16) = -1 EBADF (Bad file descriptor) [pid 6109] close(17) = -1 EBADF (Bad file descriptor) [pid 6109] close(18) = -1 EBADF (Bad file descriptor) [pid 6109] close(19) = -1 EBADF (Bad file descriptor) [pid 6109] close(20) = -1 EBADF (Bad file descriptor) [pid 6109] close(21) = -1 EBADF (Bad file descriptor) [pid 6109] close(22) = -1 EBADF (Bad file descriptor) [pid 6109] close(23) = -1 EBADF (Bad file descriptor) [pid 6109] close(24) = -1 EBADF (Bad file descriptor) [pid 6109] close(25) = -1 EBADF (Bad file descriptor) [pid 6109] close(26) = -1 EBADF (Bad file descriptor) [pid 6109] close(27) = -1 EBADF (Bad file descriptor) [pid 6109] close(28) = -1 EBADF (Bad file descriptor) [pid 6109] close(29) = -1 EBADF (Bad file descriptor) [pid 6109] exit_group(0 [pid 6111] <... futex resumed>) = ? [pid 6110] <... futex resumed>) = ? [pid 6109] <... exit_group resumed>) = ? [pid 6111] +++ exited with 0 +++ [pid 6110] +++ exited with 0 +++ [pid 6109] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1089, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [ 70.062858][ T6110] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./363/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./363") = 0 [pid 5019] mkdir("./364", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1092 ./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x555556a426a0, 24) = 0 [pid 6112] chdir("./364") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6112] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6112] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6112] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6113 attached => {parent_tid=[1093]}, 88) = 1093 [pid 6113] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6112] rt_sigprocmask(SIG_SETMASK, [], [pid 6113] <... rseq resumed>) = 0 [pid 6112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6113] set_robust_list(0x7f15c1e659a0, 24 [pid 6112] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... set_robust_list resumed>) = 0 [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6113] memfd_create("syzkaller", 0) = 3 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6113] munmap(0x7f15b9a45000, 524288) = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6113] close(3) = 0 [pid 6113] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6113] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6113] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6113] ioctl(4, LOOP_CLR_FD) = 0 [pid 6113] close(4) = 0 [pid 6113] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = 1 [pid 6113] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6112] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6113] <... mknodat resumed>) = 0 [pid 6112] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6113] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] <... mprotect resumed>) = 0 [pid 6112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6114 attached [pid 6114] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6112] <... clone3 resumed> => {parent_tid=[1094]}, 88) = 1094 [pid 6114] <... rseq resumed>) = 0 [pid 6112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6114] set_robust_list(0x7f15b9ac49a0, 24 [pid 6112] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... set_robust_list resumed>) = 0 [pid 6112] <... futex resumed>) = 0 [pid 6114] rt_sigprocmask(SIG_SETMASK, [], [pid 6112] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6114] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6114] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6114] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6114] chdir(".") = 0 [pid 6114] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6112] close(3) = 0 [pid 6112] close(4) = 0 [pid 6112] close(5) = -1 EBADF (Bad file descriptor) [pid 6112] close(6) = -1 EBADF (Bad file descriptor) [pid 6114] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] close(7) = -1 EBADF (Bad file descriptor) [pid 6112] close(8) = -1 EBADF (Bad file descriptor) [pid 6112] close(9) = -1 EBADF (Bad file descriptor) [pid 6112] close(10) = -1 EBADF (Bad file descriptor) [pid 6112] close(11) = -1 EBADF (Bad file descriptor) [pid 6112] close(12) = -1 EBADF (Bad file descriptor) [pid 6112] close(13) = -1 EBADF (Bad file descriptor) [pid 6112] close(14) = -1 EBADF (Bad file descriptor) [pid 6112] close(15) = -1 EBADF (Bad file descriptor) [pid 6112] close(16) = -1 EBADF (Bad file descriptor) [pid 6112] close(17) = -1 EBADF (Bad file descriptor) [pid 6112] close(18) = -1 EBADF (Bad file descriptor) [pid 6112] close(19) = -1 EBADF (Bad file descriptor) [pid 6112] close(20) = -1 EBADF (Bad file descriptor) [pid 6112] close(21) = -1 EBADF (Bad file descriptor) [pid 6112] close(22) = -1 EBADF (Bad file descriptor) [pid 6112] close(23) = -1 EBADF (Bad file descriptor) [pid 6112] close(24) = -1 EBADF (Bad file descriptor) [pid 6112] close(25) = -1 EBADF (Bad file descriptor) [pid 6112] close(26) = -1 EBADF (Bad file descriptor) [pid 6112] close(27) = -1 EBADF (Bad file descriptor) [pid 6112] close(28) = -1 EBADF (Bad file descriptor) [pid 6112] close(29) = -1 EBADF (Bad file descriptor) [pid 6112] exit_group(0 [pid 6113] <... futex resumed>) = ? [pid 6114] <... futex resumed>) = ? [pid 6112] <... exit_group resumed>) = ? [pid 6113] +++ exited with 0 +++ [pid 6114] +++ exited with 0 +++ [pid 6112] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1092, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./364/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./364") = 0 [pid 5019] mkdir("./365", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.129160][ T6113] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1095 ./strace-static-x86_64: Process 6115 attached [pid 6115] set_robust_list(0x555556a426a0, 24) = 0 [pid 6115] chdir("./365") = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] setpgid(0, 0) = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6115] write(3, "1000", 4) = 4 [pid 6115] close(3) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6115] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6115] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6115] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6116 attached [pid 6116] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6115] <... clone3 resumed> => {parent_tid=[1096]}, 88) = 1096 [pid 6115] rt_sigprocmask(SIG_SETMASK, [], [pid 6116] set_robust_list(0x7f15c1e659a0, 24 [pid 6115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6116] <... set_robust_list resumed>) = 0 [pid 6116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6116] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6116] <... futex resumed>) = 0 [pid 6115] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6116] munmap(0x7f15b9a45000, 524288) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6116] close(3) = 0 [pid 6116] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6116] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6116] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6116] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6116] ioctl(4, LOOP_CLR_FD) = 0 [pid 6116] close(4) = 0 [pid 6116] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6116] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] <... futex resumed>) = 0 [pid 6115] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6115] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1097]}, 88) = 1097 [pid 6115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6115] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6115] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6117 attached [pid 6117] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6117] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6117] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6117] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6117] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6116] <... futex resumed>) = 0 [pid 6116] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6117] <... mount resumed>) = 0 [pid 6117] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6117] chdir(".") = 0 [pid 6117] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6115] <... futex resumed>) = 0 [pid 6117] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6116] <... mknodat resumed>) = 0 [pid 6116] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6116] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] close(3) = 0 [pid 6115] close(4) = 0 [pid 6115] close(5) = -1 EBADF (Bad file descriptor) [pid 6115] close(6) = -1 EBADF (Bad file descriptor) [pid 6115] close(7) = -1 EBADF (Bad file descriptor) [pid 6115] close(8) = -1 EBADF (Bad file descriptor) [pid 6115] close(9) = -1 EBADF (Bad file descriptor) [pid 6115] close(10) = -1 EBADF (Bad file descriptor) [pid 6115] close(11) = -1 EBADF (Bad file descriptor) [pid 6115] close(12) = -1 EBADF (Bad file descriptor) [pid 6115] close(13) = -1 EBADF (Bad file descriptor) [pid 6115] close(14) = -1 EBADF (Bad file descriptor) [pid 6115] close(15) = -1 EBADF (Bad file descriptor) [pid 6115] close(16) = -1 EBADF (Bad file descriptor) [pid 6115] close(17) = -1 EBADF (Bad file descriptor) [pid 6115] close(18) = -1 EBADF (Bad file descriptor) [pid 6115] close(19) = -1 EBADF (Bad file descriptor) [pid 6115] close(20) = -1 EBADF (Bad file descriptor) [pid 6115] close(21) = -1 EBADF (Bad file descriptor) [pid 6115] close(22) = -1 EBADF (Bad file descriptor) [pid 6115] close(23) = -1 EBADF (Bad file descriptor) [pid 6115] close(24) = -1 EBADF (Bad file descriptor) [pid 6115] close(25) = -1 EBADF (Bad file descriptor) [pid 6115] close(26) = -1 EBADF (Bad file descriptor) [pid 6115] close(27) = -1 EBADF (Bad file descriptor) [pid 6115] close(28) = -1 EBADF (Bad file descriptor) [pid 6115] close(29) = -1 EBADF (Bad file descriptor) [pid 6115] exit_group(0 [pid 6117] <... futex resumed>) = ? [pid 6116] <... futex resumed>) = ? [pid 6115] <... exit_group resumed>) = ? [pid 6117] +++ exited with 0 +++ [pid 6116] +++ exited with 0 +++ [pid 6115] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1095, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./365/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./365") = 0 [pid 5019] mkdir("./366", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1098 ./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x555556a426a0, 24) = 0 [pid 6118] chdir("./366") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [ 70.209053][ T6116] loop0: detected capacity change from 0 to 1024 [pid 6118] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6118] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6119 attached => {parent_tid=[1099]}, 88) = 1099 [pid 6119] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6119] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6118] rt_sigprocmask(SIG_SETMASK, [], [pid 6119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6119] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6118] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6119] munmap(0x7f15b9a45000, 524288) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6119] close(3) = 0 [pid 6119] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6119] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6119] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6119] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6119] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6118] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6118] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6119] <... mknodat resumed>) = 0 [pid 6118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1100]}, 88) = 1100 [pid 6119] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6118] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6120 attached [pid 6120] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6120] set_robust_list(0x7f15b9ac49a0, 24 [pid 6119] <... futex resumed>) = 0 [pid 6120] <... set_robust_list resumed>) = 0 [pid 6120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6120] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6120] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6119] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] <... mount resumed>) = 0 [pid 6120] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6120] chdir(".") = 0 [pid 6120] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] <... futex resumed>) = 0 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] close(5) = -1 EBADF (Bad file descriptor) [pid 6118] close(6) = -1 EBADF (Bad file descriptor) [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8 [pid 6120] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6118] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0 [pid 6119] <... futex resumed>) = ? [pid 6120] <... futex resumed>) = ? [pid 6118] <... exit_group resumed>) = ? [pid 6119] +++ exited with 0 +++ [pid 6120] +++ exited with 0 +++ [pid 6118] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./366/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./366") = 0 [pid 5019] mkdir("./367", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1101 ./strace-static-x86_64: Process 6121 attached [ 70.281414][ T6119] loop0: detected capacity change from 0 to 1024 [pid 6121] set_robust_list(0x555556a426a0, 24) = 0 [pid 6121] chdir("./367") = 0 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6121] setpgid(0, 0) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6121] write(3, "1000", 4) = 4 [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6121] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6121] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6121] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6121] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6122 attached => {parent_tid=[1102]}, 88) = 1102 [pid 6122] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6122] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6122] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6121] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6122] <... futex resumed>) = 0 [pid 6121] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6122] munmap(0x7f15b9a45000, 524288) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6122] close(3) = 0 [pid 6122] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6122] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6122] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6122] ioctl(4, LOOP_CLR_FD) = 0 [pid 6122] close(4) = 0 [pid 6122] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = 0 [pid 6121] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6121] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6121] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1103]}, 88) = 1103 [pid 6121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6121] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6122] <... futex resumed>) = 1 [pid 6122] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6123 attached [pid 6123] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6123] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6123] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6122] <... mknodat resumed>) = 0 [pid 6122] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6123] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6123] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6122] <... futex resumed>) = 0 [pid 6122] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] <... mount resumed>) = 0 [pid 6123] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6123] chdir(".") = 0 [pid 6123] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6121] close(3) = 0 [pid 6121] close(4 [pid 6123] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] <... close resumed>) = 0 [pid 6121] close(5) = -1 EBADF (Bad file descriptor) [pid 6121] close(6) = -1 EBADF (Bad file descriptor) [pid 6121] close(7) = -1 EBADF (Bad file descriptor) [pid 6121] close(8) = -1 EBADF (Bad file descriptor) [pid 6121] close(9) = -1 EBADF (Bad file descriptor) [pid 6121] close(10) = -1 EBADF (Bad file descriptor) [pid 6121] close(11) = -1 EBADF (Bad file descriptor) [pid 6121] close(12) = -1 EBADF (Bad file descriptor) [pid 6121] close(13) = -1 EBADF (Bad file descriptor) [pid 6121] close(14) = -1 EBADF (Bad file descriptor) [pid 6121] close(15) = -1 EBADF (Bad file descriptor) [pid 6121] close(16) = -1 EBADF (Bad file descriptor) [pid 6121] close(17) = -1 EBADF (Bad file descriptor) [pid 6121] close(18) = -1 EBADF (Bad file descriptor) [pid 6121] close(19) = -1 EBADF (Bad file descriptor) [pid 6121] close(20) = -1 EBADF (Bad file descriptor) [pid 6121] close(21) = -1 EBADF (Bad file descriptor) [pid 6121] close(22) = -1 EBADF (Bad file descriptor) [pid 6121] close(23) = -1 EBADF (Bad file descriptor) [pid 6121] close(24) = -1 EBADF (Bad file descriptor) [pid 6121] close(25) = -1 EBADF (Bad file descriptor) [pid 6121] close(26) = -1 EBADF (Bad file descriptor) [pid 6121] close(27) = -1 EBADF (Bad file descriptor) [pid 6121] close(28) = -1 EBADF (Bad file descriptor) [pid 6121] close(29) = -1 EBADF (Bad file descriptor) [pid 6121] exit_group(0) = ? [pid 6122] <... futex resumed>) = ? [pid 6123] <... futex resumed>) = ? [pid 6122] +++ exited with 0 +++ [pid 6123] +++ exited with 0 +++ [pid 6121] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1101, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./367/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./367") = 0 [pid 5019] mkdir("./368", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.363817][ T6122] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1104 ./strace-static-x86_64: Process 6124 attached [pid 6124] set_robust_list(0x555556a426a0, 24) = 0 [pid 6124] chdir("./368") = 0 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6124] setpgid(0, 0) = 0 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6124] write(3, "1000", 4) = 4 [pid 6124] close(3) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6124] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6124] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6124] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1105]}, 88) = 1105 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6124] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6125 attached [pid 6125] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6125] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6125] memfd_create("syzkaller", 0) = 3 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6125] munmap(0x7f15b9a45000, 524288) = 0 [pid 6125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6125] close(3) = 0 [pid 6125] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6125] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6125] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6125] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6125] ioctl(4, LOOP_CLR_FD) = 0 [pid 6125] close(4) = 0 [pid 6125] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] <... futex resumed>) = 0 [pid 6124] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6124] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1106]}, 88) = 1106 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6124] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6126 attached [pid 6126] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6126] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6125] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6126] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6126] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6126] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6126] chdir(".") = 0 [pid 6126] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = 0 [pid 6126] <... futex resumed>) = 1 [pid 6126] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] <... mknodat resumed>) = 0 [pid 6125] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6124] close(3) = 0 [pid 6124] close(4) = 0 [pid 6124] close(5) = -1 EBADF (Bad file descriptor) [pid 6124] close(6) = -1 EBADF (Bad file descriptor) [pid 6124] close(7) = -1 EBADF (Bad file descriptor) [pid 6124] close(8) = -1 EBADF (Bad file descriptor) [pid 6124] close(9) = -1 EBADF (Bad file descriptor) [pid 6124] close(10) = -1 EBADF (Bad file descriptor) [pid 6124] close(11) = -1 EBADF (Bad file descriptor) [pid 6124] close(12) = -1 EBADF (Bad file descriptor) [pid 6124] close(13) = -1 EBADF (Bad file descriptor) [pid 6124] close(14) = -1 EBADF (Bad file descriptor) [pid 6124] close(15) = -1 EBADF (Bad file descriptor) [pid 6124] close(16) = -1 EBADF (Bad file descriptor) [pid 6124] close(17) = -1 EBADF (Bad file descriptor) [pid 6124] close(18) = -1 EBADF (Bad file descriptor) [pid 6124] close(19) = -1 EBADF (Bad file descriptor) [pid 6124] close(20) = -1 EBADF (Bad file descriptor) [pid 6124] close(21) = -1 EBADF (Bad file descriptor) [pid 6124] close(22) = -1 EBADF (Bad file descriptor) [pid 6124] close(23) = -1 EBADF (Bad file descriptor) [pid 6124] close(24) = -1 EBADF (Bad file descriptor) [pid 6124] close(25) = -1 EBADF (Bad file descriptor) [pid 6124] close(26) = -1 EBADF (Bad file descriptor) [pid 6124] close(27) = -1 EBADF (Bad file descriptor) [pid 6124] close(28) = -1 EBADF (Bad file descriptor) [pid 6124] close(29) = -1 EBADF (Bad file descriptor) [pid 6124] exit_group(0) = ? [pid 6126] <... futex resumed>) = ? [pid 6125] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 6124] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1104, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./368/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./368") = 0 [pid 5019] mkdir("./369", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1107 ./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x555556a426a0, 24) = 0 [pid 6127] chdir("./369") = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6127] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6127] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6127] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1108]}, 88) = 1108 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6127] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6128 attached [pid 6128] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6128] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6128] memfd_create("syzkaller", 0) = 3 [ 70.439905][ T6125] loop0: detected capacity change from 0 to 1024 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6128] munmap(0x7f15b9a45000, 524288) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6128] close(3) = 0 [pid 6128] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6128] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6128] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6128] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6128] ioctl(4, LOOP_CLR_FD) = 0 [pid 6128] close(4) = 0 [pid 6128] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6127] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6129 attached => {parent_tid=[1109]}, 88) = 1109 [pid 6129] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6127] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6128] <... futex resumed>) = 1 [pid 6128] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6129] <... rseq resumed>) = 0 [pid 6129] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6129] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6129] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6128] <... mknodat resumed>) = 0 [pid 6128] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] <... mount resumed>) = 0 [pid 6129] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6129] chdir(".") = 0 [pid 6129] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = 0 [pid 6127] close(3) = 0 [pid 6127] close(4) = 0 [pid 6127] close(5) = -1 EBADF (Bad file descriptor) [pid 6127] close(6) = -1 EBADF (Bad file descriptor) [pid 6127] close(7) = -1 EBADF (Bad file descriptor) [pid 6127] close(8) = -1 EBADF (Bad file descriptor) [pid 6127] close(9) = -1 EBADF (Bad file descriptor) [pid 6127] close(10) = -1 EBADF (Bad file descriptor) [pid 6127] close(11) = -1 EBADF (Bad file descriptor) [pid 6127] close(12) = -1 EBADF (Bad file descriptor) [pid 6127] close(13) = -1 EBADF (Bad file descriptor) [pid 6127] close(14) = -1 EBADF (Bad file descriptor) [pid 6127] close(15) = -1 EBADF (Bad file descriptor) [pid 6127] close(16) = -1 EBADF (Bad file descriptor) [pid 6127] close(17) = -1 EBADF (Bad file descriptor) [pid 6127] close(18) = -1 EBADF (Bad file descriptor) [pid 6127] close(19) = -1 EBADF (Bad file descriptor) [pid 6127] close(20) = -1 EBADF (Bad file descriptor) [pid 6127] close(21) = -1 EBADF (Bad file descriptor) [pid 6129] <... futex resumed>) = 1 [pid 6127] close(22 [pid 6129] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] close(23) = -1 EBADF (Bad file descriptor) [pid 6127] close(24) = -1 EBADF (Bad file descriptor) [pid 6127] close(25) = -1 EBADF (Bad file descriptor) [pid 6127] close(26) = -1 EBADF (Bad file descriptor) [pid 6127] close(27) = -1 EBADF (Bad file descriptor) [pid 6127] close(28) = -1 EBADF (Bad file descriptor) [pid 6127] close(29) = -1 EBADF (Bad file descriptor) [pid 6127] exit_group(0 [pid 6129] <... futex resumed>) = ? [pid 6128] <... futex resumed>) = ? [pid 6127] <... exit_group resumed>) = ? [pid 6129] +++ exited with 0 +++ [pid 6128] +++ exited with 0 +++ [pid 6127] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1107, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./369/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./369") = 0 [pid 5019] mkdir("./370", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.510029][ T6128] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1110 ./strace-static-x86_64: Process 6130 attached [pid 6130] set_robust_list(0x555556a426a0, 24) = 0 [pid 6130] chdir("./370") = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6130] setpgid(0, 0) = 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6130] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6130] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1111]}, 88) = 1111 ./strace-static-x86_64: Process 6131 attached [pid 6130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6130] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6131] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6131] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6131] memfd_create("syzkaller", 0) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6131] munmap(0x7f15b9a45000, 524288) = 0 [pid 6131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6131] close(3) = 0 [pid 6131] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6131] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6131] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6131] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6131] ioctl(4, LOOP_CLR_FD) = 0 [pid 6131] close(4) = 0 [pid 6131] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6131] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6130] <... futex resumed>) = 0 [pid 6131] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6130] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6130] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6131] <... mknodat resumed>) = 0 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6131] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] <... clone3 resumed> => {parent_tid=[1112]}, 88) = 1112 [pid 6131] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6130] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6130] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6132 attached [pid 6132] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6132] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6132] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6132] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6132] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6132] chdir(".") = 0 [pid 6132] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6132] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] close(3) = 0 [pid 6130] close(4) = 0 [pid 6130] close(5) = -1 EBADF (Bad file descriptor) [pid 6130] close(6) = -1 EBADF (Bad file descriptor) [pid 6130] close(7) = -1 EBADF (Bad file descriptor) [pid 6130] close(8) = -1 EBADF (Bad file descriptor) [pid 6130] close(9) = -1 EBADF (Bad file descriptor) [pid 6130] close(10) = -1 EBADF (Bad file descriptor) [pid 6130] close(11) = -1 EBADF (Bad file descriptor) [pid 6130] close(12) = -1 EBADF (Bad file descriptor) [pid 6130] close(13) = -1 EBADF (Bad file descriptor) [pid 6130] close(14) = -1 EBADF (Bad file descriptor) [pid 6130] close(15) = -1 EBADF (Bad file descriptor) [pid 6130] close(16) = -1 EBADF (Bad file descriptor) [pid 6130] close(17) = -1 EBADF (Bad file descriptor) [pid 6130] close(18) = -1 EBADF (Bad file descriptor) [pid 6130] close(19) = -1 EBADF (Bad file descriptor) [pid 6130] close(20) = -1 EBADF (Bad file descriptor) [pid 6130] close(21) = -1 EBADF (Bad file descriptor) [pid 6130] close(22) = -1 EBADF (Bad file descriptor) [pid 6130] close(23) = -1 EBADF (Bad file descriptor) [pid 6130] close(24) = -1 EBADF (Bad file descriptor) [pid 6130] close(25) = -1 EBADF (Bad file descriptor) [pid 6130] close(26) = -1 EBADF (Bad file descriptor) [pid 6130] close(27) = -1 EBADF (Bad file descriptor) [pid 6130] close(28) = -1 EBADF (Bad file descriptor) [pid 6130] close(29) = -1 EBADF (Bad file descriptor) [pid 6130] exit_group(0 [pid 6132] <... futex resumed>) = ? [pid 6131] <... futex resumed>) = ? [pid 6130] <... exit_group resumed>) = ? [pid 6132] +++ exited with 0 +++ [pid 6131] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1110, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 70.595154][ T6131] loop0: detected capacity change from 0 to 1024 [pid 5019] newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./370/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./370") = 0 [pid 5019] mkdir("./371", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1113 ./strace-static-x86_64: Process 6133 attached [pid 6133] set_robust_list(0x555556a426a0, 24) = 0 [pid 6133] chdir("./371") = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6133] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6133] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6134 attached => {parent_tid=[1114]}, 88) = 1114 [pid 6134] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6134] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6134] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6134] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = 0 [pid 6133] <... futex resumed>) = 1 [pid 6133] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6134] memfd_create("syzkaller", 0) = 3 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6134] munmap(0x7f15b9a45000, 524288) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6134] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6134] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6134] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6134] ioctl(4, LOOP_CLR_FD) = 0 [pid 6134] close(4) = 0 [pid 6134] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6134] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6133] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6133] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1115]}, 88) = 1115 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6133] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6135 attached [pid 6135] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6135] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6135] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6135] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6135] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6135] chdir(".") = 0 [pid 6135] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... futex resumed>) = 0 [pid 6135] <... futex resumed>) = 1 [pid 6135] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6134] <... mknodat resumed>) = 0 [pid 6134] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6134] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] close(3) = 0 [pid 6133] close(4) = 0 [pid 6133] close(5) = -1 EBADF (Bad file descriptor) [pid 6133] close(6) = -1 EBADF (Bad file descriptor) [pid 6133] close(7) = -1 EBADF (Bad file descriptor) [pid 6133] close(8) = -1 EBADF (Bad file descriptor) [pid 6133] close(9) = -1 EBADF (Bad file descriptor) [pid 6133] close(10) = -1 EBADF (Bad file descriptor) [pid 6133] close(11) = -1 EBADF (Bad file descriptor) [pid 6133] close(12) = -1 EBADF (Bad file descriptor) [pid 6133] close(13) = -1 EBADF (Bad file descriptor) [pid 6133] close(14) = -1 EBADF (Bad file descriptor) [pid 6133] close(15) = -1 EBADF (Bad file descriptor) [pid 6133] close(16) = -1 EBADF (Bad file descriptor) [pid 6133] close(17) = -1 EBADF (Bad file descriptor) [pid 6133] close(18) = -1 EBADF (Bad file descriptor) [pid 6133] close(19) = -1 EBADF (Bad file descriptor) [pid 6133] close(20) = -1 EBADF (Bad file descriptor) [pid 6133] close(21) = -1 EBADF (Bad file descriptor) [pid 6133] close(22) = -1 EBADF (Bad file descriptor) [pid 6133] close(23) = -1 EBADF (Bad file descriptor) [pid 6133] close(24) = -1 EBADF (Bad file descriptor) [pid 6133] close(25) = -1 EBADF (Bad file descriptor) [pid 6133] close(26) = -1 EBADF (Bad file descriptor) [pid 6133] close(27) = -1 EBADF (Bad file descriptor) [pid 6133] close(28) = -1 EBADF (Bad file descriptor) [pid 6133] close(29) = -1 EBADF (Bad file descriptor) [pid 6133] exit_group(0) = ? [pid 6134] <... futex resumed>) = ? [pid 6135] <... futex resumed>) = ? [pid 6135] +++ exited with 0 +++ [pid 6134] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1113, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./371/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./371") = 0 [pid 5019] mkdir("./372", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1116 ./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x555556a426a0, 24) = 0 [pid 6136] chdir("./372") = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6136] write(3, "1000", 4) = 4 [pid 6136] close(3) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6136] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 70.682978][ T6134] loop0: detected capacity change from 0 to 1024 [pid 6136] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6136] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1117]}, 88) = 1117 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6136] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6137 attached [pid 6137] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6137] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6137] memfd_create("syzkaller", 0) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6137] munmap(0x7f15b9a45000, 524288) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6137] close(3) = 0 [pid 6137] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6137] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6137] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6137] ioctl(4, LOOP_CLR_FD) = 0 [pid 6137] close(4) = 0 [pid 6137] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6136] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6136] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1118]}, 88) = 1118 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6136] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6137] <... futex resumed>) = 1 [pid 6137] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6137] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6139 attached [pid 6139] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6139] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6139] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6139] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6139] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6139] chdir(".") = 0 [pid 6139] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6136] close(3) = 0 [pid 6136] close(4) = 0 [pid 6136] close(5) = -1 EBADF (Bad file descriptor) [pid 6136] close(6) = -1 EBADF (Bad file descriptor) [pid 6136] close(7) = -1 EBADF (Bad file descriptor) [pid 6136] close(8) = -1 EBADF (Bad file descriptor) [pid 6136] close(9) = -1 EBADF (Bad file descriptor) [pid 6136] close(10) = -1 EBADF (Bad file descriptor) [pid 6136] close(11) = -1 EBADF (Bad file descriptor) [pid 6136] close(12) = -1 EBADF (Bad file descriptor) [pid 6136] close(13) = -1 EBADF (Bad file descriptor) [pid 6136] close(14) = -1 EBADF (Bad file descriptor) [pid 6136] close(15) = -1 EBADF (Bad file descriptor) [pid 6136] close(16) = -1 EBADF (Bad file descriptor) [pid 6136] close(17) = -1 EBADF (Bad file descriptor) [pid 6136] close(18) = -1 EBADF (Bad file descriptor) [pid 6136] close(19) = -1 EBADF (Bad file descriptor) [pid 6136] close(20) = -1 EBADF (Bad file descriptor) [pid 6136] close(21) = -1 EBADF (Bad file descriptor) [pid 6136] close(22) = -1 EBADF (Bad file descriptor) [pid 6136] close(23) = -1 EBADF (Bad file descriptor) [pid 6136] close(24) = -1 EBADF (Bad file descriptor) [pid 6136] close(25) = -1 EBADF (Bad file descriptor) [pid 6136] close(26) = -1 EBADF (Bad file descriptor) [pid 6136] close(27) = -1 EBADF (Bad file descriptor) [pid 6136] close(28) = -1 EBADF (Bad file descriptor) [pid 6136] close(29) = -1 EBADF (Bad file descriptor) [pid 6136] exit_group(0 [pid 6137] <... futex resumed>) = ? [pid 6136] <... exit_group resumed>) = ? [pid 6137] +++ exited with 0 +++ [pid 6139] <... futex resumed>) = ? [pid 6139] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1116, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./372/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./372") = 0 [pid 5019] mkdir("./373", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1119 ./strace-static-x86_64: Process 6140 attached [pid 6140] set_robust_list(0x555556a426a0, 24) = 0 [pid 6140] chdir("./373") = 0 [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6140] setpgid(0, 0) = 0 [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6140] write(3, "1000", 4) = 4 [pid 6140] close(3) = 0 [pid 6140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6140] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6140] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6140] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 70.755167][ T6137] loop0: detected capacity change from 0 to 1024 [pid 6140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1120]}, 88) = 1120 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6140] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6141 attached [pid 6141] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6141] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6141] memfd_create("syzkaller", 0) = 3 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6141] munmap(0x7f15b9a45000, 524288) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6141] close(3) = 0 [pid 6141] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6141] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6141] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6141] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6141] ioctl(4, LOOP_CLR_FD) = 0 [pid 6141] close(4) = 0 [pid 6141] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6140] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1121]}, 88) = 1121 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6140] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6141] <... futex resumed>) = 1 [pid 6141] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6141] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6142 attached [pid 6142] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6142] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6142] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6142] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6142] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6142] chdir(".") = 0 [pid 6142] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] close(3) = 0 [pid 6140] close(4) = 0 [pid 6140] close(5) = -1 EBADF (Bad file descriptor) [pid 6140] close(6) = -1 EBADF (Bad file descriptor) [pid 6140] close(7) = -1 EBADF (Bad file descriptor) [pid 6140] close(8) = -1 EBADF (Bad file descriptor) [pid 6140] close(9) = -1 EBADF (Bad file descriptor) [pid 6140] close(10) = -1 EBADF (Bad file descriptor) [pid 6140] close(11) = -1 EBADF (Bad file descriptor) [pid 6140] close(12) = -1 EBADF (Bad file descriptor) [pid 6140] close(13) = -1 EBADF (Bad file descriptor) [pid 6140] close(14) = -1 EBADF (Bad file descriptor) [pid 6140] close(15) = -1 EBADF (Bad file descriptor) [pid 6140] close(16) = -1 EBADF (Bad file descriptor) [pid 6140] close(17) = -1 EBADF (Bad file descriptor) [pid 6140] close(18) = -1 EBADF (Bad file descriptor) [pid 6140] close(19) = -1 EBADF (Bad file descriptor) [pid 6140] close(20) = -1 EBADF (Bad file descriptor) [pid 6140] close(21) = -1 EBADF (Bad file descriptor) [pid 6140] close(22) = -1 EBADF (Bad file descriptor) [pid 6140] close(23) = -1 EBADF (Bad file descriptor) [pid 6140] close(24) = -1 EBADF (Bad file descriptor) [pid 6140] close(25) = -1 EBADF (Bad file descriptor) [pid 6140] close(26) = -1 EBADF (Bad file descriptor) [pid 6140] close(27) = -1 EBADF (Bad file descriptor) [pid 6140] close(28) = -1 EBADF (Bad file descriptor) [pid 6140] close(29) = -1 EBADF (Bad file descriptor) [pid 6140] exit_group(0 [pid 6141] <... futex resumed>) = ? [pid 6140] <... exit_group resumed>) = ? [pid 6141] +++ exited with 0 +++ [pid 6142] <... futex resumed>) = ? [pid 6142] +++ exited with 0 +++ [pid 6140] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1119, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./373/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./373") = 0 [pid 5019] mkdir("./374", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1122 ./strace-static-x86_64: Process 6143 attached [pid 6143] set_robust_list(0x555556a426a0, 24) = 0 [pid 6143] chdir("./374") = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0) = 0 [ 70.813658][ T6141] loop0: detected capacity change from 0 to 1024 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6143] write(3, "1000", 4) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6143] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1123]}, 88) = 1123 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6143] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6144 attached [pid 6144] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6144] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6144] memfd_create("syzkaller", 0) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6144] munmap(0x7f15b9a45000, 524288) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6144] close(3) = 0 [pid 6144] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6144] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6144] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6144] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6144] ioctl(4, LOOP_CLR_FD) = 0 [pid 6144] close(4) = 0 [pid 6144] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6143] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1124]}, 88) = 1124 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6143] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6144] <... futex resumed>) = 1 [pid 6144] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6144] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6144] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6145 attached [pid 6145] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6145] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6145] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6145] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6145] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6145] chdir(".") = 0 [pid 6145] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] close(3) = 0 [pid 6143] close(4) = 0 [pid 6143] close(5) = -1 EBADF (Bad file descriptor) [pid 6143] close(6) = -1 EBADF (Bad file descriptor) [pid 6143] close(7) = -1 EBADF (Bad file descriptor) [pid 6143] close(8) = -1 EBADF (Bad file descriptor) [pid 6143] close(9) = -1 EBADF (Bad file descriptor) [pid 6143] close(10) = -1 EBADF (Bad file descriptor) [pid 6143] close(11) = -1 EBADF (Bad file descriptor) [pid 6143] close(12) = -1 EBADF (Bad file descriptor) [pid 6143] close(13) = -1 EBADF (Bad file descriptor) [pid 6143] close(14) = -1 EBADF (Bad file descriptor) [pid 6143] close(15) = -1 EBADF (Bad file descriptor) [pid 6143] close(16) = -1 EBADF (Bad file descriptor) [pid 6143] close(17) = -1 EBADF (Bad file descriptor) [pid 6143] close(18) = -1 EBADF (Bad file descriptor) [pid 6143] close(19) = -1 EBADF (Bad file descriptor) [pid 6143] close(20) = -1 EBADF (Bad file descriptor) [pid 6143] close(21) = -1 EBADF (Bad file descriptor) [pid 6143] close(22) = -1 EBADF (Bad file descriptor) [pid 6143] close(23) = -1 EBADF (Bad file descriptor) [pid 6143] close(24) = -1 EBADF (Bad file descriptor) [pid 6143] close(25) = -1 EBADF (Bad file descriptor) [pid 6143] close(26) = -1 EBADF (Bad file descriptor) [pid 6143] close(27) = -1 EBADF (Bad file descriptor) [pid 6143] close(28) = -1 EBADF (Bad file descriptor) [pid 6143] close(29) = -1 EBADF (Bad file descriptor) [pid 6143] exit_group(0 [pid 6144] <... futex resumed>) = ? [pid 6143] <... exit_group resumed>) = ? [pid 6144] +++ exited with 0 +++ [pid 6145] <... futex resumed>) = ? [pid 6145] +++ exited with 0 +++ [pid 6143] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1122, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./374/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./374") = 0 [pid 5019] mkdir("./375", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1125 [ 70.887980][ T6144] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6146 attached [pid 6146] set_robust_list(0x555556a426a0, 24) = 0 [pid 6146] chdir("./375") = 0 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6146] setpgid(0, 0) = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6146] write(3, "1000", 4) = 4 [pid 6146] close(3) = 0 [pid 6146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6146] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6146] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6146] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1126]}, 88) = 1126 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6146] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6147 attached [pid 6147] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6147] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6147] memfd_create("syzkaller", 0) = 3 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6147] munmap(0x7f15b9a45000, 524288) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6147] close(3) = 0 [pid 6147] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6147] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6147] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6147] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6147] ioctl(4, LOOP_CLR_FD) = 0 [pid 6147] close(4) = 0 [pid 6147] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6146] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6146] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1127]}, 88) = 1127 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6146] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6147] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6148 attached [pid 6148] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6148] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6148] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6148] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6148] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6148] chdir(".") = 0 [pid 6148] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6146] close(3) = 0 [pid 6146] close(4) = 0 [pid 6146] close(5) = -1 EBADF (Bad file descriptor) [pid 6146] close(6) = -1 EBADF (Bad file descriptor) [pid 6146] close(7) = -1 EBADF (Bad file descriptor) [pid 6146] close(8) = -1 EBADF (Bad file descriptor) [pid 6146] close(9) = -1 EBADF (Bad file descriptor) [pid 6146] close(10) = -1 EBADF (Bad file descriptor) [pid 6146] close(11) = -1 EBADF (Bad file descriptor) [pid 6146] close(12) = -1 EBADF (Bad file descriptor) [pid 6146] close(13) = -1 EBADF (Bad file descriptor) [pid 6146] close(14) = -1 EBADF (Bad file descriptor) [pid 6146] close(15) = -1 EBADF (Bad file descriptor) [pid 6146] close(16) = -1 EBADF (Bad file descriptor) [pid 6146] close(17) = -1 EBADF (Bad file descriptor) [pid 6146] close(18) = -1 EBADF (Bad file descriptor) [pid 6146] close(19) = -1 EBADF (Bad file descriptor) [pid 6146] close(20) = -1 EBADF (Bad file descriptor) [pid 6146] close(21) = -1 EBADF (Bad file descriptor) [pid 6146] close(22) = -1 EBADF (Bad file descriptor) [pid 6146] close(23) = -1 EBADF (Bad file descriptor) [pid 6146] close(24) = -1 EBADF (Bad file descriptor) [pid 6146] close(25) = -1 EBADF (Bad file descriptor) [pid 6146] close(26) = -1 EBADF (Bad file descriptor) [pid 6146] close(27) = -1 EBADF (Bad file descriptor) [pid 6146] close(28) = -1 EBADF (Bad file descriptor) [pid 6146] close(29) = -1 EBADF (Bad file descriptor) [pid 6146] exit_group(0 [pid 6147] <... futex resumed>) = ? [pid 6146] <... exit_group resumed>) = ? [pid 6147] +++ exited with 0 +++ [pid 6148] <... futex resumed>) = ? [pid 6148] +++ exited with 0 +++ [pid 6146] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1125, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./375/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./375") = 0 [pid 5019] mkdir("./376", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.966663][ T6147] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1128 ./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x555556a426a0, 24) = 0 [pid 6149] chdir("./376") = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6149] setpgid(0, 0) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] write(3, "1000", 4) = 4 [pid 6149] close(3) = 0 [pid 6149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6149] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6149] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6149] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6150 attached => {parent_tid=[1129]}, 88) = 1129 [pid 6150] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6150] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6150] rt_sigprocmask(SIG_SETMASK, [], [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6150] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6150] <... futex resumed>) = 0 [pid 6149] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6150] memfd_create("syzkaller", 0) = 3 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6150] munmap(0x7f15b9a45000, 524288) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6150] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6150] close(3) = 0 [pid 6150] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6150] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6150] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6150] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6150] ioctl(4, LOOP_CLR_FD) = 0 [pid 6150] close(4) = 0 [pid 6150] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6150] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] <... futex resumed>) = 0 [pid 6149] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6150] <... futex resumed>) = 0 [pid 6150] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6149] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6149] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1130]}, 88) = 1130 [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6150] <... mknodat resumed>) = 0 [pid 6150] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6150] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6149] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6151 attached [pid 6151] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6151] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6151] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6151] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6151] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6151] chdir(".") = 0 [pid 6151] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6151] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] close(3) = 0 [pid 6149] close(4) = 0 [pid 6149] close(5) = -1 EBADF (Bad file descriptor) [pid 6149] close(6) = -1 EBADF (Bad file descriptor) [pid 6149] close(7) = -1 EBADF (Bad file descriptor) [pid 6149] close(8) = -1 EBADF (Bad file descriptor) [pid 6149] close(9) = -1 EBADF (Bad file descriptor) [pid 6149] close(10) = -1 EBADF (Bad file descriptor) [pid 6149] close(11) = -1 EBADF (Bad file descriptor) [pid 6149] close(12) = -1 EBADF (Bad file descriptor) [pid 6149] close(13) = -1 EBADF (Bad file descriptor) [pid 6149] close(14) = -1 EBADF (Bad file descriptor) [pid 6149] close(15) = -1 EBADF (Bad file descriptor) [pid 6149] close(16) = -1 EBADF (Bad file descriptor) [pid 6149] close(17) = -1 EBADF (Bad file descriptor) [pid 6149] close(18) = -1 EBADF (Bad file descriptor) [pid 6149] close(19) = -1 EBADF (Bad file descriptor) [pid 6149] close(20) = -1 EBADF (Bad file descriptor) [pid 6149] close(21) = -1 EBADF (Bad file descriptor) [pid 6149] close(22) = -1 EBADF (Bad file descriptor) [pid 6149] close(23) = -1 EBADF (Bad file descriptor) [pid 6149] close(24) = -1 EBADF (Bad file descriptor) [pid 6149] close(25) = -1 EBADF (Bad file descriptor) [pid 6149] close(26) = -1 EBADF (Bad file descriptor) [pid 6149] close(27) = -1 EBADF (Bad file descriptor) [pid 6149] close(28) = -1 EBADF (Bad file descriptor) [pid 6149] close(29) = -1 EBADF (Bad file descriptor) [pid 6149] exit_group(0 [pid 6150] <... futex resumed>) = ? [pid 6149] <... exit_group resumed>) = ? [pid 6150] +++ exited with 0 +++ [pid 6151] <... futex resumed>) = ? [pid 6151] +++ exited with 0 +++ [pid 6149] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1128, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 71.056575][ T6150] loop0: detected capacity change from 0 to 1024 [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./376/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./376") = 0 [pid 5019] mkdir("./377", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1131 ./strace-static-x86_64: Process 6152 attached [pid 6152] set_robust_list(0x555556a426a0, 24) = 0 [pid 6152] chdir("./377") = 0 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6152] setpgid(0, 0) = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6152] write(3, "1000", 4) = 4 [pid 6152] close(3) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6152] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6152] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1132]}, 88) = 1132 [pid 6152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6152] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6153 attached [pid 6153] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6153] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6153] memfd_create("syzkaller", 0) = 3 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6153] munmap(0x7f15b9a45000, 524288) = 0 [pid 6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6153] close(3) = 0 [pid 6153] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6153] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6153] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6153] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6153] ioctl(4, LOOP_CLR_FD) = 0 [pid 6153] close(4) = 0 [pid 6153] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... futex resumed>) = 0 [pid 6152] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6152] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1133]}, 88) = 1133 ./strace-static-x86_64: Process 6154 attached [pid 6152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6152] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6152] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6153] <... futex resumed>) = 1 [pid 6153] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6154] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6154] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6154] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6154] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6153] <... mknodat resumed>) = 0 [pid 6153] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... mount resumed>) = 0 [pid 6154] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6154] chdir(".") = 0 [pid 6154] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... futex resumed>) = 0 [pid 6152] close(3) = 0 [pid 6152] close(4) = 0 [pid 6152] close(5) = -1 EBADF (Bad file descriptor) [pid 6152] close(6) = -1 EBADF (Bad file descriptor) [pid 6152] close(7) = -1 EBADF (Bad file descriptor) [pid 6152] close(8) = -1 EBADF (Bad file descriptor) [pid 6152] close(9) = -1 EBADF (Bad file descriptor) [pid 6152] close(10) = -1 EBADF (Bad file descriptor) [pid 6152] close(11) = -1 EBADF (Bad file descriptor) [pid 6152] close(12) = -1 EBADF (Bad file descriptor) [pid 6152] close(13) = -1 EBADF (Bad file descriptor) [pid 6152] close(14) = -1 EBADF (Bad file descriptor) [pid 6152] close(15) = -1 EBADF (Bad file descriptor) [pid 6152] close(16) = -1 EBADF (Bad file descriptor) [pid 6152] close(17) = -1 EBADF (Bad file descriptor) [pid 6152] close(18) = -1 EBADF (Bad file descriptor) [pid 6152] close(19) = -1 EBADF (Bad file descriptor) [pid 6152] close(20) = -1 EBADF (Bad file descriptor) [pid 6152] close(21) = -1 EBADF (Bad file descriptor) [pid 6152] close(22) = -1 EBADF (Bad file descriptor) [pid 6152] close(23) = -1 EBADF (Bad file descriptor) [pid 6152] close(24) = -1 EBADF (Bad file descriptor) [pid 6152] close(25) = -1 EBADF (Bad file descriptor) [pid 6152] close(26) = -1 EBADF (Bad file descriptor) [pid 6152] close(27) = -1 EBADF (Bad file descriptor) [pid 6152] close(28) = -1 EBADF (Bad file descriptor) [pid 6152] close(29) = -1 EBADF (Bad file descriptor) [pid 6152] exit_group(0) = ? [pid 6153] <... futex resumed>) = ? [pid 6153] +++ exited with 0 +++ [pid 6154] <... futex resumed>) = ? [pid 6154] +++ exited with 0 +++ [pid 6152] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1131, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./377/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./377/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./377") = 0 [pid 5019] mkdir("./378", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1134 ./strace-static-x86_64: Process 6155 attached [ 71.175649][ T6153] loop0: detected capacity change from 0 to 1024 [pid 6155] set_robust_list(0x555556a426a0, 24) = 0 [pid 6155] chdir("./378") = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6155] setpgid(0, 0) = 0 [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6155] write(3, "1000", 4) = 4 [pid 6155] close(3) = 0 [pid 6155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6155] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6155] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6156 attached => {parent_tid=[1135]}, 88) = 1135 [pid 6155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6155] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6156] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6156] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6156] memfd_create("syzkaller", 0) = 3 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6156] munmap(0x7f15b9a45000, 524288) = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6156] close(3) = 0 [pid 6156] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6156] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6156] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6156] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6156] ioctl(4, LOOP_CLR_FD) = 0 [pid 6156] close(4) = 0 [pid 6156] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 0 [pid 6155] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6155] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1136]}, 88) = 1136 [pid 6155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6155] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6155] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6156] <... futex resumed>) = 1 [pid 6156] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6156] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6156] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6157 attached [pid 6157] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6157] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6157] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6157] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6157] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6157] chdir(".") = 0 [pid 6157] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 0 [pid 6155] close(3) = 0 [pid 6155] close(4) = 0 [pid 6155] close(5) = -1 EBADF (Bad file descriptor) [pid 6155] close(6) = -1 EBADF (Bad file descriptor) [pid 6155] close(7) = -1 EBADF (Bad file descriptor) [pid 6155] close(8) = -1 EBADF (Bad file descriptor) [pid 6155] close(9) = -1 EBADF (Bad file descriptor) [pid 6155] close(10) = -1 EBADF (Bad file descriptor) [pid 6155] close(11) = -1 EBADF (Bad file descriptor) [pid 6155] close(12) = -1 EBADF (Bad file descriptor) [pid 6155] close(13) = -1 EBADF (Bad file descriptor) [pid 6155] close(14) = -1 EBADF (Bad file descriptor) [pid 6157] <... futex resumed>) = 1 [pid 6155] close(15) = -1 EBADF (Bad file descriptor) [pid 6155] close(16) = -1 EBADF (Bad file descriptor) [pid 6155] close(17) = -1 EBADF (Bad file descriptor) [pid 6155] close(18) = -1 EBADF (Bad file descriptor) [pid 6155] close(19) = -1 EBADF (Bad file descriptor) [pid 6155] close(20) = -1 EBADF (Bad file descriptor) [pid 6155] close(21) = -1 EBADF (Bad file descriptor) [pid 6155] close(22) = -1 EBADF (Bad file descriptor) [pid 6155] close(23) = -1 EBADF (Bad file descriptor) [pid 6155] close(24) = -1 EBADF (Bad file descriptor) [pid 6155] close(25) = -1 EBADF (Bad file descriptor) [pid 6155] close(26) = -1 EBADF (Bad file descriptor) [pid 6155] close(27) = -1 EBADF (Bad file descriptor) [pid 6155] close(28) = -1 EBADF (Bad file descriptor) [pid 6155] close(29) = -1 EBADF (Bad file descriptor) [pid 6155] exit_group(0 [pid 6156] <... futex resumed>) = ? [pid 6155] <... exit_group resumed>) = ? [pid 6156] +++ exited with 0 +++ [pid 6157] +++ exited with 0 +++ [pid 6155] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1134, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./378/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./378") = 0 [pid 5019] mkdir("./379", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1137 ./strace-static-x86_64: Process 6158 attached [pid 6158] set_robust_list(0x555556a426a0, 24) = 0 [pid 6158] chdir("./379") = 0 [ 71.249065][ T6156] loop0: detected capacity change from 0 to 1024 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6158] write(3, "1000", 4) = 4 [pid 6158] close(3) = 0 [pid 6158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6158] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6158] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6159 attached [pid 6159] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6159] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6159] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] <... clone3 resumed> => {parent_tid=[1138]}, 88) = 1138 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6158] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6159] <... futex resumed>) = 0 [pid 6159] memfd_create("syzkaller", 0) = 3 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6159] munmap(0x7f15b9a45000, 524288) = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6159] close(3) = 0 [pid 6159] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6159] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6159] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6159] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6159] ioctl(4, LOOP_CLR_FD) = 0 [pid 6159] close(4) = 0 [pid 6159] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] <... futex resumed>) = 0 [pid 6158] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6159] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6158] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1139]}, 88) = 1139 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6158] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6160 attached [pid 6160] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6159] <... mknodat resumed>) = 0 [pid 6159] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6159] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6160] <... rseq resumed>) = 0 [pid 6160] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6160] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6160] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6160] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6160] chdir(".") = 0 [pid 6160] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6158] close(3) = 0 [pid 6158] close(4) = 0 [pid 6158] close(5) = -1 EBADF (Bad file descriptor) [pid 6158] close(6) = -1 EBADF (Bad file descriptor) [pid 6158] close(7) = -1 EBADF (Bad file descriptor) [pid 6158] close(8) = -1 EBADF (Bad file descriptor) [pid 6158] close(9) = -1 EBADF (Bad file descriptor) [pid 6158] close(10) = -1 EBADF (Bad file descriptor) [pid 6158] close(11) = -1 EBADF (Bad file descriptor) [pid 6158] close(12) = -1 EBADF (Bad file descriptor) [pid 6158] close(13) = -1 EBADF (Bad file descriptor) [pid 6158] close(14) = -1 EBADF (Bad file descriptor) [pid 6158] close(15) = -1 EBADF (Bad file descriptor) [pid 6158] close(16) = -1 EBADF (Bad file descriptor) [pid 6160] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] close(17) = -1 EBADF (Bad file descriptor) [pid 6158] close(18) = -1 EBADF (Bad file descriptor) [pid 6158] close(19) = -1 EBADF (Bad file descriptor) [pid 6158] close(20) = -1 EBADF (Bad file descriptor) [pid 6158] close(21) = -1 EBADF (Bad file descriptor) [pid 6158] close(22) = -1 EBADF (Bad file descriptor) [pid 6158] close(23) = -1 EBADF (Bad file descriptor) [pid 6158] close(24) = -1 EBADF (Bad file descriptor) [pid 6158] close(25) = -1 EBADF (Bad file descriptor) [pid 6158] close(26) = -1 EBADF (Bad file descriptor) [pid 6158] close(27) = -1 EBADF (Bad file descriptor) [pid 6158] close(28) = -1 EBADF (Bad file descriptor) [pid 6158] close(29) = -1 EBADF (Bad file descriptor) [pid 6158] exit_group(0 [pid 6159] <... futex resumed>) = ? [pid 6158] <... exit_group resumed>) = ? [pid 6159] +++ exited with 0 +++ [pid 6160] <... futex resumed>) = ? [pid 6160] +++ exited with 0 +++ [pid 6158] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1137, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./379/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./379") = 0 [pid 5019] mkdir("./380", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1140 ./strace-static-x86_64: Process 6161 attached [pid 6161] set_robust_list(0x555556a426a0, 24) = 0 [pid 6161] chdir("./380") = 0 [ 71.325163][ T6159] loop0: detected capacity change from 0 to 1024 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6161] setpgid(0, 0) = 0 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6161] write(3, "1000", 4) = 4 [pid 6161] close(3) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6161] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6161] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6161] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6162 attached => {parent_tid=[1141]}, 88) = 1141 [pid 6162] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6162] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6162] rt_sigprocmask(SIG_SETMASK, [], [pid 6161] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6161] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] memfd_create("syzkaller", 0 [pid 6161] <... futex resumed>) = 0 [pid 6162] <... memfd_create resumed>) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6161] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6162] munmap(0x7f15b9a45000, 524288) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6162] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6162] close(3) = 0 [pid 6162] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6162] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6162] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6162] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6162] ioctl(4, LOOP_CLR_FD) = 0 [pid 6162] close(4) = 0 [pid 6162] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] <... futex resumed>) = 0 [pid 6161] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6162] <... futex resumed>) = 1 [pid 6161] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6161] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6162] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1142]}, 88) = 1142 ./strace-static-x86_64: Process 6163 attached [pid 6161] rt_sigprocmask(SIG_SETMASK, [], [pid 6163] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6163] <... rseq resumed>) = 0 [pid 6161] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] set_robust_list(0x7f15b9ac49a0, 24 [pid 6161] <... futex resumed>) = 0 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6161] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6163] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6162] <... mknodat resumed>) = 0 [pid 6163] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6162] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6162] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] <... mount resumed>) = 0 [pid 6163] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6163] chdir(".") = 0 [pid 6163] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6163] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] close(3) = 0 [pid 6161] close(4) = 0 [pid 6161] close(5) = -1 EBADF (Bad file descriptor) [pid 6161] close(6) = -1 EBADF (Bad file descriptor) [pid 6161] close(7) = -1 EBADF (Bad file descriptor) [pid 6161] close(8) = -1 EBADF (Bad file descriptor) [pid 6161] close(9) = -1 EBADF (Bad file descriptor) [pid 6161] close(10) = -1 EBADF (Bad file descriptor) [pid 6161] close(11) = -1 EBADF (Bad file descriptor) [pid 6161] close(12) = -1 EBADF (Bad file descriptor) [pid 6161] close(13) = -1 EBADF (Bad file descriptor) [pid 6161] close(14) = -1 EBADF (Bad file descriptor) [pid 6161] close(15) = -1 EBADF (Bad file descriptor) [pid 6161] close(16) = -1 EBADF (Bad file descriptor) [pid 6161] close(17) = -1 EBADF (Bad file descriptor) [pid 6161] close(18) = -1 EBADF (Bad file descriptor) [pid 6161] close(19) = -1 EBADF (Bad file descriptor) [pid 6161] close(20) = -1 EBADF (Bad file descriptor) [pid 6161] close(21) = -1 EBADF (Bad file descriptor) [pid 6161] close(22) = -1 EBADF (Bad file descriptor) [pid 6161] close(23) = -1 EBADF (Bad file descriptor) [pid 6161] close(24) = -1 EBADF (Bad file descriptor) [pid 6161] close(25) = -1 EBADF (Bad file descriptor) [pid 6161] close(26) = -1 EBADF (Bad file descriptor) [pid 6161] close(27) = -1 EBADF (Bad file descriptor) [pid 6161] close(28) = -1 EBADF (Bad file descriptor) [pid 6161] close(29) = -1 EBADF (Bad file descriptor) [pid 6161] exit_group(0) = ? [pid 6163] <... futex resumed>) = ? [pid 6162] <... futex resumed>) = ? [pid 6163] +++ exited with 0 +++ [pid 6162] +++ exited with 0 +++ [pid 6161] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1140, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./380/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./380") = 0 [pid 5019] mkdir("./381", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1143 ./strace-static-x86_64: Process 6164 attached [pid 6164] set_robust_list(0x555556a426a0, 24) = 0 [pid 6164] chdir("./381") = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6164] setpgid(0, 0) = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6164] write(3, "1000", 4) = 4 [pid 6164] close(3) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6164] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6164] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 71.400773][ T6162] loop0: detected capacity change from 0 to 1024 [pid 6164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1144]}, 88) = 1144 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6164] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6165 attached [pid 6165] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6165] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6165] munmap(0x7f15b9a45000, 524288) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6165] close(3) = 0 [pid 6165] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6165] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6165] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6165] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6165] ioctl(4, LOOP_CLR_FD) = 0 [pid 6165] close(4) = 0 [pid 6165] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6164] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6164] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1145]}, 88) = 1145 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6164] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6165] <... mknodat resumed>) = 0 [pid 6165] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6165] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6166 attached [pid 6166] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6166] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6166] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6166] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6166] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6166] chdir(".") = 0 [pid 6166] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6166] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] close(3) = 0 [pid 6164] close(4) = 0 [pid 6164] close(5) = -1 EBADF (Bad file descriptor) [pid 6164] close(6) = -1 EBADF (Bad file descriptor) [pid 6164] close(7) = -1 EBADF (Bad file descriptor) [pid 6164] close(8) = -1 EBADF (Bad file descriptor) [pid 6164] close(9) = -1 EBADF (Bad file descriptor) [pid 6164] close(10) = -1 EBADF (Bad file descriptor) [pid 6164] close(11) = -1 EBADF (Bad file descriptor) [pid 6164] close(12) = -1 EBADF (Bad file descriptor) [pid 6164] close(13) = -1 EBADF (Bad file descriptor) [pid 6164] close(14) = -1 EBADF (Bad file descriptor) [pid 6164] close(15) = -1 EBADF (Bad file descriptor) [pid 6164] close(16) = -1 EBADF (Bad file descriptor) [pid 6164] close(17) = -1 EBADF (Bad file descriptor) [pid 6164] close(18) = -1 EBADF (Bad file descriptor) [pid 6164] close(19) = -1 EBADF (Bad file descriptor) [pid 6164] close(20) = -1 EBADF (Bad file descriptor) [pid 6164] close(21) = -1 EBADF (Bad file descriptor) [pid 6164] close(22) = -1 EBADF (Bad file descriptor) [pid 6164] close(23) = -1 EBADF (Bad file descriptor) [pid 6164] close(24) = -1 EBADF (Bad file descriptor) [pid 6164] close(25) = -1 EBADF (Bad file descriptor) [pid 6164] close(26) = -1 EBADF (Bad file descriptor) [pid 6164] close(27) = -1 EBADF (Bad file descriptor) [pid 6164] close(28) = -1 EBADF (Bad file descriptor) [pid 6164] close(29) = -1 EBADF (Bad file descriptor) [pid 6164] exit_group(0) = ? [pid 6166] <... futex resumed>) = ? [pid 6166] +++ exited with 0 +++ [pid 6165] <... futex resumed>) = ? [pid 6165] +++ exited with 0 +++ [pid 6164] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1143, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./381/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./381") = 0 [pid 5019] mkdir("./382", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 71.471688][ T6165] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1146 ./strace-static-x86_64: Process 6167 attached [pid 6167] set_robust_list(0x555556a426a0, 24) = 0 [pid 6167] chdir("./382") = 0 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6167] setpgid(0, 0) = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6167] write(3, "1000", 4) = 4 [pid 6167] close(3) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6167] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6167] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6167] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6167] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6168 attached [pid 6168] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6168] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6168] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] <... clone3 resumed> => {parent_tid=[1147]}, 88) = 1147 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6167] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6168] memfd_create("syzkaller", 0) = 3 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6167] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6168] munmap(0x7f15b9a45000, 524288) = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6168] close(3) = 0 [pid 6168] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6168] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6168] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6168] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6168] ioctl(4, LOOP_CLR_FD) = 0 [pid 6168] close(4) = 0 [pid 6168] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6167] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6167] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1148]}, 88) = 1148 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6167] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6168] <... futex resumed>) = 1 [pid 6168] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6169 attached [pid 6169] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6169] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6169] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6169] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6168] <... mknodat resumed>) = 0 [pid 6168] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] <... mount resumed>) = 0 [pid 6169] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6169] chdir(".") = 0 [pid 6169] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6167] close(3) = 0 [pid 6167] close(4) = 0 [pid 6167] close(5) = -1 EBADF (Bad file descriptor) [pid 6167] close(6) = -1 EBADF (Bad file descriptor) [pid 6167] close(7) = -1 EBADF (Bad file descriptor) [pid 6167] close(8) = -1 EBADF (Bad file descriptor) [pid 6167] close(9) = -1 EBADF (Bad file descriptor) [pid 6167] close(10) = -1 EBADF (Bad file descriptor) [pid 6167] close(11) = -1 EBADF (Bad file descriptor) [pid 6167] close(12) = -1 EBADF (Bad file descriptor) [pid 6167] close(13) = -1 EBADF (Bad file descriptor) [pid 6167] close(14) = -1 EBADF (Bad file descriptor) [pid 6167] close(15) = -1 EBADF (Bad file descriptor) [pid 6167] close(16) = -1 EBADF (Bad file descriptor) [pid 6167] close(17) = -1 EBADF (Bad file descriptor) [pid 6167] close(18) = -1 EBADF (Bad file descriptor) [pid 6167] close(19) = -1 EBADF (Bad file descriptor) [pid 6167] close(20) = -1 EBADF (Bad file descriptor) [pid 6167] close(21 [pid 6169] <... futex resumed>) = 1 [pid 6167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6169] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] close(22) = -1 EBADF (Bad file descriptor) [pid 6167] close(23) = -1 EBADF (Bad file descriptor) [pid 6167] close(24) = -1 EBADF (Bad file descriptor) [pid 6167] close(25) = -1 EBADF (Bad file descriptor) [pid 6167] close(26) = -1 EBADF (Bad file descriptor) [pid 6167] close(27) = -1 EBADF (Bad file descriptor) [pid 6167] close(28) = -1 EBADF (Bad file descriptor) [pid 6167] close(29) = -1 EBADF (Bad file descriptor) [pid 6167] exit_group(0) = ? [pid 6168] <... futex resumed>) = ? [pid 6168] +++ exited with 0 +++ [pid 6169] <... futex resumed>) = ? [pid 6169] +++ exited with 0 +++ [pid 6167] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1146, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./382/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./382") = 0 [pid 5019] mkdir("./383", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1149 ./strace-static-x86_64: Process 6170 attached [pid 6170] set_robust_list(0x555556a426a0, 24) = 0 [pid 6170] chdir("./383") = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6170] setpgid(0, 0) = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6170] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6170] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1150]}, 88) = 1150 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6170] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6171 attached [pid 6171] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6171] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6171] memfd_create("syzkaller", 0) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6171] munmap(0x7f15b9a45000, 524288) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 71.549071][ T6168] loop0: detected capacity change from 0 to 1024 [pid 6171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6171] close(3) = 0 [pid 6171] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6171] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6171] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6171] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6171] ioctl(4, LOOP_CLR_FD) = 0 [pid 6171] close(4) = 0 [pid 6171] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 6170] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6170] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1151]}, 88) = 1151 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6170] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6171] <... futex resumed>) = 1 [pid 6171] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6172 attached [pid 6172] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6172] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6172] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6172] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6171] <... mknodat resumed>) = 0 [pid 6171] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6171] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] <... mount resumed>) = 0 [pid 6172] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6172] chdir(".") = 0 [pid 6172] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 6170] close(3) = 0 [pid 6170] close(4) = 0 [pid 6170] close(5) = -1 EBADF (Bad file descriptor) [pid 6170] close(6) = -1 EBADF (Bad file descriptor) [pid 6170] close(7) = -1 EBADF (Bad file descriptor) [pid 6170] close(8) = -1 EBADF (Bad file descriptor) [pid 6170] close(9) = -1 EBADF (Bad file descriptor) [pid 6170] close(10) = -1 EBADF (Bad file descriptor) [pid 6170] close(11) = -1 EBADF (Bad file descriptor) [pid 6170] close(12) = -1 EBADF (Bad file descriptor) [pid 6170] close(13) = -1 EBADF (Bad file descriptor) [pid 6170] close(14) = -1 EBADF (Bad file descriptor) [pid 6170] close(15) = -1 EBADF (Bad file descriptor) [pid 6170] close(16) = -1 EBADF (Bad file descriptor) [pid 6170] close(17) = -1 EBADF (Bad file descriptor) [pid 6170] close(18) = -1 EBADF (Bad file descriptor) [pid 6170] close(19) = -1 EBADF (Bad file descriptor) [pid 6170] close(20) = -1 EBADF (Bad file descriptor) [pid 6170] close(21) = -1 EBADF (Bad file descriptor) [pid 6170] close(22) = -1 EBADF (Bad file descriptor) [pid 6170] close(23) = -1 EBADF (Bad file descriptor) [pid 6170] close(24) = -1 EBADF (Bad file descriptor) [pid 6170] close(25) = -1 EBADF (Bad file descriptor) [pid 6170] close(26) = -1 EBADF (Bad file descriptor) [pid 6170] close(27) = -1 EBADF (Bad file descriptor) [pid 6170] close(28) = -1 EBADF (Bad file descriptor) [pid 6170] close(29) = -1 EBADF (Bad file descriptor) [pid 6170] exit_group(0) = ? [pid 6171] <... futex resumed>) = ? [pid 6171] +++ exited with 0 +++ [pid 6172] <... futex resumed>) = ? [pid 6172] +++ exited with 0 +++ [pid 6170] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1149, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./383/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./383") = 0 [pid 5019] mkdir("./384", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1152 ./strace-static-x86_64: Process 6173 attached [ 71.608409][ T6171] loop0: detected capacity change from 0 to 1024 [pid 6173] set_robust_list(0x555556a426a0, 24) = 0 [pid 6173] chdir("./384") = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6173] setpgid(0, 0) = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6173] write(3, "1000", 4) = 4 [pid 6173] close(3) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6173] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6173] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6173] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6174 attached => {parent_tid=[1153]}, 88) = 1153 [pid 6174] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], [pid 6174] <... rseq resumed>) = 0 [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6174] set_robust_list(0x7f15c1e659a0, 24 [pid 6173] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... set_robust_list resumed>) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6174] rt_sigprocmask(SIG_SETMASK, [], [pid 6173] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6174] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6174] munmap(0x7f15b9a45000, 524288) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6174] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6174] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6174] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6174] ioctl(4, LOOP_CLR_FD) = 0 [pid 6174] close(4) = 0 [pid 6174] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6173] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1154]}, 88) = 1154 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6173] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6173] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6175 attached [pid 6175] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6175] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6175] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6174] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6175] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6174] <... mknodat resumed>) = 0 [pid 6174] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6174] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] <... mount resumed>) = 0 [pid 6175] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6175] chdir(".") = 0 [pid 6175] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6175] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] close(3) = 0 [pid 6173] close(4) = 0 [pid 6173] close(5) = -1 EBADF (Bad file descriptor) [pid 6173] close(6) = -1 EBADF (Bad file descriptor) [pid 6173] close(7) = -1 EBADF (Bad file descriptor) [pid 6173] close(8) = -1 EBADF (Bad file descriptor) [pid 6173] close(9) = -1 EBADF (Bad file descriptor) [pid 6173] close(10) = -1 EBADF (Bad file descriptor) [pid 6173] close(11) = -1 EBADF (Bad file descriptor) [pid 6173] close(12) = -1 EBADF (Bad file descriptor) [pid 6173] close(13) = -1 EBADF (Bad file descriptor) [pid 6173] close(14) = -1 EBADF (Bad file descriptor) [pid 6173] close(15) = -1 EBADF (Bad file descriptor) [pid 6173] close(16) = -1 EBADF (Bad file descriptor) [pid 6173] close(17) = -1 EBADF (Bad file descriptor) [pid 6173] close(18) = -1 EBADF (Bad file descriptor) [pid 6173] close(19) = -1 EBADF (Bad file descriptor) [pid 6173] close(20) = -1 EBADF (Bad file descriptor) [pid 6173] close(21) = -1 EBADF (Bad file descriptor) [pid 6173] close(22) = -1 EBADF (Bad file descriptor) [pid 6173] close(23) = -1 EBADF (Bad file descriptor) [pid 6173] close(24) = -1 EBADF (Bad file descriptor) [pid 6173] close(25) = -1 EBADF (Bad file descriptor) [pid 6173] close(26) = -1 EBADF (Bad file descriptor) [pid 6173] close(27) = -1 EBADF (Bad file descriptor) [pid 6173] close(28) = -1 EBADF (Bad file descriptor) [pid 6173] close(29) = -1 EBADF (Bad file descriptor) [pid 6173] exit_group(0 [pid 6175] <... futex resumed>) = ? [pid 6174] <... futex resumed>) = ? [pid 6173] <... exit_group resumed>) = ? [pid 6175] +++ exited with 0 +++ [pid 6174] +++ exited with 0 +++ [pid 6173] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1152, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [ 71.683377][ T6174] loop0: detected capacity change from 0 to 1024 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./384/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./384") = 0 [pid 5019] mkdir("./385", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x555556a426a0, 24) = 0 [pid 6176] chdir("./385" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1155 [pid 6176] <... chdir resumed>) = 0 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6176] setpgid(0, 0) = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6176] write(3, "1000", 4) = 4 [pid 6176] close(3) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6176] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6176] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1156]}, 88) = 1156 [pid 6176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6176] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6177 attached [pid 6177] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6177] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6177] memfd_create("syzkaller", 0) = 3 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6177] munmap(0x7f15b9a45000, 524288) = 0 [pid 6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6177] close(3) = 0 [pid 6177] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6177] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6177] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6177] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6177] ioctl(4, LOOP_CLR_FD) = 0 [pid 6177] close(4) = 0 [pid 6177] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = 0 [pid 6176] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6176] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1157]}, 88) = 1157 [pid 6176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6176] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6176] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6177] <... futex resumed>) = 1 [pid 6177] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6178 attached ) = 0 [pid 6177] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6177] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6178] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6178] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6178] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6178] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6178] chdir(".") = 0 [pid 6178] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6176] <... futex resumed>) = 0 [pid 6176] close(3) = 0 [pid 6176] close(4) = 0 [pid 6176] close(5) = -1 EBADF (Bad file descriptor) [pid 6178] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] close(6) = -1 EBADF (Bad file descriptor) [pid 6176] close(7) = -1 EBADF (Bad file descriptor) [pid 6176] close(8) = -1 EBADF (Bad file descriptor) [pid 6176] close(9) = -1 EBADF (Bad file descriptor) [pid 6176] close(10) = -1 EBADF (Bad file descriptor) [pid 6176] close(11) = -1 EBADF (Bad file descriptor) [pid 6176] close(12) = -1 EBADF (Bad file descriptor) [pid 6176] close(13) = -1 EBADF (Bad file descriptor) [pid 6176] close(14) = -1 EBADF (Bad file descriptor) [pid 6176] close(15) = -1 EBADF (Bad file descriptor) [pid 6176] close(16) = -1 EBADF (Bad file descriptor) [pid 6176] close(17) = -1 EBADF (Bad file descriptor) [pid 6176] close(18) = -1 EBADF (Bad file descriptor) [pid 6176] close(19) = -1 EBADF (Bad file descriptor) [pid 6176] close(20) = -1 EBADF (Bad file descriptor) [pid 6176] close(21) = -1 EBADF (Bad file descriptor) [pid 6176] close(22) = -1 EBADF (Bad file descriptor) [pid 6176] close(23) = -1 EBADF (Bad file descriptor) [pid 6176] close(24) = -1 EBADF (Bad file descriptor) [pid 6176] close(25) = -1 EBADF (Bad file descriptor) [pid 6176] close(26) = -1 EBADF (Bad file descriptor) [pid 6176] close(27) = -1 EBADF (Bad file descriptor) [pid 6176] close(28) = -1 EBADF (Bad file descriptor) [pid 6176] close(29) = -1 EBADF (Bad file descriptor) [pid 6176] exit_group(0 [pid 6178] <... futex resumed>) = ? [pid 6177] <... futex resumed>) = ? [pid 6176] <... exit_group resumed>) = ? [pid 6178] +++ exited with 0 +++ [pid 6177] +++ exited with 0 +++ [pid 6176] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1155, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 71.769612][ T6177] loop0: detected capacity change from 0 to 1024 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./385/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./385") = 0 [pid 5019] mkdir("./386", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6179 attached [pid 6179] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1158 [pid 6179] chdir("./386") = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6179] setpgid(0, 0) = 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6179] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6179] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6180 attached => {parent_tid=[1159]}, 88) = 1159 [pid 6180] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6180] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6180] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6180] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6179] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] memfd_create("syzkaller", 0) = 3 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6180] munmap(0x7f15b9a45000, 524288) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6180] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6180] close(3) = 0 [pid 6180] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6180] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6180] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6180] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6180] ioctl(4, LOOP_CLR_FD) = 0 [pid 6180] close(4) = 0 [pid 6180] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6179] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6179] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1160]}, 88) = 1160 ./strace-static-x86_64: Process 6181 attached [pid 6179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6179] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6181] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6181] set_robust_list(0x7f15b9ac49a0, 24 [pid 6180] <... mknodat resumed>) = 0 [pid 6180] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6180] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... set_robust_list resumed>) = 0 [pid 6181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6181] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6181] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6181] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6181] chdir(".") = 0 [pid 6181] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6179] close(3) = 0 [pid 6179] close(4) = 0 [pid 6179] close(5) = -1 EBADF (Bad file descriptor) [pid 6179] close(6) = -1 EBADF (Bad file descriptor) [pid 6179] close(7) = -1 EBADF (Bad file descriptor) [pid 6179] close(8) = -1 EBADF (Bad file descriptor) [pid 6179] close(9) = -1 EBADF (Bad file descriptor) [pid 6179] close(10) = -1 EBADF (Bad file descriptor) [pid 6179] close(11) = -1 EBADF (Bad file descriptor) [pid 6179] close(12) = -1 EBADF (Bad file descriptor) [pid 6179] close(13) = -1 EBADF (Bad file descriptor) [pid 6179] close(14) = -1 EBADF (Bad file descriptor) [pid 6179] close(15) = -1 EBADF (Bad file descriptor) [pid 6179] close(16 [pid 6181] <... futex resumed>) = 1 [pid 6179] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6181] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] close(17) = -1 EBADF (Bad file descriptor) [pid 6179] close(18) = -1 EBADF (Bad file descriptor) [pid 6179] close(19) = -1 EBADF (Bad file descriptor) [pid 6179] close(20) = -1 EBADF (Bad file descriptor) [pid 6179] close(21) = -1 EBADF (Bad file descriptor) [pid 6179] close(22) = -1 EBADF (Bad file descriptor) [pid 6179] close(23) = -1 EBADF (Bad file descriptor) [pid 6179] close(24) = -1 EBADF (Bad file descriptor) [pid 6179] close(25) = -1 EBADF (Bad file descriptor) [pid 6179] close(26) = -1 EBADF (Bad file descriptor) [pid 6179] close(27) = -1 EBADF (Bad file descriptor) [pid 6179] close(28) = -1 EBADF (Bad file descriptor) [pid 6179] close(29) = -1 EBADF (Bad file descriptor) [pid 6179] exit_group(0 [pid 6181] <... futex resumed>) = ? [pid 6180] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 6181] +++ exited with 0 +++ [pid 6180] +++ exited with 0 +++ [pid 6179] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1158, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./386/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./386") = 0 [pid 5019] mkdir("./387", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1161 ./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x555556a426a0, 24) = 0 [pid 6182] chdir("./387") = 0 [ 71.851566][ T6180] loop0: detected capacity change from 0 to 1024 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4) = 4 [pid 6182] close(3) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6182] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6182] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6182] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6183 attached => {parent_tid=[1162]}, 88) = 1162 [pid 6183] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6183] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6183] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6182] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6183] memfd_create("syzkaller", 0 [pid 6182] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6183] <... memfd_create resumed>) = 3 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6183] munmap(0x7f15b9a45000, 524288) = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6183] close(3) = 0 [pid 6183] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6183] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6183] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6183] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6183] ioctl(4, LOOP_CLR_FD) = 0 [pid 6183] close(4) = 0 [pid 6183] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = 0 [pid 6182] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6182] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6184 attached [pid 6184] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6182] <... clone3 resumed> => {parent_tid=[1163]}, 88) = 1163 [pid 6184] <... rseq resumed>) = 0 [pid 6182] rt_sigprocmask(SIG_SETMASK, [], [pid 6184] set_robust_list(0x7f15b9ac49a0, 24 [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6182] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], [pid 6182] <... futex resumed>) = 0 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6182] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6184] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6184] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6183] <... futex resumed>) = 1 [pid 6183] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6184] <... mount resumed>) = 0 [pid 6184] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6184] chdir(".") = 0 [pid 6184] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6182] <... futex resumed>) = 0 [pid 6184] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] <... mknodat resumed>) = 0 [pid 6183] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] close(3) = 0 [pid 6182] close(4) = 0 [pid 6182] close(5) = -1 EBADF (Bad file descriptor) [pid 6182] close(6) = -1 EBADF (Bad file descriptor) [pid 6182] close(7) = -1 EBADF (Bad file descriptor) [pid 6182] close(8) = -1 EBADF (Bad file descriptor) [pid 6182] close(9) = -1 EBADF (Bad file descriptor) [pid 6182] close(10) = -1 EBADF (Bad file descriptor) [pid 6182] close(11) = -1 EBADF (Bad file descriptor) [pid 6182] close(12) = -1 EBADF (Bad file descriptor) [pid 6182] close(13) = -1 EBADF (Bad file descriptor) [pid 6182] close(14) = -1 EBADF (Bad file descriptor) [pid 6182] close(15) = -1 EBADF (Bad file descriptor) [pid 6182] close(16) = -1 EBADF (Bad file descriptor) [pid 6182] close(17) = -1 EBADF (Bad file descriptor) [pid 6182] close(18) = -1 EBADF (Bad file descriptor) [pid 6182] close(19) = -1 EBADF (Bad file descriptor) [pid 6182] close(20) = -1 EBADF (Bad file descriptor) [pid 6182] close(21) = -1 EBADF (Bad file descriptor) [pid 6182] close(22) = -1 EBADF (Bad file descriptor) [pid 6182] close(23) = -1 EBADF (Bad file descriptor) [pid 6182] close(24) = -1 EBADF (Bad file descriptor) [pid 6182] close(25) = -1 EBADF (Bad file descriptor) [pid 6182] close(26) = -1 EBADF (Bad file descriptor) [pid 6182] close(27) = -1 EBADF (Bad file descriptor) [pid 6182] close(28) = -1 EBADF (Bad file descriptor) [pid 6182] close(29) = -1 EBADF (Bad file descriptor) [pid 6182] exit_group(0 [pid 6184] <... futex resumed>) = ? [pid 6182] <... exit_group resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 6183] <... futex resumed>) = ? [pid 6183] +++ exited with 0 +++ [pid 6182] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1161, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./387/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./387") = 0 [pid 5019] mkdir("./388", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 71.929762][ T6183] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6185 attached [pid 6185] set_robust_list(0x555556a426a0, 24) = 0 [pid 6185] chdir("./388" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1164 [pid 6185] <... chdir resumed>) = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0) = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6185] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6185] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1165]}, 88) = 1165 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6185] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6186 attached [pid 6186] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6186] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6186] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6186] memfd_create("syzkaller", 0) = 3 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6186] munmap(0x7f15b9a45000, 524288) = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6186] close(3) = 0 [pid 6186] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6186] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6186] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6186] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6186] ioctl(4, LOOP_CLR_FD) = 0 [pid 6186] close(4) = 0 [pid 6186] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6185] <... futex resumed>) = 0 [pid 6185] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6185] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1166]}, 88) = 1166 ./strace-static-x86_64: Process 6187 attached [pid 6187] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6187] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6187] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6187] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6185] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6187] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6187] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6186] <... mknodat resumed>) = 0 [pid 6186] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6186] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... mount resumed>) = 0 [pid 6187] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6187] chdir(".") = 0 [pid 6187] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6185] close(3) = 0 [pid 6185] close(4) = 0 [pid 6185] close(5) = -1 EBADF (Bad file descriptor) [pid 6185] close(6) = -1 EBADF (Bad file descriptor) [pid 6185] close(7) = -1 EBADF (Bad file descriptor) [pid 6185] close(8) = -1 EBADF (Bad file descriptor) [pid 6185] close(9) = -1 EBADF (Bad file descriptor) [pid 6185] close(10) = -1 EBADF (Bad file descriptor) [pid 6185] close(11) = -1 EBADF (Bad file descriptor) [pid 6185] close(12) = -1 EBADF (Bad file descriptor) [pid 6185] close(13) = -1 EBADF (Bad file descriptor) [pid 6185] close(14) = -1 EBADF (Bad file descriptor) [pid 6185] close(15) = -1 EBADF (Bad file descriptor) [pid 6185] close(16) = -1 EBADF (Bad file descriptor) [pid 6185] close(17) = -1 EBADF (Bad file descriptor) [pid 6185] close(18) = -1 EBADF (Bad file descriptor) [pid 6185] close(19) = -1 EBADF (Bad file descriptor) [pid 6185] close(20) = -1 EBADF (Bad file descriptor) [pid 6185] close(21) = -1 EBADF (Bad file descriptor) [pid 6185] close(22) = -1 EBADF (Bad file descriptor) [pid 6185] close(23) = -1 EBADF (Bad file descriptor) [pid 6185] close(24) = -1 EBADF (Bad file descriptor) [pid 6185] close(25) = -1 EBADF (Bad file descriptor) [pid 6185] close(26) = -1 EBADF (Bad file descriptor) [pid 6187] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] close(27) = -1 EBADF (Bad file descriptor) [pid 6185] close(28) = -1 EBADF (Bad file descriptor) [pid 6185] close(29) = -1 EBADF (Bad file descriptor) [pid 6185] exit_group(0 [pid 6186] <... futex resumed>) = ? [pid 6185] <... exit_group resumed>) = ? [pid 6187] <... futex resumed>) = ? [pid 6186] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1164, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./388/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./388") = 0 [pid 5019] mkdir("./389", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.008110][ T6186] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6188 attached [pid 6188] set_robust_list(0x555556a426a0, 24) = 0 [pid 6188] chdir("./389" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1167 [pid 6188] <... chdir resumed>) = 0 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6188] setpgid(0, 0) = 0 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6188] close(3) = 0 [pid 6188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6188] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6188] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6188] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6188] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1168]}, 88) = 1168 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6188] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6189 attached [pid 6189] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6189] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6189] memfd_create("syzkaller", 0) = 3 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6189] munmap(0x7f15b9a45000, 524288) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6189] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6189] close(3) = 0 [pid 6189] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6189] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6189] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6189] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6189] ioctl(4, LOOP_CLR_FD) = 0 [pid 6189] close(4) = 0 [pid 6189] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6188] <... futex resumed>) = 0 [pid 6189] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6188] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6188] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6188] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6188] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1169]}, 88) = 1169 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6188] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6188] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6190 attached [pid 6190] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6190] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6190] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6190] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6189] <... mknodat resumed>) = 0 [pid 6189] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6189] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] <... mount resumed>) = 0 [pid 6190] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6190] chdir(".") = 0 [pid 6190] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6188] <... futex resumed>) = 0 [pid 6188] close(3) = 0 [pid 6188] close(4) = 0 [pid 6188] close(5) = -1 EBADF (Bad file descriptor) [pid 6188] close(6) = -1 EBADF (Bad file descriptor) [pid 6188] close(7) = -1 EBADF (Bad file descriptor) [pid 6188] close(8) = -1 EBADF (Bad file descriptor) [pid 6188] close(9) = -1 EBADF (Bad file descriptor) [pid 6188] close(10) = -1 EBADF (Bad file descriptor) [pid 6188] close(11) = -1 EBADF (Bad file descriptor) [pid 6188] close(12) = -1 EBADF (Bad file descriptor) [pid 6188] close(13) = -1 EBADF (Bad file descriptor) [pid 6188] close(14) = -1 EBADF (Bad file descriptor) [pid 6188] close(15) = -1 EBADF (Bad file descriptor) [pid 6188] close(16) = -1 EBADF (Bad file descriptor) [pid 6188] close(17) = -1 EBADF (Bad file descriptor) [pid 6188] close(18) = -1 EBADF (Bad file descriptor) [pid 6188] close(19) = -1 EBADF (Bad file descriptor) [pid 6188] close(20) = -1 EBADF (Bad file descriptor) [pid 6188] close(21) = -1 EBADF (Bad file descriptor) [pid 6188] close(22) = -1 EBADF (Bad file descriptor) [pid 6188] close(23) = -1 EBADF (Bad file descriptor) [pid 6188] close(24) = -1 EBADF (Bad file descriptor) [pid 6188] close(25) = -1 EBADF (Bad file descriptor) [pid 6188] close(26) = -1 EBADF (Bad file descriptor) [pid 6188] close(27) = -1 EBADF (Bad file descriptor) [pid 6188] close(28) = -1 EBADF (Bad file descriptor) [pid 6188] close(29) = -1 EBADF (Bad file descriptor) [pid 6188] exit_group(0) = ? [pid 6190] +++ exited with 0 +++ [pid 6189] <... futex resumed>) = ? [pid 6189] +++ exited with 0 +++ [pid 6188] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1167, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./389/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./389") = 0 [pid 5019] mkdir("./390", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 72.084776][ T6189] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1170 ./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x555556a426a0, 24) = 0 [pid 6191] chdir("./390") = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6191] setpgid(0, 0) = 0 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6191] write(3, "1000", 4) = 4 [pid 6191] close(3) = 0 [pid 6191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6191] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6191] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6192 attached => {parent_tid=[1171]}, 88) = 1171 [pid 6192] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6192] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6191] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 6191] <... futex resumed>) = 1 [pid 6191] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6192] memfd_create("syzkaller", 0) = 3 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6192] munmap(0x7f15b9a45000, 524288) = 0 [pid 6192] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6192] close(3) = 0 [pid 6192] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6192] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6192] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6192] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6192] ioctl(4, LOOP_CLR_FD) = 0 [pid 6192] close(4) = 0 [pid 6192] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6192] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6192] <... futex resumed>) = 0 [pid 6192] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6191] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6191] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1172]}, 88) = 1172 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6191] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6193 attached [pid 6192] <... mknodat resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 6193] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6192] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] <... rseq resumed>) = 0 [pid 6193] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6193] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6193] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6193] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6193] chdir(".") = 0 [pid 6193] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6191] close(3) = 0 [pid 6191] close(4) = 0 [pid 6191] close(5) = -1 EBADF (Bad file descriptor) [pid 6191] close(6) = -1 EBADF (Bad file descriptor) [pid 6191] close(7) = -1 EBADF (Bad file descriptor) [pid 6191] close(8) = -1 EBADF (Bad file descriptor) [pid 6193] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] close(9) = -1 EBADF (Bad file descriptor) [pid 6191] close(10) = -1 EBADF (Bad file descriptor) [pid 6191] close(11) = -1 EBADF (Bad file descriptor) [pid 6191] close(12) = -1 EBADF (Bad file descriptor) [pid 6191] close(13) = -1 EBADF (Bad file descriptor) [pid 6191] close(14) = -1 EBADF (Bad file descriptor) [pid 6191] close(15) = -1 EBADF (Bad file descriptor) [pid 6191] close(16) = -1 EBADF (Bad file descriptor) [pid 6191] close(17) = -1 EBADF (Bad file descriptor) [pid 6191] close(18) = -1 EBADF (Bad file descriptor) [pid 6191] close(19) = -1 EBADF (Bad file descriptor) [pid 6191] close(20) = -1 EBADF (Bad file descriptor) [pid 6191] close(21) = -1 EBADF (Bad file descriptor) [pid 6191] close(22) = -1 EBADF (Bad file descriptor) [pid 6191] close(23) = -1 EBADF (Bad file descriptor) [pid 6191] close(24) = -1 EBADF (Bad file descriptor) [pid 6191] close(25) = -1 EBADF (Bad file descriptor) [pid 6191] close(26) = -1 EBADF (Bad file descriptor) [pid 6191] close(27) = -1 EBADF (Bad file descriptor) [pid 6191] close(28) = -1 EBADF (Bad file descriptor) [pid 6191] close(29) = -1 EBADF (Bad file descriptor) [pid 6191] exit_group(0 [pid 6192] <... futex resumed>) = ? [pid 6191] <... exit_group resumed>) = ? [pid 6193] <... futex resumed>) = ? [pid 6192] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ [pid 6191] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1170, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./390/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./390") = 0 [pid 5019] mkdir("./391", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 72.165074][ T6192] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6194 attached [pid 6194] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1173 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6194] chdir("./391") = 0 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] setpgid(0, 0) = 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6194] write(3, "1000", 4) = 4 [pid 6194] close(3) = 0 [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6194] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6194] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6194] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6195 attached => {parent_tid=[1174]}, 88) = 1174 [pid 6195] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6195] set_robust_list(0x7f15c1e659a0, 24 [pid 6194] rt_sigprocmask(SIG_SETMASK, [], [pid 6195] <... set_robust_list resumed>) = 0 [pid 6195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6195] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6194] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6194] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] memfd_create("syzkaller", 0) = 3 [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6195] munmap(0x7f15b9a45000, 524288) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6195] close(3) = 0 [pid 6195] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6195] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6195] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6195] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6195] ioctl(4, LOOP_CLR_FD) = 0 [pid 6195] close(4) = 0 [pid 6195] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = 0 [pid 6194] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6194] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1175]}, 88) = 1175 [pid 6194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6194] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6196 attached [pid 6194] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6195] <... futex resumed>) = 1 [pid 6195] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6196] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6196] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6196] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6196] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6195] <... mknodat resumed>) = 0 [pid 6195] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6195] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... mount resumed>) = 0 [pid 6196] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6196] chdir(".") = 0 [pid 6196] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6194] <... futex resumed>) = 0 [pid 6194] close(3) = 0 [pid 6194] close(4) = 0 [pid 6196] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] close(5) = -1 EBADF (Bad file descriptor) [pid 6194] close(6) = -1 EBADF (Bad file descriptor) [pid 6194] close(7) = -1 EBADF (Bad file descriptor) [pid 6194] close(8) = -1 EBADF (Bad file descriptor) [pid 6194] close(9) = -1 EBADF (Bad file descriptor) [pid 6194] close(10) = -1 EBADF (Bad file descriptor) [pid 6194] close(11) = -1 EBADF (Bad file descriptor) [pid 6194] close(12) = -1 EBADF (Bad file descriptor) [pid 6194] close(13) = -1 EBADF (Bad file descriptor) [pid 6194] close(14) = -1 EBADF (Bad file descriptor) [pid 6194] close(15) = -1 EBADF (Bad file descriptor) [pid 6194] close(16) = -1 EBADF (Bad file descriptor) [pid 6194] close(17) = -1 EBADF (Bad file descriptor) [pid 6194] close(18) = -1 EBADF (Bad file descriptor) [pid 6194] close(19) = -1 EBADF (Bad file descriptor) [pid 6194] close(20) = -1 EBADF (Bad file descriptor) [pid 6194] close(21) = -1 EBADF (Bad file descriptor) [pid 6194] close(22) = -1 EBADF (Bad file descriptor) [pid 6194] close(23) = -1 EBADF (Bad file descriptor) [pid 6194] close(24) = -1 EBADF (Bad file descriptor) [pid 6194] close(25) = -1 EBADF (Bad file descriptor) [pid 6194] close(26) = -1 EBADF (Bad file descriptor) [pid 6194] close(27) = -1 EBADF (Bad file descriptor) [pid 6194] close(28) = -1 EBADF (Bad file descriptor) [pid 6194] close(29) = -1 EBADF (Bad file descriptor) [pid 6194] exit_group(0 [pid 6196] <... futex resumed>) = ? [pid 6195] <... futex resumed>) = ? [pid 6194] <... exit_group resumed>) = ? [pid 6196] +++ exited with 0 +++ [pid 6195] +++ exited with 0 +++ [pid 6194] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1173, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./391/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./391") = 0 [pid 5019] mkdir("./392", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1176 ./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x555556a426a0, 24) = 0 [ 72.248675][ T6195] loop0: detected capacity change from 0 to 1024 [pid 6197] chdir("./392") = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6197] setpgid(0, 0) = 0 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6197] write(3, "1000", 4) = 4 [pid 6197] close(3) = 0 [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6197] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6197] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6197] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6198 attached => {parent_tid=[1177]}, 88) = 1177 [pid 6198] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], [pid 6198] <... rseq resumed>) = 0 [pid 6198] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6198] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6197] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6197] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] <... futex resumed>) = 0 [pid 6198] memfd_create("syzkaller", 0) = 3 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6198] munmap(0x7f15b9a45000, 524288) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6198] close(3) = 0 [pid 6198] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6198] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6198] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6198] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6198] ioctl(4, LOOP_CLR_FD) = 0 [pid 6198] close(4) = 0 [pid 6198] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6197] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6197] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1178]}, 88) = 1178 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6197] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6197] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] <... futex resumed>) = 1 [pid 6198] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6199 attached [pid 6199] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6198] <... mknodat resumed>) = 0 [pid 6198] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6199] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6199] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6199] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6199] chdir(".") = 0 [pid 6199] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6197] close(3) = 0 [pid 6197] close(4) = 0 [pid 6197] close(5) = -1 EBADF (Bad file descriptor) [pid 6197] close(6) = -1 EBADF (Bad file descriptor) [pid 6197] close(7) = -1 EBADF (Bad file descriptor) [pid 6197] close(8) = -1 EBADF (Bad file descriptor) [pid 6197] close(9) = -1 EBADF (Bad file descriptor) [pid 6197] close(10) = -1 EBADF (Bad file descriptor) [pid 6197] close(11 [pid 6199] <... futex resumed>) = 1 [pid 6197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6199] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] close(12) = -1 EBADF (Bad file descriptor) [pid 6197] close(13) = -1 EBADF (Bad file descriptor) [pid 6197] close(14) = -1 EBADF (Bad file descriptor) [pid 6197] close(15) = -1 EBADF (Bad file descriptor) [pid 6197] close(16) = -1 EBADF (Bad file descriptor) [pid 6197] close(17) = -1 EBADF (Bad file descriptor) [pid 6197] close(18) = -1 EBADF (Bad file descriptor) [pid 6197] close(19) = -1 EBADF (Bad file descriptor) [pid 6197] close(20) = -1 EBADF (Bad file descriptor) [pid 6197] close(21) = -1 EBADF (Bad file descriptor) [pid 6197] close(22) = -1 EBADF (Bad file descriptor) [pid 6197] close(23) = -1 EBADF (Bad file descriptor) [pid 6197] close(24) = -1 EBADF (Bad file descriptor) [pid 6197] close(25) = -1 EBADF (Bad file descriptor) [pid 6197] close(26) = -1 EBADF (Bad file descriptor) [pid 6197] close(27) = -1 EBADF (Bad file descriptor) [pid 6197] close(28) = -1 EBADF (Bad file descriptor) [pid 6197] close(29) = -1 EBADF (Bad file descriptor) [pid 6197] exit_group(0 [pid 6199] <... futex resumed>) = ? [pid 6198] <... futex resumed>) = ? [pid 6197] <... exit_group resumed>) = ? [pid 6199] +++ exited with 0 +++ [pid 6198] +++ exited with 0 +++ [pid 6197] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1176, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./392/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./392") = 0 [pid 5019] mkdir("./393", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1179 ./strace-static-x86_64: Process 6200 attached [pid 6200] set_robust_list(0x555556a426a0, 24) = 0 [pid 6200] chdir("./393") = 0 [pid 6200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6200] setpgid(0, 0) = 0 [pid 6200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6200] write(3, "1000", 4) = 4 [pid 6200] close(3) = 0 [pid 6200] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6200] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6200] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6200] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6200] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6200] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6201 attached => {parent_tid=[1180]}, 88) = 1180 [pid 6201] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6201] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6201] rt_sigprocmask(SIG_SETMASK, [], [pid 6200] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6201] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6200] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6200] <... futex resumed>) = 0 [pid 6200] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6201] memfd_create("syzkaller", 0) = 3 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6201] munmap(0x7f15b9a45000, 524288) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 72.326416][ T6198] loop0: detected capacity change from 0 to 1024 [pid 6201] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6201] close(3) = 0 [pid 6201] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6201] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6201] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6201] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6201] ioctl(4, LOOP_CLR_FD) = 0 [pid 6201] close(4) = 0 [pid 6201] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6200] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6200] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6200] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6200] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1181]}, 88) = 1181 [pid 6200] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6200] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6201] <... futex resumed>) = 1 [pid 6201] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6202 attached [pid 6202] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6202] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6202] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] <... mknodat resumed>) = 0 [pid 6201] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6201] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6202] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6202] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6202] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6202] chdir(".") = 0 [pid 6202] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6200] <... futex resumed>) = 0 [pid 6200] close(3) = 0 [pid 6200] close(4) = 0 [pid 6202] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6200] close(5) = -1 EBADF (Bad file descriptor) [pid 6200] close(6) = -1 EBADF (Bad file descriptor) [pid 6200] close(7) = -1 EBADF (Bad file descriptor) [pid 6200] close(8) = -1 EBADF (Bad file descriptor) [pid 6200] close(9) = -1 EBADF (Bad file descriptor) [pid 6200] close(10) = -1 EBADF (Bad file descriptor) [pid 6200] close(11) = -1 EBADF (Bad file descriptor) [pid 6200] close(12) = -1 EBADF (Bad file descriptor) [pid 6200] close(13) = -1 EBADF (Bad file descriptor) [pid 6200] close(14) = -1 EBADF (Bad file descriptor) [pid 6200] close(15) = -1 EBADF (Bad file descriptor) [pid 6200] close(16) = -1 EBADF (Bad file descriptor) [pid 6200] close(17) = -1 EBADF (Bad file descriptor) [pid 6200] close(18) = -1 EBADF (Bad file descriptor) [pid 6200] close(19) = -1 EBADF (Bad file descriptor) [pid 6200] close(20) = -1 EBADF (Bad file descriptor) [pid 6200] close(21) = -1 EBADF (Bad file descriptor) [pid 6200] close(22) = -1 EBADF (Bad file descriptor) [pid 6200] close(23) = -1 EBADF (Bad file descriptor) [pid 6200] close(24) = -1 EBADF (Bad file descriptor) [pid 6200] close(25) = -1 EBADF (Bad file descriptor) [pid 6200] close(26) = -1 EBADF (Bad file descriptor) [pid 6200] close(27) = -1 EBADF (Bad file descriptor) [pid 6200] close(28) = -1 EBADF (Bad file descriptor) [pid 6200] close(29) = -1 EBADF (Bad file descriptor) [pid 6200] exit_group(0 [pid 6202] <... futex resumed>) = ? [pid 6201] <... futex resumed>) = ? [pid 6200] <... exit_group resumed>) = ? [pid 6202] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 6200] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1179, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./393/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./393") = 0 [pid 5019] mkdir("./394", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1182 ./strace-static-x86_64: Process 6203 attached [pid 6203] set_robust_list(0x555556a426a0, 24) = 0 [pid 6203] chdir("./394") = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6203] setpgid(0, 0) = 0 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6203] write(3, "1000", 4) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6203] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6203] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6204 attached => {parent_tid=[1183]}, 88) = 1183 [pid 6204] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6204] <... rseq resumed>) = 0 [pid 6204] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6204] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6204] <... futex resumed>) = 0 [pid 6204] memfd_create("syzkaller", 0) = 3 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 72.386818][ T6201] loop0: detected capacity change from 0 to 1024 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6204] munmap(0x7f15b9a45000, 524288) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6204] close(3) = 0 [pid 6204] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6204] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6204] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6204] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6204] ioctl(4, LOOP_CLR_FD) = 0 [pid 6204] close(4) = 0 [pid 6204] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6203] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1184]}, 88) = 1184 [pid 6203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6203] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6205 attached ) = 0 [pid 6203] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6204] <... futex resumed>) = 1 [pid 6204] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6205] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6204] <... mknodat resumed>) = 0 [pid 6205] set_robust_list(0x7f15b9ac49a0, 24 [pid 6204] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6204] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... set_robust_list resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6205] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6205] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6205] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6205] chdir(".") = 0 [pid 6205] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6203] close(3) = 0 [pid 6203] close(4) = 0 [pid 6203] close(5) = -1 EBADF (Bad file descriptor) [pid 6203] close(6) = -1 EBADF (Bad file descriptor) [pid 6203] close(7) = -1 EBADF (Bad file descriptor) [pid 6203] close(8 [pid 6205] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6203] close(9) = -1 EBADF (Bad file descriptor) [pid 6203] close(10) = -1 EBADF (Bad file descriptor) [pid 6203] close(11) = -1 EBADF (Bad file descriptor) [pid 6203] close(12) = -1 EBADF (Bad file descriptor) [pid 6203] close(13) = -1 EBADF (Bad file descriptor) [pid 6203] close(14) = -1 EBADF (Bad file descriptor) [pid 6203] close(15) = -1 EBADF (Bad file descriptor) [pid 6203] close(16) = -1 EBADF (Bad file descriptor) [pid 6203] close(17) = -1 EBADF (Bad file descriptor) [pid 6203] close(18) = -1 EBADF (Bad file descriptor) [pid 6203] close(19) = -1 EBADF (Bad file descriptor) [pid 6203] close(20) = -1 EBADF (Bad file descriptor) [pid 6203] close(21) = -1 EBADF (Bad file descriptor) [pid 6203] close(22) = -1 EBADF (Bad file descriptor) [pid 6203] close(23) = -1 EBADF (Bad file descriptor) [pid 6203] close(24) = -1 EBADF (Bad file descriptor) [pid 6203] close(25) = -1 EBADF (Bad file descriptor) [pid 6203] close(26) = -1 EBADF (Bad file descriptor) [pid 6203] close(27) = -1 EBADF (Bad file descriptor) [pid 6203] close(28) = -1 EBADF (Bad file descriptor) [pid 6203] close(29) = -1 EBADF (Bad file descriptor) [pid 6203] exit_group(0 [pid 6204] <... futex resumed>) = ? [pid 6203] <... exit_group resumed>) = ? [pid 6205] <... futex resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 6203] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1182, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./394/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./394") = 0 [pid 5019] mkdir("./395", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1185 ./strace-static-x86_64: Process 6206 attached [pid 6206] set_robust_list(0x555556a426a0, 24) = 0 [pid 6206] chdir("./395") = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6206] setpgid(0, 0) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6206] write(3, "1000", 4) = 4 [pid 6206] close(3) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6206] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6206] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1186]}, 88) = 1186 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6206] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6207 attached [pid 6207] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6207] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6207] memfd_create("syzkaller", 0) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 72.452007][ T6204] loop0: detected capacity change from 0 to 1024 [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6207] munmap(0x7f15b9a45000, 524288) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6207] close(3) = 0 [pid 6207] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6207] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6207] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6207] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6207] ioctl(4, LOOP_CLR_FD) = 0 [pid 6207] close(4) = 0 [pid 6207] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6207] <... futex resumed>) = 1 [pid 6207] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6206] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6206] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6208 attached => {parent_tid=[1187]}, 88) = 1187 [pid 6208] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6206] rt_sigprocmask(SIG_SETMASK, [], [pid 6208] <... rseq resumed>) = 0 [pid 6206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] set_robust_list(0x7f15b9ac49a0, 24 [pid 6206] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... set_robust_list resumed>) = 0 [pid 6206] <... futex resumed>) = 0 [pid 6206] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6208] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6208] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6207] <... mknodat resumed>) = 0 [pid 6207] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6207] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] <... mount resumed>) = 0 [pid 6208] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6208] chdir(".") = 0 [pid 6208] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6206] close(5) = -1 EBADF (Bad file descriptor) [pid 6206] close(6) = -1 EBADF (Bad file descriptor) [pid 6206] close(7) = -1 EBADF (Bad file descriptor) [pid 6206] close(8) = -1 EBADF (Bad file descriptor) [pid 6206] close(9) = -1 EBADF (Bad file descriptor) [pid 6206] close(10) = -1 EBADF (Bad file descriptor) [pid 6206] close(11) = -1 EBADF (Bad file descriptor) [pid 6206] close(12) = -1 EBADF (Bad file descriptor) [pid 6206] close(13) = -1 EBADF (Bad file descriptor) [pid 6206] close(14) = -1 EBADF (Bad file descriptor) [pid 6206] close(15) = -1 EBADF (Bad file descriptor) [pid 6206] close(16) = -1 EBADF (Bad file descriptor) [pid 6206] close(17) = -1 EBADF (Bad file descriptor) [pid 6206] close(18) = -1 EBADF (Bad file descriptor) [pid 6206] close(19) = -1 EBADF (Bad file descriptor) [pid 6206] close(20) = -1 EBADF (Bad file descriptor) [pid 6206] close(21) = -1 EBADF (Bad file descriptor) [pid 6206] close(22) = -1 EBADF (Bad file descriptor) [pid 6206] close(23) = -1 EBADF (Bad file descriptor) [pid 6206] close(24) = -1 EBADF (Bad file descriptor) [pid 6206] close(25) = -1 EBADF (Bad file descriptor) [pid 6206] close(26) = -1 EBADF (Bad file descriptor) [pid 6206] close(27) = -1 EBADF (Bad file descriptor) [pid 6206] close(28) = -1 EBADF (Bad file descriptor) [pid 6206] close(29) = -1 EBADF (Bad file descriptor) [pid 6206] exit_group(0) = ? [pid 6207] <... futex resumed>) = ? [pid 6207] +++ exited with 0 +++ [pid 6208] <... futex resumed>) = ? [pid 6208] +++ exited with 0 +++ [pid 6206] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1185, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./395/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./395") = 0 [pid 5019] mkdir("./396", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1188 ./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x555556a426a0, 24) = 0 [pid 6209] chdir("./396") = 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6209] setpgid(0, 0) = 0 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6209] write(3, "1000", 4) = 4 [pid 6209] close(3) = 0 [ 72.518015][ T6207] loop0: detected capacity change from 0 to 1024 [pid 6209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6209] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6209] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6209] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6209] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1189]}, 88) = 1189 ./strace-static-x86_64: Process 6210 attached [pid 6210] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6210] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6210] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6209] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6210] <... futex resumed>) = 0 [pid 6209] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6210] memfd_create("syzkaller", 0) = 3 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6210] munmap(0x7f15b9a45000, 524288) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6210] close(3) = 0 [pid 6210] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6210] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6210] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6210] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6210] ioctl(4, LOOP_CLR_FD) = 0 [pid 6210] close(4) = 0 [pid 6210] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6210] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6209] <... futex resumed>) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6210] <... mknodat resumed>) = 0 [pid 6209] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6210] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... mprotect resumed>) = 0 [pid 6210] <... futex resumed>) = 0 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6210] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6211 attached => {parent_tid=[1190]}, 88) = 1190 [pid 6211] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 6211] <... rseq resumed>) = 0 [pid 6211] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6211] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6209] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6211] mkdir(".", 0777 [pid 6209] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6211] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6211] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6211] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6211] chdir(".") = 0 [pid 6211] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6211] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 6209] close(5) = -1 EBADF (Bad file descriptor) [pid 6209] close(6) = -1 EBADF (Bad file descriptor) [pid 6209] close(7) = -1 EBADF (Bad file descriptor) [pid 6209] close(8) = -1 EBADF (Bad file descriptor) [pid 6209] close(9) = -1 EBADF (Bad file descriptor) [pid 6209] close(10) = -1 EBADF (Bad file descriptor) [pid 6209] close(11) = -1 EBADF (Bad file descriptor) [pid 6209] close(12) = -1 EBADF (Bad file descriptor) [pid 6209] close(13) = -1 EBADF (Bad file descriptor) [pid 6209] close(14) = -1 EBADF (Bad file descriptor) [pid 6209] close(15) = -1 EBADF (Bad file descriptor) [pid 6209] close(16) = -1 EBADF (Bad file descriptor) [pid 6209] close(17) = -1 EBADF (Bad file descriptor) [pid 6209] close(18) = -1 EBADF (Bad file descriptor) [pid 6209] close(19) = -1 EBADF (Bad file descriptor) [pid 6209] close(20) = -1 EBADF (Bad file descriptor) [pid 6209] close(21) = -1 EBADF (Bad file descriptor) [pid 6209] close(22) = -1 EBADF (Bad file descriptor) [pid 6209] close(23) = -1 EBADF (Bad file descriptor) [pid 6209] close(24) = -1 EBADF (Bad file descriptor) [pid 6209] close(25) = -1 EBADF (Bad file descriptor) [pid 6209] close(26) = -1 EBADF (Bad file descriptor) [pid 6209] close(27) = -1 EBADF (Bad file descriptor) [pid 6209] close(28) = -1 EBADF (Bad file descriptor) [pid 6209] close(29) = -1 EBADF (Bad file descriptor) [pid 6209] exit_group(0 [pid 6211] <... futex resumed>) = ? [pid 6210] <... futex resumed>) = ? [pid 6209] <... exit_group resumed>) = ? [pid 6211] +++ exited with 0 +++ [pid 6210] +++ exited with 0 +++ [pid 6209] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1188, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 72.593661][ T6210] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./396/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./396") = 0 [pid 5019] mkdir("./397", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6212 attached [pid 6212] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1191 [pid 6212] chdir("./397") = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6212] setpgid(0, 0) = 0 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6212] write(3, "1000", 4) = 4 [pid 6212] close(3) = 0 [pid 6212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6212] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6212] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6212] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6212] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6213 attached => {parent_tid=[1192]}, 88) = 1192 [pid 6213] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], [pid 6213] <... rseq resumed>) = 0 [pid 6212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6213] set_robust_list(0x7f15c1e659a0, 24 [pid 6212] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6212] <... futex resumed>) = 0 [pid 6213] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6213] memfd_create("syzkaller", 0) = 3 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6213] munmap(0x7f15b9a45000, 524288) = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6213] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6213] close(3) = 0 [pid 6213] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6213] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6213] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6213] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6213] ioctl(4, LOOP_CLR_FD) = 0 [pid 6213] close(4) = 0 [pid 6213] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6212] <... futex resumed>) = 0 [pid 6212] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6212] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6212] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6212] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6213] <... mknodat resumed>) = 0 [pid 6212] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6213] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6214 attached [pid 6214] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6212] <... clone3 resumed> => {parent_tid=[1193]}, 88) = 1193 [pid 6214] <... rseq resumed>) = 0 [pid 6214] set_robust_list(0x7f15b9ac49a0, 24 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6214] <... set_robust_list resumed>) = 0 [pid 6212] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] <... futex resumed>) = 0 [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6214] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6214] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6214] chdir(".") = 0 [pid 6214] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6212] <... futex resumed>) = 0 [pid 6214] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] close(3) = 0 [pid 6212] close(4) = 0 [pid 6212] close(5) = -1 EBADF (Bad file descriptor) [pid 6212] close(6) = -1 EBADF (Bad file descriptor) [pid 6212] close(7) = -1 EBADF (Bad file descriptor) [pid 6212] close(8) = -1 EBADF (Bad file descriptor) [pid 6212] close(9) = -1 EBADF (Bad file descriptor) [pid 6212] close(10) = -1 EBADF (Bad file descriptor) [pid 6212] close(11) = -1 EBADF (Bad file descriptor) [pid 6212] close(12) = -1 EBADF (Bad file descriptor) [pid 6212] close(13) = -1 EBADF (Bad file descriptor) [pid 6212] close(14) = -1 EBADF (Bad file descriptor) [pid 6212] close(15) = -1 EBADF (Bad file descriptor) [pid 6212] close(16) = -1 EBADF (Bad file descriptor) [pid 6212] close(17) = -1 EBADF (Bad file descriptor) [pid 6212] close(18) = -1 EBADF (Bad file descriptor) [pid 6212] close(19) = -1 EBADF (Bad file descriptor) [pid 6212] close(20) = -1 EBADF (Bad file descriptor) [pid 6212] close(21) = -1 EBADF (Bad file descriptor) [pid 6212] close(22) = -1 EBADF (Bad file descriptor) [pid 6212] close(23) = -1 EBADF (Bad file descriptor) [pid 6212] close(24) = -1 EBADF (Bad file descriptor) [pid 6212] close(25) = -1 EBADF (Bad file descriptor) [pid 6212] close(26) = -1 EBADF (Bad file descriptor) [pid 6212] close(27) = -1 EBADF (Bad file descriptor) [pid 6212] close(28) = -1 EBADF (Bad file descriptor) [pid 6212] close(29) = -1 EBADF (Bad file descriptor) [pid 6212] exit_group(0 [pid 6214] <... futex resumed>) = ? [pid 6213] <... futex resumed>) = ? [pid 6212] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 6212] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1191, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./397/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./397") = 0 [pid 5019] mkdir("./398", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.693784][ T6213] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1194 ./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x555556a426a0, 24) = 0 [pid 6215] chdir("./398") = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] setpgid(0, 0) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6215] write(3, "1000", 4) = 4 [pid 6215] close(3) = 0 [pid 6215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6215] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6215] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6215] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6216 attached => {parent_tid=[1195]}, 88) = 1195 [pid 6216] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6216] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6216] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6215] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6216] <... futex resumed>) = 0 [pid 6215] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6216] memfd_create("syzkaller", 0) = 3 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6216] munmap(0x7f15b9a45000, 524288) = 0 [pid 6216] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6216] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6216] close(3) = 0 [pid 6216] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6216] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6216] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6216] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6216] ioctl(4, LOOP_CLR_FD) = 0 [pid 6216] close(4) = 0 [pid 6216] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6216] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6215] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... mknodat resumed>) = 0 [pid 6215] <... futex resumed>) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6215] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6216] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] <... mprotect resumed>) = 0 [pid 6216] <... futex resumed>) = 0 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6216] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6217 attached [pid 6217] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6215] <... clone3 resumed> => {parent_tid=[1196]}, 88) = 1196 [pid 6215] rt_sigprocmask(SIG_SETMASK, [], [pid 6217] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6217] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6215] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6217] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6217] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6217] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6217] chdir(".") = 0 [pid 6217] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] close(3) = 0 [pid 6215] close(4 [pid 6217] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] <... close resumed>) = 0 [pid 6215] close(5) = -1 EBADF (Bad file descriptor) [pid 6215] close(6) = -1 EBADF (Bad file descriptor) [pid 6215] close(7) = -1 EBADF (Bad file descriptor) [pid 6215] close(8) = -1 EBADF (Bad file descriptor) [pid 6215] close(9) = -1 EBADF (Bad file descriptor) [pid 6215] close(10) = -1 EBADF (Bad file descriptor) [pid 6215] close(11) = -1 EBADF (Bad file descriptor) [pid 6215] close(12) = -1 EBADF (Bad file descriptor) [pid 6215] close(13) = -1 EBADF (Bad file descriptor) [pid 6215] close(14) = -1 EBADF (Bad file descriptor) [pid 6215] close(15) = -1 EBADF (Bad file descriptor) [pid 6215] close(16) = -1 EBADF (Bad file descriptor) [pid 6215] close(17) = -1 EBADF (Bad file descriptor) [pid 6215] close(18) = -1 EBADF (Bad file descriptor) [pid 6215] close(19) = -1 EBADF (Bad file descriptor) [pid 6215] close(20) = -1 EBADF (Bad file descriptor) [pid 6215] close(21) = -1 EBADF (Bad file descriptor) [pid 6215] close(22) = -1 EBADF (Bad file descriptor) [pid 6215] close(23) = -1 EBADF (Bad file descriptor) [pid 6215] close(24) = -1 EBADF (Bad file descriptor) [pid 6215] close(25) = -1 EBADF (Bad file descriptor) [pid 6215] close(26) = -1 EBADF (Bad file descriptor) [pid 6215] close(27) = -1 EBADF (Bad file descriptor) [pid 6215] close(28) = -1 EBADF (Bad file descriptor) [pid 6215] close(29) = -1 EBADF (Bad file descriptor) [pid 6215] exit_group(0) = ? [pid 6217] <... futex resumed>) = ? [pid 6217] +++ exited with 0 +++ [pid 6216] <... futex resumed>) = ? [pid 6216] +++ exited with 0 +++ [pid 6215] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1194, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./398/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./398") = 0 [pid 5019] mkdir("./399", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.777810][ T6216] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x555556a426a0, 24) = 0 [pid 6218] chdir("./399" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1197 [pid 6218] <... chdir resumed>) = 0 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] setpgid(0, 0) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6218] write(3, "1000", 4) = 4 [pid 6218] close(3) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6218] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6218] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6218] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1198]}, 88) = 1198 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6218] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6219 attached [pid 6219] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6219] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6219] memfd_create("syzkaller", 0) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6219] munmap(0x7f15b9a45000, 524288) = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6219] close(3) = 0 [pid 6219] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6219] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6219] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6219] ioctl(4, LOOP_CLR_FD) = 0 [pid 6219] close(4) = 0 [pid 6219] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6218] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6218] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1199]}, 88) = 1199 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6218] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6218] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6220 attached [pid 6220] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6219] <... mknodat resumed>) = 0 [pid 6219] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6219] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] <... rseq resumed>) = 0 [pid 6220] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6220] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6220] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6220] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6220] chdir(".") = 0 [pid 6220] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6218] <... futex resumed>) = 0 [pid 6218] close(3) = 0 [pid 6218] close(4) = 0 [pid 6218] close(5) = -1 EBADF (Bad file descriptor) [pid 6218] close(6) = -1 EBADF (Bad file descriptor) [pid 6218] close(7) = -1 EBADF (Bad file descriptor) [pid 6218] close(8) = -1 EBADF (Bad file descriptor) [pid 6218] close(9) = -1 EBADF (Bad file descriptor) [pid 6218] close(10) = -1 EBADF (Bad file descriptor) [pid 6218] close(11) = -1 EBADF (Bad file descriptor) [pid 6218] close(12) = -1 EBADF (Bad file descriptor) [pid 6218] close(13) = -1 EBADF (Bad file descriptor) [pid 6218] close(14) = -1 EBADF (Bad file descriptor) [pid 6218] close(15) = -1 EBADF (Bad file descriptor) [pid 6218] close(16) = -1 EBADF (Bad file descriptor) [pid 6218] close(17) = -1 EBADF (Bad file descriptor) [pid 6218] close(18) = -1 EBADF (Bad file descriptor) [pid 6218] close(19) = -1 EBADF (Bad file descriptor) [pid 6218] close(20) = -1 EBADF (Bad file descriptor) [pid 6218] close(21) = -1 EBADF (Bad file descriptor) [pid 6218] close(22) = -1 EBADF (Bad file descriptor) [pid 6218] close(23) = -1 EBADF (Bad file descriptor) [pid 6218] close(24) = -1 EBADF (Bad file descriptor) [pid 6218] close(25) = -1 EBADF (Bad file descriptor) [pid 6218] close(26) = -1 EBADF (Bad file descriptor) [pid 6218] close(27) = -1 EBADF (Bad file descriptor) [pid 6218] close(28) = -1 EBADF (Bad file descriptor) [pid 6218] close(29) = -1 EBADF (Bad file descriptor) [pid 6218] exit_group(0 [pid 6219] <... futex resumed>) = ? [pid 6218] <... exit_group resumed>) = ? [pid 6219] +++ exited with 0 +++ [pid 6220] +++ exited with 0 +++ [pid 6218] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1197, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./399/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [ 72.853720][ T6219] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] rmdir("./399") = 0 [pid 5019] mkdir("./400", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1200 ./strace-static-x86_64: Process 6221 attached [pid 6221] set_robust_list(0x555556a426a0, 24) = 0 [pid 6221] chdir("./400") = 0 [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6221] setpgid(0, 0) = 0 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6221] write(3, "1000", 4) = 4 [pid 6221] close(3) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6221] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6221] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6221] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1201]}, 88) = 1201 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6221] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6222 attached [pid 6222] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6222] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6222] memfd_create("syzkaller", 0) = 3 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6222] munmap(0x7f15b9a45000, 524288) = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6222] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6222] close(3) = 0 [pid 6222] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6222] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6222] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6222] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6222] ioctl(4, LOOP_CLR_FD) = 0 [pid 6222] close(4) = 0 [pid 6222] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] <... futex resumed>) = 0 [pid 6221] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6222] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6221] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6222] <... mknodat resumed>) = 0 [pid 6222] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6222] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1202]}, 88) = 1202 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6221] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6223 attached [pid 6223] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6223] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6223] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6223] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6223] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6223] chdir(".") = 0 [pid 6223] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] <... futex resumed>) = 0 [pid 6221] close(3) = 0 [pid 6221] close(4) = 0 [pid 6221] close(5) = -1 EBADF (Bad file descriptor) [pid 6221] close(6) = -1 EBADF (Bad file descriptor) [pid 6221] close(7) = -1 EBADF (Bad file descriptor) [pid 6221] close(8) = -1 EBADF (Bad file descriptor) [pid 6221] close(9) = -1 EBADF (Bad file descriptor) [pid 6221] close(10) = -1 EBADF (Bad file descriptor) [pid 6221] close(11 [pid 6223] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6221] close(12) = -1 EBADF (Bad file descriptor) [pid 6221] close(13) = -1 EBADF (Bad file descriptor) [pid 6221] close(14) = -1 EBADF (Bad file descriptor) [pid 6221] close(15) = -1 EBADF (Bad file descriptor) [pid 6221] close(16) = -1 EBADF (Bad file descriptor) [pid 6221] close(17) = -1 EBADF (Bad file descriptor) [pid 6221] close(18) = -1 EBADF (Bad file descriptor) [pid 6221] close(19) = -1 EBADF (Bad file descriptor) [pid 6221] close(20) = -1 EBADF (Bad file descriptor) [pid 6221] close(21) = -1 EBADF (Bad file descriptor) [pid 6221] close(22) = -1 EBADF (Bad file descriptor) [pid 6221] close(23) = -1 EBADF (Bad file descriptor) [pid 6221] close(24) = -1 EBADF (Bad file descriptor) [pid 6221] close(25) = -1 EBADF (Bad file descriptor) [pid 6221] close(26) = -1 EBADF (Bad file descriptor) [pid 6221] close(27) = -1 EBADF (Bad file descriptor) [pid 6221] close(28) = -1 EBADF (Bad file descriptor) [pid 6221] close(29) = -1 EBADF (Bad file descriptor) [pid 6221] exit_group(0 [pid 6223] <... futex resumed>) = ? [pid 6222] <... futex resumed>) = ? [pid 6221] <... exit_group resumed>) = ? [pid 6223] +++ exited with 0 +++ [pid 6222] +++ exited with 0 +++ [pid 6221] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1200, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./400/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./400/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./400") = 0 [pid 5019] mkdir("./401", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.935192][ T6222] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1203 ./strace-static-x86_64: Process 6224 attached [pid 6224] set_robust_list(0x555556a426a0, 24) = 0 [pid 6224] chdir("./401") = 0 [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6224] setpgid(0, 0) = 0 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6224] write(3, "1000", 4) = 4 [pid 6224] close(3) = 0 [pid 6224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6224] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6224] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6224] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6225 attached => {parent_tid=[1204]}, 88) = 1204 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], [pid 6225] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6225] set_robust_list(0x7f15c1e659a0, 24 [pid 6224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6225] <... set_robust_list resumed>) = 0 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6225] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6224] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6224] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6225] <... futex resumed>) = 0 [pid 6225] memfd_create("syzkaller", 0) = 3 [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6225] munmap(0x7f15b9a45000, 524288) = 0 [pid 6225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6225] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6225] close(3) = 0 [pid 6225] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6225] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6225] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6225] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6225] ioctl(4, LOOP_CLR_FD) = 0 [pid 6225] close(4) = 0 [pid 6225] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6224] <... futex resumed>) = 0 [pid 6224] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6224] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6225] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6224] <... mprotect resumed>) = 0 [pid 6224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1205]}, 88) = 1205 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6224] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6226 attached [pid 6226] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6226] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6226] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6226] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6225] <... mknodat resumed>) = 0 [pid 6226] <... mount resumed>) = 0 [pid 6226] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6226] chdir(".") = 0 [pid 6226] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = 1 [pid 6226] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6224] close(3) = 0 [pid 6224] close(4) = 0 [pid 6224] close(5) = -1 EBADF (Bad file descriptor) [pid 6224] close(6) = -1 EBADF (Bad file descriptor) [pid 6224] close(7) = -1 EBADF (Bad file descriptor) [pid 6224] close(8) = -1 EBADF (Bad file descriptor) [pid 6224] close(9) = -1 EBADF (Bad file descriptor) [pid 6224] close(10) = -1 EBADF (Bad file descriptor) [pid 6224] close(11) = -1 EBADF (Bad file descriptor) [pid 6224] close(12) = -1 EBADF (Bad file descriptor) [pid 6224] close(13) = -1 EBADF (Bad file descriptor) [pid 6224] close(14) = -1 EBADF (Bad file descriptor) [pid 6224] close(15) = -1 EBADF (Bad file descriptor) [pid 6224] close(16) = -1 EBADF (Bad file descriptor) [pid 6224] close(17) = -1 EBADF (Bad file descriptor) [pid 6224] close(18) = -1 EBADF (Bad file descriptor) [pid 6224] close(19) = -1 EBADF (Bad file descriptor) [pid 6224] close(20) = -1 EBADF (Bad file descriptor) [pid 6224] close(21) = -1 EBADF (Bad file descriptor) [pid 6224] close(22) = -1 EBADF (Bad file descriptor) [pid 6224] close(23) = -1 EBADF (Bad file descriptor) [pid 6224] close(24) = -1 EBADF (Bad file descriptor) [pid 6224] close(25) = -1 EBADF (Bad file descriptor) [pid 6224] close(26) = -1 EBADF (Bad file descriptor) [pid 6224] close(27) = -1 EBADF (Bad file descriptor) [pid 6224] close(28) = -1 EBADF (Bad file descriptor) [pid 6224] close(29) = -1 EBADF (Bad file descriptor) [pid 6224] exit_group(0 [pid 6226] <... futex resumed>) = ? [pid 6225] <... futex resumed>) = ? [pid 6224] <... exit_group resumed>) = ? [pid 6226] +++ exited with 0 +++ [pid 6225] +++ exited with 0 +++ [pid 6224] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1203, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./401/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./401/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./401") = 0 [pid 5019] mkdir("./402", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1206 ./strace-static-x86_64: Process 6227 attached [pid 6227] set_robust_list(0x555556a426a0, 24) = 0 [pid 6227] chdir("./402") = 0 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6227] setpgid(0, 0) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6227] write(3, "1000", 4) = 4 [pid 6227] close(3) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6227] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6227] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 73.020267][ T6225] loop0: detected capacity change from 0 to 1024 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6228 attached [pid 6228] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6228] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6228] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] <... clone3 resumed> => {parent_tid=[1207]}, 88) = 1207 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6227] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6228] memfd_create("syzkaller", 0 [pid 6227] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6228] <... memfd_create resumed>) = 3 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6228] munmap(0x7f15b9a45000, 524288) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6228] close(3) = 0 [pid 6228] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6228] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6228] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6228] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6228] ioctl(4, LOOP_CLR_FD) = 0 [pid 6228] close(4) = 0 [pid 6228] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6227] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6227] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6227] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6228] <... mknodat resumed>) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6228] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6229 attached [pid 6229] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6229] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6229] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] <... futex resumed>) = 0 [pid 6227] <... clone3 resumed> => {parent_tid=[1208]}, 88) = 1208 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6227] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 1 [pid 6227] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6229] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6228] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6229] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6229] chdir(".") = 0 [pid 6229] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6229] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] close(3) = 0 [pid 6227] close(4) = 0 [pid 6227] close(5) = -1 EBADF (Bad file descriptor) [pid 6227] close(6) = -1 EBADF (Bad file descriptor) [pid 6227] close(7) = -1 EBADF (Bad file descriptor) [pid 6227] close(8) = -1 EBADF (Bad file descriptor) [pid 6227] close(9) = -1 EBADF (Bad file descriptor) [pid 6227] close(10) = -1 EBADF (Bad file descriptor) [pid 6227] close(11) = -1 EBADF (Bad file descriptor) [pid 6227] close(12) = -1 EBADF (Bad file descriptor) [pid 6227] close(13) = -1 EBADF (Bad file descriptor) [pid 6227] close(14) = -1 EBADF (Bad file descriptor) [pid 6227] close(15) = -1 EBADF (Bad file descriptor) [pid 6227] close(16) = -1 EBADF (Bad file descriptor) [pid 6227] close(17) = -1 EBADF (Bad file descriptor) [pid 6227] close(18) = -1 EBADF (Bad file descriptor) [pid 6227] close(19) = -1 EBADF (Bad file descriptor) [pid 6227] close(20) = -1 EBADF (Bad file descriptor) [pid 6227] close(21) = -1 EBADF (Bad file descriptor) [pid 6227] close(22) = -1 EBADF (Bad file descriptor) [pid 6227] close(23) = -1 EBADF (Bad file descriptor) [pid 6227] close(24) = -1 EBADF (Bad file descriptor) [pid 6227] close(25) = -1 EBADF (Bad file descriptor) [pid 6227] close(26) = -1 EBADF (Bad file descriptor) [pid 6227] close(27) = -1 EBADF (Bad file descriptor) [pid 6227] close(28) = -1 EBADF (Bad file descriptor) [pid 6227] close(29) = -1 EBADF (Bad file descriptor) [pid 6227] exit_group(0 [pid 6229] <... futex resumed>) = ? [pid 6227] <... exit_group resumed>) = ? [pid 6228] <... futex resumed>) = ? [pid 6229] +++ exited with 0 +++ [pid 6228] +++ exited with 0 +++ [pid 6227] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1206, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 73.100818][ T6228] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./402/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./402/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./402") = 0 [pid 5019] mkdir("./403", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1209 ./strace-static-x86_64: Process 6230 attached [pid 6230] set_robust_list(0x555556a426a0, 24) = 0 [pid 6230] chdir("./403") = 0 [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6230] setpgid(0, 0) = 0 [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6230] write(3, "1000", 4) = 4 [pid 6230] close(3) = 0 [pid 6230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6230] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6230] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6230] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6231 attached [pid 6231] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6230] <... clone3 resumed> => {parent_tid=[1210]}, 88) = 1210 [pid 6231] <... rseq resumed>) = 0 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6231] set_robust_list(0x7f15c1e659a0, 24 [pid 6230] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] <... set_robust_list resumed>) = 0 [pid 6230] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6231] memfd_create("syzkaller", 0) = 3 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6231] munmap(0x7f15b9a45000, 524288) = 0 [pid 6231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6231] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6231] close(3) = 0 [pid 6231] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6231] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6231] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6231] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6231] ioctl(4, LOOP_CLR_FD) = 0 [pid 6231] close(4) = 0 [pid 6231] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6230] <... futex resumed>) = 0 [pid 6230] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6230] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6231] <... futex resumed>) = 0 [pid 6231] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6230] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6230] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1211]}, 88) = 1211 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], [pid 6231] <... mknodat resumed>) = 0 [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6230] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6231] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6232 attached [pid 6232] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6232] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6232] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6232] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6232] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6232] chdir(".") = 0 [pid 6232] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6230] <... futex resumed>) = 0 [pid 6230] close(3) = 0 [pid 6230] close(4) = 0 [pid 6232] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6230] close(5) = -1 EBADF (Bad file descriptor) [pid 6230] close(6) = -1 EBADF (Bad file descriptor) [pid 6230] close(7) = -1 EBADF (Bad file descriptor) [pid 6230] close(8) = -1 EBADF (Bad file descriptor) [pid 6230] close(9) = -1 EBADF (Bad file descriptor) [pid 6230] close(10) = -1 EBADF (Bad file descriptor) [pid 6230] close(11) = -1 EBADF (Bad file descriptor) [pid 6230] close(12) = -1 EBADF (Bad file descriptor) [pid 6230] close(13) = -1 EBADF (Bad file descriptor) [pid 6230] close(14) = -1 EBADF (Bad file descriptor) [pid 6230] close(15) = -1 EBADF (Bad file descriptor) [pid 6230] close(16) = -1 EBADF (Bad file descriptor) [pid 6230] close(17) = -1 EBADF (Bad file descriptor) [pid 6230] close(18) = -1 EBADF (Bad file descriptor) [pid 6230] close(19) = -1 EBADF (Bad file descriptor) [pid 6230] close(20) = -1 EBADF (Bad file descriptor) [pid 6230] close(21) = -1 EBADF (Bad file descriptor) [pid 6230] close(22) = -1 EBADF (Bad file descriptor) [pid 6230] close(23) = -1 EBADF (Bad file descriptor) [pid 6230] close(24) = -1 EBADF (Bad file descriptor) [pid 6230] close(25) = -1 EBADF (Bad file descriptor) [pid 6230] close(26) = -1 EBADF (Bad file descriptor) [pid 6230] close(27) = -1 EBADF (Bad file descriptor) [pid 6230] close(28) = -1 EBADF (Bad file descriptor) [pid 6230] close(29) = -1 EBADF (Bad file descriptor) [pid 6230] exit_group(0 [pid 6231] <... futex resumed>) = ? [pid 6230] <... exit_group resumed>) = ? [pid 6231] +++ exited with 0 +++ [pid 6232] <... futex resumed>) = ? [pid 6232] +++ exited with 0 +++ [pid 6230] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1209, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./403/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./403/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./403") = 0 [pid 5019] mkdir("./404", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6233 attached [ 73.180418][ T6231] loop0: detected capacity change from 0 to 1024 [pid 6233] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1212 [pid 6233] chdir("./404") = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6233] setpgid(0, 0) = 0 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6233] write(3, "1000", 4) = 4 [pid 6233] close(3) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6233] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6233] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1213]}, 88) = 1213 [pid 6233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6233] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6234 attached [pid 6234] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6234] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6234] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6234] memfd_create("syzkaller", 0) = 3 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6234] munmap(0x7f15b9a45000, 524288) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6234] close(3) = 0 [pid 6234] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6234] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6234] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6234] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6234] ioctl(4, LOOP_CLR_FD) = 0 [pid 6234] close(4) = 0 [pid 6234] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6233] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1214]}, 88) = 1214 [pid 6233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6233] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6234] <... futex resumed>) = 1 [pid 6234] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6235 attached [pid 6235] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6235] set_robust_list(0x7f15b9ac49a0, 24 [pid 6234] <... mknodat resumed>) = 0 [pid 6234] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6234] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... set_robust_list resumed>) = 0 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6235] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6235] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6235] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6235] chdir(".") = 0 [pid 6235] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6233] close(3) = 0 [pid 6233] close(4) = 0 [pid 6233] close(5) = -1 EBADF (Bad file descriptor) [pid 6233] close(6) = -1 EBADF (Bad file descriptor) [pid 6233] close(7) = -1 EBADF (Bad file descriptor) [pid 6233] close(8) = -1 EBADF (Bad file descriptor) [pid 6233] close(9) = -1 EBADF (Bad file descriptor) [pid 6233] close(10) = -1 EBADF (Bad file descriptor) [pid 6233] close(11) = -1 EBADF (Bad file descriptor) [pid 6233] close(12) = -1 EBADF (Bad file descriptor) [pid 6235] <... futex resumed>) = 1 [pid 6233] close(13 [pid 6235] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6233] close(14) = -1 EBADF (Bad file descriptor) [pid 6233] close(15) = -1 EBADF (Bad file descriptor) [pid 6233] close(16) = -1 EBADF (Bad file descriptor) [pid 6233] close(17) = -1 EBADF (Bad file descriptor) [pid 6233] close(18) = -1 EBADF (Bad file descriptor) [pid 6233] close(19) = -1 EBADF (Bad file descriptor) [pid 6233] close(20) = -1 EBADF (Bad file descriptor) [pid 6233] close(21) = -1 EBADF (Bad file descriptor) [pid 6233] close(22) = -1 EBADF (Bad file descriptor) [pid 6233] close(23) = -1 EBADF (Bad file descriptor) [pid 6233] close(24) = -1 EBADF (Bad file descriptor) [pid 6233] close(25) = -1 EBADF (Bad file descriptor) [pid 6233] close(26) = -1 EBADF (Bad file descriptor) [pid 6233] close(27) = -1 EBADF (Bad file descriptor) [pid 6233] close(28) = -1 EBADF (Bad file descriptor) [pid 6233] close(29) = -1 EBADF (Bad file descriptor) [pid 6233] exit_group(0 [pid 6235] <... futex resumed>) = ? [pid 6234] <... futex resumed>) = ? [pid 6233] <... exit_group resumed>) = ? [pid 6235] +++ exited with 0 +++ [pid 6234] +++ exited with 0 +++ [pid 6233] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1212, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./404/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./404/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./404") = 0 [pid 5019] mkdir("./405", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1215 ./strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x555556a426a0, 24) = 0 [pid 6236] chdir("./405") = 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6236] setpgid(0, 0) = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6236] write(3, "1000", 4) = 4 [pid 6236] close(3) = 0 [pid 6236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6236] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6236] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6237 attached [pid 6237] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6236] <... clone3 resumed> => {parent_tid=[1216]}, 88) = 1216 [pid 6237] <... rseq resumed>) = 0 [pid 6237] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6237] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] <... futex resumed>) = 0 [ 73.254291][ T6234] loop0: detected capacity change from 0 to 1024 [pid 6236] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6237] memfd_create("syzkaller", 0) = 3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6237] munmap(0x7f15b9a45000, 524288) = 0 [pid 6237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6237] close(3) = 0 [pid 6237] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6237] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6237] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6237] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6237] ioctl(4, LOOP_CLR_FD) = 0 [pid 6237] close(4) = 0 [pid 6237] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] <... futex resumed>) = 0 [pid 6236] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6237] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6236] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6236] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6237] <... mknodat resumed>) = 0 [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1217]}, 88) = 1217 [pid 6237] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6237] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6238 attached [pid 6238] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6238] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6238] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6237] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6238] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6238] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6238] chdir(".") = 0 [pid 6238] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6236] close(3) = 0 [pid 6236] close(4) = 0 [pid 6236] close(5) = -1 EBADF (Bad file descriptor) [pid 6236] close(6) = -1 EBADF (Bad file descriptor) [pid 6236] close(7) = -1 EBADF (Bad file descriptor) [pid 6236] close(8) = -1 EBADF (Bad file descriptor) [pid 6236] close(9) = -1 EBADF (Bad file descriptor) [pid 6236] close(10) = -1 EBADF (Bad file descriptor) [pid 6236] close(11) = -1 EBADF (Bad file descriptor) [pid 6236] close(12) = -1 EBADF (Bad file descriptor) [pid 6236] close(13) = -1 EBADF (Bad file descriptor) [pid 6236] close(14) = -1 EBADF (Bad file descriptor) [pid 6236] close(15) = -1 EBADF (Bad file descriptor) [pid 6236] close(16) = -1 EBADF (Bad file descriptor) [pid 6236] close(17) = -1 EBADF (Bad file descriptor) [pid 6236] close(18) = -1 EBADF (Bad file descriptor) [pid 6236] close(19 [pid 6238] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6236] close(20) = -1 EBADF (Bad file descriptor) [pid 6236] close(21) = -1 EBADF (Bad file descriptor) [pid 6236] close(22) = -1 EBADF (Bad file descriptor) [pid 6236] close(23) = -1 EBADF (Bad file descriptor) [pid 6236] close(24) = -1 EBADF (Bad file descriptor) [pid 6236] close(25) = -1 EBADF (Bad file descriptor) [pid 6236] close(26) = -1 EBADF (Bad file descriptor) [pid 6236] close(27) = -1 EBADF (Bad file descriptor) [pid 6236] close(28) = -1 EBADF (Bad file descriptor) [pid 6236] close(29) = -1 EBADF (Bad file descriptor) [pid 6236] exit_group(0) = ? [pid 6237] <... futex resumed>) = ? [pid 6238] <... futex resumed>) = ? [pid 6237] +++ exited with 0 +++ [pid 6238] +++ exited with 0 +++ [pid 6236] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1215, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./405/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./405/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./405") = 0 [pid 5019] mkdir("./406", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1218 ./strace-static-x86_64: Process 6239 attached [pid 6239] set_robust_list(0x555556a426a0, 24) = 0 [pid 6239] chdir("./406") = 0 [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6239] setpgid(0, 0) = 0 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6239] write(3, "1000", 4) = 4 [pid 6239] close(3) = 0 [pid 6239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6239] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6239] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6239] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1219]}, 88) = 1219 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6239] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6240 attached [pid 6240] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6240] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6240] memfd_create("syzkaller", 0) = 3 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6240] munmap(0x7f15b9a45000, 524288) = 0 [pid 6240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 73.321845][ T6237] loop0: detected capacity change from 0 to 1024 [pid 6240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6240] close(3) = 0 [pid 6240] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6240] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6240] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6240] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6240] ioctl(4, LOOP_CLR_FD) = 0 [pid 6240] close(4) = 0 [pid 6240] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... futex resumed>) = 0 [pid 6240] <... futex resumed>) = 1 [pid 6239] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6239] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1220]}, 88) = 1220 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6239] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6241 attached [pid 6241] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6240] <... mknodat resumed>) = 0 [pid 6240] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6240] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] <... rseq resumed>) = 0 [pid 6241] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6241] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6241] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6241] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6241] chdir(".") = 0 [pid 6241] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6239] close(3 [pid 6241] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6239] <... close resumed>) = 0 [pid 6239] close(4) = 0 [pid 6239] close(5) = -1 EBADF (Bad file descriptor) [pid 6239] close(6) = -1 EBADF (Bad file descriptor) [pid 6239] close(7) = -1 EBADF (Bad file descriptor) [pid 6239] close(8) = -1 EBADF (Bad file descriptor) [pid 6239] close(9) = -1 EBADF (Bad file descriptor) [pid 6239] close(10) = -1 EBADF (Bad file descriptor) [pid 6239] close(11) = -1 EBADF (Bad file descriptor) [pid 6239] close(12) = -1 EBADF (Bad file descriptor) [pid 6239] close(13) = -1 EBADF (Bad file descriptor) [pid 6239] close(14) = -1 EBADF (Bad file descriptor) [pid 6239] close(15) = -1 EBADF (Bad file descriptor) [pid 6239] close(16) = -1 EBADF (Bad file descriptor) [pid 6239] close(17) = -1 EBADF (Bad file descriptor) [pid 6239] close(18) = -1 EBADF (Bad file descriptor) [pid 6239] close(19) = -1 EBADF (Bad file descriptor) [pid 6239] close(20) = -1 EBADF (Bad file descriptor) [pid 6239] close(21) = -1 EBADF (Bad file descriptor) [pid 6239] close(22) = -1 EBADF (Bad file descriptor) [pid 6239] close(23) = -1 EBADF (Bad file descriptor) [pid 6239] close(24) = -1 EBADF (Bad file descriptor) [pid 6239] close(25) = -1 EBADF (Bad file descriptor) [pid 6239] close(26) = -1 EBADF (Bad file descriptor) [pid 6239] close(27) = -1 EBADF (Bad file descriptor) [pid 6239] close(28) = -1 EBADF (Bad file descriptor) [pid 6239] close(29) = -1 EBADF (Bad file descriptor) [pid 6239] exit_group(0 [pid 6241] <... futex resumed>) = ? [pid 6240] <... futex resumed>) = ? [pid 6239] <... exit_group resumed>) = ? [pid 6240] +++ exited with 0 +++ [pid 6241] +++ exited with 0 +++ [pid 6239] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1218, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./406/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./406") = 0 [pid 5019] mkdir("./407", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1221 ./strace-static-x86_64: Process 6242 attached [pid 6242] set_robust_list(0x555556a426a0, 24) = 0 [pid 6242] chdir("./407") = 0 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6242] write(3, "1000", 4) = 4 [pid 6242] close(3) = 0 [ 73.385672][ T6240] loop0: detected capacity change from 0 to 1024 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6242] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6242] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1222]}, 88) = 1222 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6243 attached [pid 6243] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6243] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6243] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6242] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6242] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6243] memfd_create("syzkaller", 0) = 3 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6243] munmap(0x7f15b9a45000, 524288) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6243] close(3) = 0 [pid 6243] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6243] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6243] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6243] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6243] ioctl(4, LOOP_CLR_FD) = 0 [pid 6243] close(4) = 0 [pid 6243] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6242] <... futex resumed>) = 0 [pid 6242] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6242] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1223]}, 88) = 1223 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6242] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6243] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6244 attached [pid 6244] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6244] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6244] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6244] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6243] <... mknodat resumed>) = 0 [pid 6243] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] <... mount resumed>) = 0 [pid 6244] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6244] chdir(".") = 0 [pid 6244] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = 0 [pid 6244] <... futex resumed>) = 1 [pid 6244] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] close(3) = 0 [pid 6242] close(4) = 0 [pid 6242] close(5) = -1 EBADF (Bad file descriptor) [pid 6242] close(6) = -1 EBADF (Bad file descriptor) [pid 6242] close(7) = -1 EBADF (Bad file descriptor) [pid 6242] close(8) = -1 EBADF (Bad file descriptor) [pid 6242] close(9) = -1 EBADF (Bad file descriptor) [pid 6242] close(10) = -1 EBADF (Bad file descriptor) [pid 6242] close(11) = -1 EBADF (Bad file descriptor) [pid 6242] close(12) = -1 EBADF (Bad file descriptor) [pid 6242] close(13) = -1 EBADF (Bad file descriptor) [pid 6242] close(14) = -1 EBADF (Bad file descriptor) [pid 6242] close(15) = -1 EBADF (Bad file descriptor) [pid 6242] close(16) = -1 EBADF (Bad file descriptor) [pid 6242] close(17) = -1 EBADF (Bad file descriptor) [pid 6242] close(18) = -1 EBADF (Bad file descriptor) [pid 6242] close(19) = -1 EBADF (Bad file descriptor) [pid 6242] close(20) = -1 EBADF (Bad file descriptor) [pid 6242] close(21) = -1 EBADF (Bad file descriptor) [pid 6242] close(22) = -1 EBADF (Bad file descriptor) [pid 6242] close(23) = -1 EBADF (Bad file descriptor) [pid 6242] close(24) = -1 EBADF (Bad file descriptor) [pid 6242] close(25) = -1 EBADF (Bad file descriptor) [pid 6242] close(26) = -1 EBADF (Bad file descriptor) [pid 6242] close(27) = -1 EBADF (Bad file descriptor) [pid 6242] close(28) = -1 EBADF (Bad file descriptor) [pid 6242] close(29) = -1 EBADF (Bad file descriptor) [pid 6242] exit_group(0 [pid 6244] <... futex resumed>) = ? [pid 6243] <... futex resumed>) = ? [pid 6242] <... exit_group resumed>) = ? [pid 6243] +++ exited with 0 +++ [pid 6244] +++ exited with 0 +++ [pid 6242] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1221, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./407/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./407") = 0 [pid 5019] mkdir("./408", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1224 ./strace-static-x86_64: Process 6245 attached [pid 6245] set_robust_list(0x555556a426a0, 24) = 0 [pid 6245] chdir("./408") = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 73.459002][ T6243] loop0: detected capacity change from 0 to 1024 [pid 6245] write(3, "1000", 4) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6245] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6246 attached => {parent_tid=[1225]}, 88) = 1225 [pid 6246] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6246] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6246] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6245] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6246] <... futex resumed>) = 0 [pid 6245] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6246] memfd_create("syzkaller", 0) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6246] munmap(0x7f15b9a45000, 524288) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6246] close(3) = 0 [pid 6246] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6246] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6246] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6246] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6246] ioctl(4, LOOP_CLR_FD) = 0 [pid 6246] close(4) = 0 [pid 6246] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6245] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6245] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1226]}, 88) = 1226 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6245] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6247 attached [pid 6246] <... futex resumed>) = 1 [pid 6246] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6247] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6246] <... mknodat resumed>) = 0 [pid 6246] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6247] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6247] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6247] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6247] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6247] chdir(".") = 0 [pid 6247] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6245] close(3 [pid 6247] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] <... close resumed>) = 0 [pid 6245] close(4) = 0 [pid 6245] close(5) = -1 EBADF (Bad file descriptor) [pid 6245] close(6) = -1 EBADF (Bad file descriptor) [pid 6245] close(7) = -1 EBADF (Bad file descriptor) [pid 6245] close(8) = -1 EBADF (Bad file descriptor) [pid 6245] close(9) = -1 EBADF (Bad file descriptor) [pid 6245] close(10) = -1 EBADF (Bad file descriptor) [pid 6245] close(11) = -1 EBADF (Bad file descriptor) [pid 6245] close(12) = -1 EBADF (Bad file descriptor) [pid 6245] close(13) = -1 EBADF (Bad file descriptor) [pid 6245] close(14) = -1 EBADF (Bad file descriptor) [pid 6245] close(15) = -1 EBADF (Bad file descriptor) [pid 6245] close(16) = -1 EBADF (Bad file descriptor) [pid 6245] close(17) = -1 EBADF (Bad file descriptor) [pid 6245] close(18) = -1 EBADF (Bad file descriptor) [pid 6245] close(19) = -1 EBADF (Bad file descriptor) [pid 6245] close(20) = -1 EBADF (Bad file descriptor) [pid 6245] close(21) = -1 EBADF (Bad file descriptor) [pid 6245] close(22) = -1 EBADF (Bad file descriptor) [pid 6245] close(23) = -1 EBADF (Bad file descriptor) [pid 6245] close(24) = -1 EBADF (Bad file descriptor) [pid 6245] close(25) = -1 EBADF (Bad file descriptor) [pid 6245] close(26) = -1 EBADF (Bad file descriptor) [pid 6245] close(27) = -1 EBADF (Bad file descriptor) [pid 6245] close(28) = -1 EBADF (Bad file descriptor) [pid 6245] close(29) = -1 EBADF (Bad file descriptor) [pid 6245] exit_group(0 [pid 6247] <... futex resumed>) = ? [pid 6246] <... futex resumed>) = ? [pid 6245] <... exit_group resumed>) = ? [pid 6247] +++ exited with 0 +++ [pid 6246] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1224, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./408", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./408/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./408/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./408") = 0 [pid 5019] mkdir("./409", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 73.535103][ T6246] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1227 ./strace-static-x86_64: Process 6248 attached [pid 6248] set_robust_list(0x555556a426a0, 24) = 0 [pid 6248] chdir("./409") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6248] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1228]}, 88) = 1228 [pid 6248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6248] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6249 attached [pid 6249] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6249] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6249] memfd_create("syzkaller", 0) = 3 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6249] munmap(0x7f15b9a45000, 524288) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6249] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6249] close(3) = 0 [pid 6249] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6249] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6249] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6249] ioctl(4, LOOP_CLR_FD) = 0 [pid 6249] close(4) = 0 [pid 6249] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 0 [pid 6249] <... futex resumed>) = 1 [pid 6248] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6248] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6248] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1229]}, 88) = 1229 [pid 6248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6248] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6249] <... mknodat resumed>) = 0 [pid 6249] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6250 attached [pid 6250] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6250] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6250] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6250] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6250] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6250] chdir(".") = 0 [pid 6250] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6248] <... futex resumed>) = 0 [pid 6248] close(3) = 0 [pid 6248] close(4) = 0 [pid 6248] close(5) = -1 EBADF (Bad file descriptor) [pid 6248] close(6) = -1 EBADF (Bad file descriptor) [pid 6248] close(7) = -1 EBADF (Bad file descriptor) [pid 6250] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6248] close(8) = -1 EBADF (Bad file descriptor) [pid 6248] close(9) = -1 EBADF (Bad file descriptor) [pid 6248] close(10) = -1 EBADF (Bad file descriptor) [pid 6248] close(11) = -1 EBADF (Bad file descriptor) [pid 6248] close(12) = -1 EBADF (Bad file descriptor) [pid 6248] close(13) = -1 EBADF (Bad file descriptor) [pid 6248] close(14) = -1 EBADF (Bad file descriptor) [pid 6248] close(15) = -1 EBADF (Bad file descriptor) [pid 6248] close(16) = -1 EBADF (Bad file descriptor) [pid 6248] close(17) = -1 EBADF (Bad file descriptor) [pid 6248] close(18) = -1 EBADF (Bad file descriptor) [pid 6248] close(19) = -1 EBADF (Bad file descriptor) [pid 6248] close(20) = -1 EBADF (Bad file descriptor) [pid 6248] close(21) = -1 EBADF (Bad file descriptor) [pid 6248] close(22) = -1 EBADF (Bad file descriptor) [pid 6248] close(23) = -1 EBADF (Bad file descriptor) [pid 6248] close(24) = -1 EBADF (Bad file descriptor) [pid 6248] close(25) = -1 EBADF (Bad file descriptor) [pid 6248] close(26) = -1 EBADF (Bad file descriptor) [pid 6248] close(27) = -1 EBADF (Bad file descriptor) [pid 6248] close(28) = -1 EBADF (Bad file descriptor) [pid 6248] close(29) = -1 EBADF (Bad file descriptor) [pid 6248] exit_group(0 [pid 6250] <... futex resumed>) = ? [pid 6249] <... futex resumed>) = ? [pid 6248] <... exit_group resumed>) = ? [pid 6249] +++ exited with 0 +++ [pid 6250] +++ exited with 0 +++ [pid 6248] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1227, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./409", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./409/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./409/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./409") = 0 [pid 5019] mkdir("./410", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 73.604095][ T6249] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1230 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x555556a426a0, 24) = 0 [pid 6251] chdir("./410") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6251] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1231]}, 88) = 1231 [pid 6251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6251] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6252 attached [pid 6252] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6252] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6252] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6252] munmap(0x7f15b9a45000, 524288) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6252] close(3) = 0 [pid 6252] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6252] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6252] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6252] ioctl(4, LOOP_CLR_FD) = 0 [pid 6252] close(4) = 0 [pid 6252] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6252] <... futex resumed>) = 1 [pid 6251] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6251] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6251] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6253 attached => {parent_tid=[1232]}, 88) = 1232 [pid 6251] rt_sigprocmask(SIG_SETMASK, [], [pid 6252] <... mknodat resumed>) = 0 [pid 6253] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6253] <... rseq resumed>) = 0 [pid 6253] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6253] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6252] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] <... futex resumed>) = 0 [pid 6251] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6253] <... futex resumed>) = 0 [pid 6252] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6253] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6253] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6253] chdir(".") = 0 [pid 6253] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6251] close(3) = 0 [pid 6251] close(4) = 0 [pid 6251] close(5) = -1 EBADF (Bad file descriptor) [pid 6251] close(6) = -1 EBADF (Bad file descriptor) [pid 6251] close(7) = -1 EBADF (Bad file descriptor) [pid 6251] close(8) = -1 EBADF (Bad file descriptor) [pid 6251] close(9) = -1 EBADF (Bad file descriptor) [pid 6251] close(10) = -1 EBADF (Bad file descriptor) [pid 6251] close(11) = -1 EBADF (Bad file descriptor) [pid 6251] close(12) = -1 EBADF (Bad file descriptor) [pid 6251] close(13) = -1 EBADF (Bad file descriptor) [pid 6251] close(14) = -1 EBADF (Bad file descriptor) [pid 6251] close(15) = -1 EBADF (Bad file descriptor) [pid 6251] close(16) = -1 EBADF (Bad file descriptor) [pid 6251] close(17) = -1 EBADF (Bad file descriptor) [pid 6251] close(18) = -1 EBADF (Bad file descriptor) [pid 6251] close(19) = -1 EBADF (Bad file descriptor) [pid 6251] close(20) = -1 EBADF (Bad file descriptor) [pid 6251] close(21) = -1 EBADF (Bad file descriptor) [pid 6251] close(22) = -1 EBADF (Bad file descriptor) [pid 6251] close(23) = -1 EBADF (Bad file descriptor) [pid 6251] close(24) = -1 EBADF (Bad file descriptor) [pid 6251] close(25) = -1 EBADF (Bad file descriptor) [pid 6251] close(26 [pid 6253] <... futex resumed>) = 1 [pid 6251] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6253] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] close(27) = -1 EBADF (Bad file descriptor) [pid 6251] close(28) = -1 EBADF (Bad file descriptor) [pid 6251] close(29) = -1 EBADF (Bad file descriptor) [pid 6251] exit_group(0 [pid 6253] <... futex resumed>) = ? [pid 6252] <... futex resumed>) = ? [pid 6251] <... exit_group resumed>) = ? [pid 6253] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1230, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./410", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [ 73.684899][ T6252] loop0: detected capacity change from 0 to 1024 [pid 5019] close(4) = 0 [pid 5019] rmdir("./410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./410/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./410/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./410") = 0 [pid 5019] mkdir("./411", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1233 ./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x555556a426a0, 24) = 0 [pid 6254] chdir("./411") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6254] write(3, "1000", 4) = 4 [pid 6254] close(3) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6254] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6254] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6254] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6255 attached [pid 6255] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6254] <... clone3 resumed> => {parent_tid=[1234]}, 88) = 1234 [pid 6255] <... rseq resumed>) = 0 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6255] set_robust_list(0x7f15c1e659a0, 24 [pid 6254] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] <... set_robust_list resumed>) = 0 [pid 6254] <... futex resumed>) = 0 [pid 6255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6254] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6255] memfd_create("syzkaller", 0) = 3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6255] munmap(0x7f15b9a45000, 524288) = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6255] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6255] close(3) = 0 [pid 6255] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6255] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6255] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6255] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6255] ioctl(4, LOOP_CLR_FD) = 0 [pid 6255] close(4) = 0 [pid 6255] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6255] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6254] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6256 attached [pid 6256] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6256] set_robust_list(0x7f15b9ac49a0, 24 [pid 6254] <... clone3 resumed> => {parent_tid=[1235]}, 88) = 1235 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6254] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6254] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6256] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6256] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6255] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6255] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6255] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] <... mount resumed>) = 0 [pid 6256] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6256] chdir(".") = 0 [pid 6256] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] close(3) = 0 [pid 6254] close(4 [pid 6256] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] <... close resumed>) = 0 [pid 6254] close(5) = -1 EBADF (Bad file descriptor) [pid 6254] close(6) = -1 EBADF (Bad file descriptor) [pid 6254] close(7) = -1 EBADF (Bad file descriptor) [pid 6254] close(8) = -1 EBADF (Bad file descriptor) [pid 6254] close(9) = -1 EBADF (Bad file descriptor) [pid 6254] close(10) = -1 EBADF (Bad file descriptor) [pid 6254] close(11) = -1 EBADF (Bad file descriptor) [pid 6254] close(12) = -1 EBADF (Bad file descriptor) [pid 6254] close(13) = -1 EBADF (Bad file descriptor) [pid 6254] close(14) = -1 EBADF (Bad file descriptor) [pid 6254] close(15) = -1 EBADF (Bad file descriptor) [pid 6254] close(16) = -1 EBADF (Bad file descriptor) [pid 6254] close(17) = -1 EBADF (Bad file descriptor) [pid 6254] close(18) = -1 EBADF (Bad file descriptor) [pid 6254] close(19) = -1 EBADF (Bad file descriptor) [pid 6254] close(20) = -1 EBADF (Bad file descriptor) [pid 6254] close(21) = -1 EBADF (Bad file descriptor) [pid 6254] close(22) = -1 EBADF (Bad file descriptor) [pid 6254] close(23) = -1 EBADF (Bad file descriptor) [pid 6254] close(24) = -1 EBADF (Bad file descriptor) [pid 6254] close(25) = -1 EBADF (Bad file descriptor) [pid 6254] close(26) = -1 EBADF (Bad file descriptor) [pid 6254] close(27) = -1 EBADF (Bad file descriptor) [pid 6254] close(28) = -1 EBADF (Bad file descriptor) [pid 6254] close(29) = -1 EBADF (Bad file descriptor) [pid 6254] exit_group(0 [pid 6255] <... futex resumed>) = ? [pid 6254] <... exit_group resumed>) = ? [pid 6256] <... futex resumed>) = ? [pid 6255] +++ exited with 0 +++ [pid 6256] +++ exited with 0 +++ [pid 6254] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1233, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./411", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./411/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./411/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./411") = 0 [pid 5019] mkdir("./412", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 73.771799][ T6255] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1236 ./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x555556a426a0, 24) = 0 [pid 6257] chdir("./412") = 0 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6257] write(3, "1000", 4) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6257] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6258 attached [pid 6258] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6258] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[1237]}, 88) = 1237 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6258] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6257] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] memfd_create("syzkaller", 0) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6258] munmap(0x7f15b9a45000, 524288) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6258] close(3) = 0 [pid 6258] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6258] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6258] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6258] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6258] ioctl(4, LOOP_CLR_FD) = 0 [pid 6258] close(4) = 0 [pid 6258] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6257] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6259 attached [pid 6258] <... mknodat resumed>) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[1238]}, 88) = 1238 [pid 6258] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] <... futex resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6257] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6259] <... rseq resumed>) = 0 [pid 6259] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6259] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6259] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6259] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6259] chdir(".") = 0 [pid 6259] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6259] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] close(3) = 0 [pid 6257] close(4) = 0 [pid 6257] close(5) = -1 EBADF (Bad file descriptor) [pid 6257] close(6) = -1 EBADF (Bad file descriptor) [pid 6257] close(7) = -1 EBADF (Bad file descriptor) [pid 6257] close(8) = -1 EBADF (Bad file descriptor) [pid 6257] close(9) = -1 EBADF (Bad file descriptor) [pid 6257] close(10) = -1 EBADF (Bad file descriptor) [pid 6257] close(11) = -1 EBADF (Bad file descriptor) [pid 6257] close(12) = -1 EBADF (Bad file descriptor) [pid 6257] close(13) = -1 EBADF (Bad file descriptor) [pid 6257] close(14) = -1 EBADF (Bad file descriptor) [pid 6257] close(15) = -1 EBADF (Bad file descriptor) [pid 6257] close(16) = -1 EBADF (Bad file descriptor) [pid 6257] close(17) = -1 EBADF (Bad file descriptor) [pid 6257] close(18) = -1 EBADF (Bad file descriptor) [pid 6257] close(19) = -1 EBADF (Bad file descriptor) [pid 6257] close(20) = -1 EBADF (Bad file descriptor) [pid 6257] close(21) = -1 EBADF (Bad file descriptor) [pid 6257] close(22) = -1 EBADF (Bad file descriptor) [pid 6257] close(23) = -1 EBADF (Bad file descriptor) [pid 6257] close(24) = -1 EBADF (Bad file descriptor) [pid 6257] close(25) = -1 EBADF (Bad file descriptor) [pid 6257] close(26) = -1 EBADF (Bad file descriptor) [pid 6257] close(27) = -1 EBADF (Bad file descriptor) [pid 6257] close(28) = -1 EBADF (Bad file descriptor) [pid 6257] close(29) = -1 EBADF (Bad file descriptor) [pid 6257] exit_group(0 [pid 6258] <... futex resumed>) = ? [pid 6257] <... exit_group resumed>) = ? [pid 6259] <... futex resumed>) = ? [pid 6258] +++ exited with 0 +++ [pid 6259] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./412", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./412/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./412/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./412") = 0 [pid 5019] mkdir("./413", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1239 [ 73.853547][ T6258] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6260 attached [pid 6260] set_robust_list(0x555556a426a0, 24) = 0 [pid 6260] chdir("./413") = 0 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6260] setpgid(0, 0) = 0 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6260] write(3, "1000", 4) = 4 [pid 6260] close(3) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6260] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6260] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6260] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1240]}, 88) = 1240 ./strace-static-x86_64: Process 6261 attached [pid 6261] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6261] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], [pid 6261] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6261] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = 0 [pid 6260] <... futex resumed>) = 1 [pid 6260] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6261] memfd_create("syzkaller", 0) = 3 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6261] munmap(0x7f15b9a45000, 524288) = 0 [pid 6261] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6261] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6261] close(3) = 0 [pid 6261] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6261] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6261] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6261] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6261] ioctl(4, LOOP_CLR_FD) = 0 [pid 6261] close(4) = 0 [pid 6261] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... futex resumed>) = 0 [pid 6260] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6260] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1241]}, 88) = 1241 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6260] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6262 attached [pid 6262] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6262] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6262] rt_sigprocmask(SIG_SETMASK, [], [pid 6261] <... futex resumed>) = 1 [pid 6261] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6262] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6262] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6261] <... mknodat resumed>) = 0 [pid 6261] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6261] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6262] <... mount resumed>) = 0 [pid 6262] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6262] chdir(".") = 0 [pid 6262] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6262] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] close(3) = 0 [pid 6260] close(4) = 0 [pid 6260] close(5) = -1 EBADF (Bad file descriptor) [pid 6260] close(6) = -1 EBADF (Bad file descriptor) [pid 6260] close(7) = -1 EBADF (Bad file descriptor) [pid 6260] close(8) = -1 EBADF (Bad file descriptor) [pid 6260] close(9) = -1 EBADF (Bad file descriptor) [pid 6260] close(10) = -1 EBADF (Bad file descriptor) [pid 6260] close(11) = -1 EBADF (Bad file descriptor) [pid 6260] close(12) = -1 EBADF (Bad file descriptor) [pid 6260] close(13) = -1 EBADF (Bad file descriptor) [pid 6260] close(14) = -1 EBADF (Bad file descriptor) [pid 6260] close(15) = -1 EBADF (Bad file descriptor) [pid 6260] close(16) = -1 EBADF (Bad file descriptor) [pid 6260] close(17) = -1 EBADF (Bad file descriptor) [pid 6260] close(18) = -1 EBADF (Bad file descriptor) [pid 6260] close(19) = -1 EBADF (Bad file descriptor) [pid 6260] close(20) = -1 EBADF (Bad file descriptor) [pid 6260] close(21) = -1 EBADF (Bad file descriptor) [pid 6260] close(22) = -1 EBADF (Bad file descriptor) [pid 6260] close(23) = -1 EBADF (Bad file descriptor) [pid 6260] close(24) = -1 EBADF (Bad file descriptor) [pid 6260] close(25) = -1 EBADF (Bad file descriptor) [pid 6260] close(26) = -1 EBADF (Bad file descriptor) [pid 6260] close(27) = -1 EBADF (Bad file descriptor) [pid 6260] close(28) = -1 EBADF (Bad file descriptor) [pid 6260] close(29) = -1 EBADF (Bad file descriptor) [pid 6260] exit_group(0 [pid 6262] <... futex resumed>) = ? [pid 6261] <... futex resumed>) = ? [pid 6260] <... exit_group resumed>) = ? [pid 6261] +++ exited with 0 +++ [pid 6262] +++ exited with 0 +++ [pid 6260] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1239, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./413", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./413/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./413/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./413") = 0 [pid 5019] mkdir("./414", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1242 ./strace-static-x86_64: Process 6263 attached [pid 6263] set_robust_list(0x555556a426a0, 24) = 0 [pid 6263] chdir("./414") = 0 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] setpgid(0, 0) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6263] write(3, "1000", 4) = 4 [pid 6263] close(3) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 73.935192][ T6261] loop0: detected capacity change from 0 to 1024 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6263] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6264 attached => {parent_tid=[1243]}, 88) = 1243 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6263] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6264] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6264] munmap(0x7f15b9a45000, 524288) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6264] close(3) = 0 [pid 6264] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6264] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6264] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6264] ioctl(4, LOOP_CLR_FD) = 0 [pid 6264] close(4) = 0 [pid 6264] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6263] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1244]}, 88) = 1244 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6263] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6264] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6265 attached [pid 6265] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6265] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6265] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6265] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6265] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6265] chdir(".") = 0 [pid 6265] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6263] close(3) = 0 [pid 6263] close(4) = 0 [pid 6263] close(5) = -1 EBADF (Bad file descriptor) [pid 6263] close(6) = -1 EBADF (Bad file descriptor) [pid 6263] close(7) = -1 EBADF (Bad file descriptor) [pid 6265] <... futex resumed>) = 1 [pid 6265] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] close(8) = -1 EBADF (Bad file descriptor) [pid 6263] close(9) = -1 EBADF (Bad file descriptor) [pid 6263] close(10) = -1 EBADF (Bad file descriptor) [pid 6263] close(11) = -1 EBADF (Bad file descriptor) [pid 6263] close(12) = -1 EBADF (Bad file descriptor) [pid 6263] close(13) = -1 EBADF (Bad file descriptor) [pid 6263] close(14) = -1 EBADF (Bad file descriptor) [pid 6263] close(15) = -1 EBADF (Bad file descriptor) [pid 6263] close(16) = -1 EBADF (Bad file descriptor) [pid 6263] close(17) = -1 EBADF (Bad file descriptor) [pid 6263] close(18) = -1 EBADF (Bad file descriptor) [pid 6263] close(19) = -1 EBADF (Bad file descriptor) [pid 6263] close(20) = -1 EBADF (Bad file descriptor) [pid 6263] close(21) = -1 EBADF (Bad file descriptor) [pid 6263] close(22) = -1 EBADF (Bad file descriptor) [pid 6263] close(23) = -1 EBADF (Bad file descriptor) [pid 6263] close(24) = -1 EBADF (Bad file descriptor) [pid 6263] close(25) = -1 EBADF (Bad file descriptor) [pid 6263] close(26) = -1 EBADF (Bad file descriptor) [pid 6263] close(27) = -1 EBADF (Bad file descriptor) [pid 6263] close(28) = -1 EBADF (Bad file descriptor) [pid 6263] close(29) = -1 EBADF (Bad file descriptor) [pid 6263] exit_group(0 [pid 6265] <... futex resumed>) = ? [pid 6264] <... futex resumed>) = ? [pid 6263] <... exit_group resumed>) = ? [pid 6265] +++ exited with 0 +++ [pid 6264] +++ exited with 0 +++ [pid 6263] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1242, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./414", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./414/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./414/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./414") = 0 [pid 5019] mkdir("./415", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1245 ./strace-static-x86_64: Process 6266 attached [pid 6266] set_robust_list(0x555556a426a0, 24) = 0 [pid 6266] chdir("./415") = 0 [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6266] setpgid(0, 0) = 0 [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6266] write(3, "1000", 4) = 4 [pid 6266] close(3) = 0 [pid 6266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6266] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6266] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6266] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 74.005571][ T6264] loop0: detected capacity change from 0 to 1024 [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6267 attached [pid 6267] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6267] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6267] rt_sigprocmask(SIG_SETMASK, [], [pid 6266] <... clone3 resumed> => {parent_tid=[1246]}, 88) = 1246 [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6267] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6266] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6267] <... futex resumed>) = 0 [pid 6266] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6267] memfd_create("syzkaller", 0) = 3 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6267] munmap(0x7f15b9a45000, 524288) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6267] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6267] close(3) = 0 [pid 6267] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6267] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6267] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6267] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6267] ioctl(4, LOOP_CLR_FD) = 0 [pid 6267] close(4) = 0 [pid 6267] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6266] <... futex resumed>) = 0 [pid 6267] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6266] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... mknodat resumed>) = 0 [pid 6266] <... futex resumed>) = 0 [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6266] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6267] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] <... mprotect resumed>) = 0 [pid 6267] <... futex resumed>) = 0 [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6267] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6268 attached [pid 6268] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6268] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6268] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... clone3 resumed> => {parent_tid=[1247]}, 88) = 1247 [pid 6266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6266] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6268] <... futex resumed>) = 0 [pid 6266] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6268] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6268] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6268] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6268] chdir(".") = 0 [pid 6268] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6266] <... futex resumed>) = 0 [pid 6266] close(3) = 0 [pid 6266] close(4) = 0 [pid 6266] close(5) = -1 EBADF (Bad file descriptor) [pid 6266] close(6) = -1 EBADF (Bad file descriptor) [pid 6266] close(7) = -1 EBADF (Bad file descriptor) [pid 6266] close(8) = -1 EBADF (Bad file descriptor) [pid 6266] close(9) = -1 EBADF (Bad file descriptor) [pid 6266] close(10) = -1 EBADF (Bad file descriptor) [pid 6266] close(11) = -1 EBADF (Bad file descriptor) [pid 6266] close(12) = -1 EBADF (Bad file descriptor) [pid 6266] close(13) = -1 EBADF (Bad file descriptor) [pid 6266] close(14) = -1 EBADF (Bad file descriptor) [pid 6266] close(15) = -1 EBADF (Bad file descriptor) [pid 6266] close(16) = -1 EBADF (Bad file descriptor) [pid 6266] close(17) = -1 EBADF (Bad file descriptor) [pid 6266] close(18) = -1 EBADF (Bad file descriptor) [pid 6266] close(19) = -1 EBADF (Bad file descriptor) [pid 6266] close(20) = -1 EBADF (Bad file descriptor) [pid 6266] close(21) = -1 EBADF (Bad file descriptor) [pid 6266] close(22) = -1 EBADF (Bad file descriptor) [pid 6266] close(23) = -1 EBADF (Bad file descriptor) [pid 6266] close(24) = -1 EBADF (Bad file descriptor) [pid 6266] close(25) = -1 EBADF (Bad file descriptor) [pid 6266] close(26) = -1 EBADF (Bad file descriptor) [pid 6266] close(27) = -1 EBADF (Bad file descriptor) [pid 6266] close(28 [pid 6268] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6266] close(29) = -1 EBADF (Bad file descriptor) [pid 6266] exit_group(0 [pid 6267] <... futex resumed>) = ? [pid 6266] <... exit_group resumed>) = ? [pid 6268] <... futex resumed>) = ? [pid 6267] +++ exited with 0 +++ [pid 6268] +++ exited with 0 +++ [pid 6266] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1245, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./415", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./415/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./415/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./415") = 0 [pid 5019] mkdir("./416", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1248 ./strace-static-x86_64: Process 6269 attached [pid 6269] set_robust_list(0x555556a426a0, 24) = 0 [pid 6269] chdir("./416") = 0 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6269] setpgid(0, 0) = 0 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6269] write(3, "1000", 4) = 4 [pid 6269] close(3) = 0 [pid 6269] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6269] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6269] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6269] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6269] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6269] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6269] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6270 attached [pid 6270] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6269] <... clone3 resumed> => {parent_tid=[1249]}, 88) = 1249 [ 74.076640][ T6267] loop0: detected capacity change from 0 to 1024 [pid 6270] <... rseq resumed>) = 0 [pid 6269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6270] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6269] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 6269] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] memfd_create("syzkaller", 0) = 3 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6270] munmap(0x7f15b9a45000, 524288) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6270] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6270] close(3) = 0 [pid 6270] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6270] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6270] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6270] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6270] ioctl(4, LOOP_CLR_FD) = 0 [pid 6270] close(4) = 0 [pid 6270] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6269] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6269] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6269] <... futex resumed>) = 0 [pid 6269] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6269] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6269] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6269] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6269] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1250]}, 88) = 1250 ./strace-static-x86_64: Process 6271 attached [pid 6269] rt_sigprocmask(SIG_SETMASK, [], [pid 6271] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... rseq resumed>) = 0 [pid 6269] <... futex resumed>) = 0 [pid 6271] set_robust_list(0x7f15b9ac49a0, 24 [pid 6269] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6271] <... set_robust_list resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6271] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6271] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6270] <... mknodat resumed>) = 0 [pid 6270] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6271] <... mount resumed>) = 0 [pid 6271] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6271] chdir(".") = 0 [pid 6271] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6269] <... futex resumed>) = 0 [pid 6271] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6269] close(3) = 0 [pid 6269] close(4) = 0 [pid 6269] close(5) = -1 EBADF (Bad file descriptor) [pid 6269] close(6) = -1 EBADF (Bad file descriptor) [pid 6269] close(7) = -1 EBADF (Bad file descriptor) [pid 6269] close(8) = -1 EBADF (Bad file descriptor) [pid 6269] close(9) = -1 EBADF (Bad file descriptor) [pid 6269] close(10) = -1 EBADF (Bad file descriptor) [pid 6269] close(11) = -1 EBADF (Bad file descriptor) [pid 6269] close(12) = -1 EBADF (Bad file descriptor) [pid 6269] close(13) = -1 EBADF (Bad file descriptor) [pid 6269] close(14) = -1 EBADF (Bad file descriptor) [pid 6269] close(15) = -1 EBADF (Bad file descriptor) [pid 6269] close(16) = -1 EBADF (Bad file descriptor) [pid 6269] close(17) = -1 EBADF (Bad file descriptor) [pid 6269] close(18) = -1 EBADF (Bad file descriptor) [pid 6269] close(19) = -1 EBADF (Bad file descriptor) [pid 6269] close(20) = -1 EBADF (Bad file descriptor) [pid 6269] close(21) = -1 EBADF (Bad file descriptor) [pid 6269] close(22) = -1 EBADF (Bad file descriptor) [pid 6269] close(23) = -1 EBADF (Bad file descriptor) [pid 6269] close(24) = -1 EBADF (Bad file descriptor) [pid 6269] close(25) = -1 EBADF (Bad file descriptor) [pid 6269] close(26) = -1 EBADF (Bad file descriptor) [pid 6269] close(27) = -1 EBADF (Bad file descriptor) [pid 6269] close(28) = -1 EBADF (Bad file descriptor) [pid 6269] close(29) = -1 EBADF (Bad file descriptor) [pid 6269] exit_group(0 [pid 6271] <... futex resumed>) = ? [pid 6270] <... futex resumed>) = ? [pid 6269] <... exit_group resumed>) = ? [pid 6270] +++ exited with 0 +++ [pid 6271] +++ exited with 0 +++ [pid 6269] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1248, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./416", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./416/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./416/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./416") = 0 [pid 5019] mkdir("./417", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 74.145627][ T6270] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6272 attached [pid 6272] set_robust_list(0x555556a426a0, 24) = 0 [pid 6272] chdir("./417") = 0 [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6272] setpgid(0, 0) = 0 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6272] write(3, "1000", 4) = 4 [pid 6272] close(3) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1251 [pid 6272] <... symlink resumed>) = 0 [pid 6272] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6272] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6272] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6272] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1252]}, 88) = 1252 ./strace-static-x86_64: Process 6273 attached [pid 6272] rt_sigprocmask(SIG_SETMASK, [], [pid 6273] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6273] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6273] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6272] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6272] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6273] memfd_create("syzkaller", 0) = 3 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6273] munmap(0x7f15b9a45000, 524288) = 0 [pid 6273] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6273] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6273] close(3) = 0 [pid 6273] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6273] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6273] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6273] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6273] ioctl(4, LOOP_CLR_FD) = 0 [pid 6273] close(4) = 0 [pid 6273] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6272] <... futex resumed>) = 0 [pid 6272] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6273] <... futex resumed>) = 0 [pid 6272] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6272] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1253]}, 88) = 1253 [pid 6272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6272] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6272] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6274 attached [pid 6274] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6274] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6274] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6274] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6273] <... mknodat resumed>) = 0 [pid 6273] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6273] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6274] <... mount resumed>) = 0 [pid 6274] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6274] chdir(".") = 0 [pid 6274] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... futex resumed>) = 0 [pid 6272] close(3) = 0 [pid 6272] close(4) = 0 [pid 6272] close(5) = -1 EBADF (Bad file descriptor) [pid 6272] close(6) = -1 EBADF (Bad file descriptor) [pid 6272] close(7) = -1 EBADF (Bad file descriptor) [pid 6272] close(8) = -1 EBADF (Bad file descriptor) [pid 6272] close(9) = -1 EBADF (Bad file descriptor) [pid 6272] close(10) = -1 EBADF (Bad file descriptor) [pid 6272] close(11) = -1 EBADF (Bad file descriptor) [pid 6272] close(12) = -1 EBADF (Bad file descriptor) [pid 6272] close(13) = -1 EBADF (Bad file descriptor) [pid 6272] close(14) = -1 EBADF (Bad file descriptor) [pid 6272] close(15) = -1 EBADF (Bad file descriptor) [pid 6272] close(16) = -1 EBADF (Bad file descriptor) [pid 6272] close(17) = -1 EBADF (Bad file descriptor) [pid 6272] close(18) = -1 EBADF (Bad file descriptor) [pid 6272] close(19) = -1 EBADF (Bad file descriptor) [pid 6272] close(20) = -1 EBADF (Bad file descriptor) [pid 6272] close(21) = -1 EBADF (Bad file descriptor) [pid 6272] close(22) = -1 EBADF (Bad file descriptor) [pid 6272] close(23) = -1 EBADF (Bad file descriptor) [pid 6272] close(24) = -1 EBADF (Bad file descriptor) [pid 6272] close(25) = -1 EBADF (Bad file descriptor) [pid 6272] close(26) = -1 EBADF (Bad file descriptor) [pid 6272] close(27) = -1 EBADF (Bad file descriptor) [pid 6272] close(28) = -1 EBADF (Bad file descriptor) [pid 6272] close(29) = -1 EBADF (Bad file descriptor) [pid 6272] exit_group(0) = ? [pid 6274] <... futex resumed>) = ? [pid 6274] +++ exited with 0 +++ [pid 6273] <... futex resumed>) = ? [pid 6273] +++ exited with 0 +++ [pid 6272] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1251, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./417", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./417/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./417/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./417") = 0 [pid 5019] mkdir("./418", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 74.228045][ T6273] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1254 ./strace-static-x86_64: Process 6275 attached [pid 6275] set_robust_list(0x555556a426a0, 24) = 0 [pid 6275] chdir("./418") = 0 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6275] setpgid(0, 0) = 0 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6275] write(3, "1000", 4) = 4 [pid 6275] close(3) = 0 [pid 6275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6275] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6275] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6275] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6276 attached [pid 6276] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6276] set_robust_list(0x7f15c1e659a0, 24 [pid 6275] <... clone3 resumed> => {parent_tid=[1255]}, 88) = 1255 [pid 6276] <... set_robust_list resumed>) = 0 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], [pid 6276] rt_sigprocmask(SIG_SETMASK, [], [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6276] memfd_create("syzkaller", 0) = 3 [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6276] munmap(0x7f15b9a45000, 524288) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6276] close(3) = 0 [pid 6276] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6276] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6276] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6276] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6276] ioctl(4, LOOP_CLR_FD) = 0 [pid 6276] close(4) = 0 [pid 6276] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6275] <... futex resumed>) = 0 [pid 6275] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6275] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1256]}, 88) = 1256 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6275] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6277 attached [pid 6276] <... futex resumed>) = 1 [pid 6276] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6277] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6276] <... mknodat resumed>) = 0 [pid 6277] set_robust_list(0x7f15b9ac49a0, 24 [pid 6276] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6276] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6277] <... set_robust_list resumed>) = 0 [pid 6277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6277] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6277] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6277] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6277] chdir(".") = 0 [pid 6277] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 6275] close(3) = 0 [pid 6275] close(4) = 0 [pid 6275] close(5) = -1 EBADF (Bad file descriptor) [pid 6275] close(6) = -1 EBADF (Bad file descriptor) [pid 6275] close(7) = -1 EBADF (Bad file descriptor) [pid 6277] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6275] close(8) = -1 EBADF (Bad file descriptor) [pid 6275] close(9) = -1 EBADF (Bad file descriptor) [pid 6275] close(10) = -1 EBADF (Bad file descriptor) [pid 6275] close(11) = -1 EBADF (Bad file descriptor) [pid 6275] close(12) = -1 EBADF (Bad file descriptor) [pid 6275] close(13) = -1 EBADF (Bad file descriptor) [pid 6275] close(14) = -1 EBADF (Bad file descriptor) [pid 6275] close(15) = -1 EBADF (Bad file descriptor) [pid 6275] close(16) = -1 EBADF (Bad file descriptor) [pid 6275] close(17) = -1 EBADF (Bad file descriptor) [pid 6275] close(18) = -1 EBADF (Bad file descriptor) [pid 6275] close(19) = -1 EBADF (Bad file descriptor) [pid 6275] close(20) = -1 EBADF (Bad file descriptor) [pid 6275] close(21) = -1 EBADF (Bad file descriptor) [pid 6275] close(22) = -1 EBADF (Bad file descriptor) [pid 6275] close(23) = -1 EBADF (Bad file descriptor) [pid 6275] close(24) = -1 EBADF (Bad file descriptor) [pid 6275] close(25) = -1 EBADF (Bad file descriptor) [pid 6275] close(26) = -1 EBADF (Bad file descriptor) [pid 6275] close(27) = -1 EBADF (Bad file descriptor) [pid 6275] close(28) = -1 EBADF (Bad file descriptor) [pid 6275] close(29) = -1 EBADF (Bad file descriptor) [pid 6275] exit_group(0 [pid 6277] <... futex resumed>) = ? [pid 6276] <... futex resumed>) = ? [pid 6275] <... exit_group resumed>) = ? [pid 6277] +++ exited with 0 +++ [pid 6276] +++ exited with 0 +++ [pid 6275] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1254, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./418", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./418/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./418/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./418") = 0 [pid 5019] mkdir("./419", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1257 ./strace-static-x86_64: Process 6278 attached [pid 6278] set_robust_list(0x555556a426a0, 24) = 0 [pid 6278] chdir("./419") = 0 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6278] setpgid(0, 0) = 0 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6278] write(3, "1000", 4) = 4 [pid 6278] close(3) = 0 [pid 6278] symlink("/dev/binderfs", "./binderfs") = 0 [ 74.307562][ T6276] loop0: detected capacity change from 0 to 1024 [pid 6278] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6278] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6279 attached [pid 6279] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6278] <... clone3 resumed> => {parent_tid=[1258]}, 88) = 1258 [pid 6279] <... rseq resumed>) = 0 [pid 6278] rt_sigprocmask(SIG_SETMASK, [], [pid 6279] set_robust_list(0x7f15c1e659a0, 24 [pid 6278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] <... set_robust_list resumed>) = 0 [pid 6278] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] rt_sigprocmask(SIG_SETMASK, [], [pid 6278] <... futex resumed>) = 0 [pid 6279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6278] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6279] memfd_create("syzkaller", 0) = 3 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6279] munmap(0x7f15b9a45000, 524288) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6279] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6279] close(3) = 0 [pid 6279] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6279] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6279] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6279] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6279] ioctl(4, LOOP_CLR_FD) = 0 [pid 6279] close(4) = 0 [pid 6279] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... futex resumed>) = 0 [pid 6278] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6278] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1259]}, 88) = 1259 [pid 6278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6279] <... futex resumed>) = 1 [pid 6278] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6278] <... futex resumed>) = 0 [pid 6278] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6280 attached [pid 6280] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6279] <... mknodat resumed>) = 0 [pid 6279] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6280] <... rseq resumed>) = 0 [pid 6280] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6280] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6280] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6280] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6280] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6280] chdir(".") = 0 [pid 6280] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... futex resumed>) = 0 [pid 6278] close(3) = 0 [pid 6278] close(4) = 0 [pid 6278] close(5) = -1 EBADF (Bad file descriptor) [pid 6278] close(6 [pid 6280] <... futex resumed>) = 1 [pid 6278] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6280] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6278] close(7) = -1 EBADF (Bad file descriptor) [pid 6278] close(8) = -1 EBADF (Bad file descriptor) [pid 6278] close(9) = -1 EBADF (Bad file descriptor) [pid 6278] close(10) = -1 EBADF (Bad file descriptor) [pid 6278] close(11) = -1 EBADF (Bad file descriptor) [pid 6278] close(12) = -1 EBADF (Bad file descriptor) [pid 6278] close(13) = -1 EBADF (Bad file descriptor) [pid 6278] close(14) = -1 EBADF (Bad file descriptor) [pid 6278] close(15) = -1 EBADF (Bad file descriptor) [pid 6278] close(16) = -1 EBADF (Bad file descriptor) [pid 6278] close(17) = -1 EBADF (Bad file descriptor) [pid 6278] close(18) = -1 EBADF (Bad file descriptor) [pid 6278] close(19) = -1 EBADF (Bad file descriptor) [pid 6278] close(20) = -1 EBADF (Bad file descriptor) [pid 6278] close(21) = -1 EBADF (Bad file descriptor) [pid 6278] close(22) = -1 EBADF (Bad file descriptor) [pid 6278] close(23) = -1 EBADF (Bad file descriptor) [pid 6278] close(24) = -1 EBADF (Bad file descriptor) [pid 6278] close(25) = -1 EBADF (Bad file descriptor) [pid 6278] close(26) = -1 EBADF (Bad file descriptor) [pid 6278] close(27) = -1 EBADF (Bad file descriptor) [pid 6278] close(28) = -1 EBADF (Bad file descriptor) [pid 6278] close(29) = -1 EBADF (Bad file descriptor) [pid 6278] exit_group(0 [pid 6280] <... futex resumed>) = ? [pid 6279] <... futex resumed>) = ? [pid 6278] <... exit_group resumed>) = ? [pid 6280] +++ exited with 0 +++ [pid 6279] +++ exited with 0 +++ [pid 6278] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1257, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./419", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./419/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./419/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./419") = 0 [pid 5019] mkdir("./420", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1260 ./strace-static-x86_64: Process 6281 attached [pid 6281] set_robust_list(0x555556a426a0, 24) = 0 [pid 6281] chdir("./420") = 0 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6281] setpgid(0, 0) = 0 [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6281] write(3, "1000", 4) = 4 [pid 6281] close(3) = 0 [pid 6281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6281] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6281] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1261]}, 88) = 1261 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6281] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6282 attached [pid 6282] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6282] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6282] memfd_create("syzkaller", 0) = 3 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 74.382560][ T6279] loop0: detected capacity change from 0 to 1024 [pid 6282] munmap(0x7f15b9a45000, 524288) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6282] close(3) = 0 [pid 6282] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6282] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6282] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6282] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6282] ioctl(4, LOOP_CLR_FD) = 0 [pid 6282] close(4) = 0 [pid 6282] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] <... futex resumed>) = 0 [pid 6282] <... futex resumed>) = 1 [pid 6281] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6281] <... futex resumed>) = 0 [pid 6281] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6281] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6283 attached [pid 6283] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6283] set_robust_list(0x7f15b9ac49a0, 24 [pid 6281] <... clone3 resumed> => {parent_tid=[1262]}, 88) = 1262 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6281] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6283] <... set_robust_list resumed>) = 0 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6283] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6283] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6282] <... mknodat resumed>) = 0 [pid 6282] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] <... mount resumed>) = 0 [pid 6282] <... futex resumed>) = 0 [pid 6283] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6282] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] chdir(".") = 0 [pid 6283] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6281] <... futex resumed>) = 0 [pid 6283] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] close(3) = 0 [pid 6281] close(4) = 0 [pid 6281] close(5) = -1 EBADF (Bad file descriptor) [pid 6281] close(6) = -1 EBADF (Bad file descriptor) [pid 6281] close(7) = -1 EBADF (Bad file descriptor) [pid 6281] close(8) = -1 EBADF (Bad file descriptor) [pid 6281] close(9) = -1 EBADF (Bad file descriptor) [pid 6281] close(10) = -1 EBADF (Bad file descriptor) [pid 6281] close(11) = -1 EBADF (Bad file descriptor) [pid 6281] close(12) = -1 EBADF (Bad file descriptor) [pid 6281] close(13) = -1 EBADF (Bad file descriptor) [pid 6281] close(14) = -1 EBADF (Bad file descriptor) [pid 6281] close(15) = -1 EBADF (Bad file descriptor) [pid 6281] close(16) = -1 EBADF (Bad file descriptor) [pid 6281] close(17) = -1 EBADF (Bad file descriptor) [pid 6281] close(18) = -1 EBADF (Bad file descriptor) [pid 6281] close(19) = -1 EBADF (Bad file descriptor) [pid 6281] close(20) = -1 EBADF (Bad file descriptor) [pid 6281] close(21) = -1 EBADF (Bad file descriptor) [pid 6281] close(22) = -1 EBADF (Bad file descriptor) [pid 6281] close(23) = -1 EBADF (Bad file descriptor) [pid 6281] close(24) = -1 EBADF (Bad file descriptor) [pid 6281] close(25) = -1 EBADF (Bad file descriptor) [pid 6281] close(26) = -1 EBADF (Bad file descriptor) [pid 6281] close(27) = -1 EBADF (Bad file descriptor) [pid 6281] close(28) = -1 EBADF (Bad file descriptor) [pid 6281] close(29) = -1 EBADF (Bad file descriptor) [pid 6281] exit_group(0 [pid 6282] <... futex resumed>) = ? [pid 6281] <... exit_group resumed>) = ? [pid 6282] +++ exited with 0 +++ [pid 6283] <... futex resumed>) = ? [pid 6283] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1260, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./420", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./420/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./420/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./420") = 0 [pid 5019] mkdir("./421", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1263 [ 74.444724][ T6282] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6284 attached [pid 6284] set_robust_list(0x555556a426a0, 24) = 0 [pid 6284] chdir("./421") = 0 [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6284] setpgid(0, 0) = 0 [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6284] write(3, "1000", 4) = 4 [pid 6284] close(3) = 0 [pid 6284] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6284] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6284] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6284] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6285 attached [pid 6285] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6284] <... clone3 resumed> => {parent_tid=[1264]}, 88) = 1264 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] <... rseq resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] set_robust_list(0x7f15c1e659a0, 24 [pid 6284] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... set_robust_list resumed>) = 0 [pid 6284] <... futex resumed>) = 0 [pid 6285] rt_sigprocmask(SIG_SETMASK, [], [pid 6284] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] memfd_create("syzkaller", 0) = 3 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6285] munmap(0x7f15b9a45000, 524288) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6285] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6285] close(3) = 0 [pid 6285] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6285] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6285] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6285] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6285] ioctl(4, LOOP_CLR_FD) = 0 [pid 6285] close(4) = 0 [pid 6285] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6284] <... futex resumed>) = 0 [pid 6285] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] <... futex resumed>) = 0 [pid 6285] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6284] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6284] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1265]}, 88) = 1265 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] <... mknodat resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... futex resumed>) = 0 [pid 6284] <... futex resumed>) = 0 [pid 6285] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6286 attached [pid 6286] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6286] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6286] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6286] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6286] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6286] chdir(".") = 0 [pid 6286] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = 1 [pid 6286] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] close(3) = 0 [pid 6284] close(4) = 0 [pid 6284] close(5) = -1 EBADF (Bad file descriptor) [pid 6284] close(6) = -1 EBADF (Bad file descriptor) [pid 6284] close(7) = -1 EBADF (Bad file descriptor) [pid 6284] close(8) = -1 EBADF (Bad file descriptor) [pid 6284] close(9) = -1 EBADF (Bad file descriptor) [pid 6284] close(10) = -1 EBADF (Bad file descriptor) [pid 6284] close(11) = -1 EBADF (Bad file descriptor) [pid 6284] close(12) = -1 EBADF (Bad file descriptor) [pid 6284] close(13) = -1 EBADF (Bad file descriptor) [pid 6284] close(14) = -1 EBADF (Bad file descriptor) [pid 6284] close(15) = -1 EBADF (Bad file descriptor) [pid 6284] close(16) = -1 EBADF (Bad file descriptor) [pid 6284] close(17) = -1 EBADF (Bad file descriptor) [pid 6284] close(18) = -1 EBADF (Bad file descriptor) [pid 6284] close(19) = -1 EBADF (Bad file descriptor) [pid 6284] close(20) = -1 EBADF (Bad file descriptor) [pid 6284] close(21) = -1 EBADF (Bad file descriptor) [pid 6284] close(22) = -1 EBADF (Bad file descriptor) [pid 6284] close(23) = -1 EBADF (Bad file descriptor) [pid 6284] close(24) = -1 EBADF (Bad file descriptor) [pid 6284] close(25) = -1 EBADF (Bad file descriptor) [pid 6284] close(26) = -1 EBADF (Bad file descriptor) [pid 6284] close(27) = -1 EBADF (Bad file descriptor) [pid 6284] close(28) = -1 EBADF (Bad file descriptor) [pid 6284] close(29) = -1 EBADF (Bad file descriptor) [pid 6284] exit_group(0) = ? [pid 6285] <... futex resumed>) = ? [pid 6286] <... futex resumed>) = ? [pid 6285] +++ exited with 0 +++ [pid 6286] +++ exited with 0 +++ [pid 6284] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1263, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./421", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./421/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./421/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./421") = 0 [pid 5019] mkdir("./422", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 74.526141][ T6285] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1266 ./strace-static-x86_64: Process 6287 attached [pid 6287] set_robust_list(0x555556a426a0, 24) = 0 [pid 6287] chdir("./422") = 0 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6287] setpgid(0, 0) = 0 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6287] write(3, "1000", 4) = 4 [pid 6287] close(3) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6287] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6287] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6288 attached [pid 6288] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6288] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] <... clone3 resumed> => {parent_tid=[1267]}, 88) = 1267 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 6288] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6287] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6288] memfd_create("syzkaller", 0) = 3 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6288] munmap(0x7f15b9a45000, 524288) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6288] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6288] close(3) = 0 [pid 6288] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6288] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6288] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6288] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6288] ioctl(4, LOOP_CLR_FD) = 0 [pid 6288] close(4) = 0 [pid 6288] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6287] <... futex resumed>) = 0 [pid 6287] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6288] <... mknodat resumed>) = 0 [pid 6287] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6288] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6288] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6289 attached [pid 6289] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6289] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6289] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] <... clone3 resumed> => {parent_tid=[1268]}, 88) = 1268 [pid 6289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6287] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6289] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6289] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6289] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6289] chdir(".") = 0 [pid 6289] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... futex resumed>) = 0 [pid 6287] close(3) = 0 [pid 6287] close(4) = 0 [pid 6287] close(5) = -1 EBADF (Bad file descriptor) [pid 6287] close(6) = -1 EBADF (Bad file descriptor) [pid 6287] close(7) = -1 EBADF (Bad file descriptor) [pid 6287] close(8) = -1 EBADF (Bad file descriptor) [pid 6287] close(9) = -1 EBADF (Bad file descriptor) [pid 6287] close(10) = -1 EBADF (Bad file descriptor) [pid 6287] close(11) = -1 EBADF (Bad file descriptor) [pid 6287] close(12) = -1 EBADF (Bad file descriptor) [pid 6287] close(13) = -1 EBADF (Bad file descriptor) [pid 6287] close(14) = -1 EBADF (Bad file descriptor) [pid 6287] close(15) = -1 EBADF (Bad file descriptor) [pid 6287] close(16) = -1 EBADF (Bad file descriptor) [pid 6287] close(17) = -1 EBADF (Bad file descriptor) [pid 6287] close(18) = -1 EBADF (Bad file descriptor) [pid 6287] close(19) = -1 EBADF (Bad file descriptor) [pid 6287] close(20) = -1 EBADF (Bad file descriptor) [pid 6287] close(21) = -1 EBADF (Bad file descriptor) [pid 6287] close(22) = -1 EBADF (Bad file descriptor) [pid 6287] close(23) = -1 EBADF (Bad file descriptor) [pid 6287] close(24) = -1 EBADF (Bad file descriptor) [pid 6287] close(25) = -1 EBADF (Bad file descriptor) [pid 6287] close(26) = -1 EBADF (Bad file descriptor) [pid 6287] close(27) = -1 EBADF (Bad file descriptor) [pid 6287] close(28) = -1 EBADF (Bad file descriptor) [pid 6287] close(29) = -1 EBADF (Bad file descriptor) [pid 6287] exit_group(0) = ? [pid 6288] <... futex resumed>) = ? [pid 6289] <... futex resumed>) = ? [pid 6288] +++ exited with 0 +++ [pid 6289] +++ exited with 0 +++ [pid 6287] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1266, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./422", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./422/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./422/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./422") = 0 [pid 5019] mkdir("./423", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1269 ./strace-static-x86_64: Process 6290 attached [pid 6290] set_robust_list(0x555556a426a0, 24) = 0 [pid 6290] chdir("./423") = 0 [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6290] setpgid(0, 0) = 0 [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6290] write(3, "1000", 4) = 4 [pid 6290] close(3) = 0 [pid 6290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6290] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6290] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 74.603662][ T6288] loop0: detected capacity change from 0 to 1024 [pid 6290] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6290] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6290] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6291 attached => {parent_tid=[1270]}, 88) = 1270 [pid 6291] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6290] rt_sigprocmask(SIG_SETMASK, [], [pid 6291] <... rseq resumed>) = 0 [pid 6291] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6291] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6290] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6291] <... futex resumed>) = 0 [pid 6291] memfd_create("syzkaller", 0) = 3 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6291] munmap(0x7f15b9a45000, 524288) = 0 [pid 6291] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6291] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6291] close(3) = 0 [pid 6291] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6291] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6291] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6291] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6291] ioctl(4, LOOP_CLR_FD) = 0 [pid 6291] close(4) = 0 [pid 6291] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6291] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... futex resumed>) = 0 [pid 6290] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6291] <... futex resumed>) = 0 [pid 6290] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6291] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6290] <... mprotect resumed>) = 0 [pid 6290] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6291] <... mknodat resumed>) = 0 [pid 6290] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6291] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6291] <... futex resumed>) = 0 [pid 6291] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6292 attached [pid 6290] <... clone3 resumed> => {parent_tid=[1271]}, 88) = 1271 [pid 6290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6290] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6292] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6292] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6292] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6292] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6292] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6292] chdir(".") = 0 [pid 6292] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6290] <... futex resumed>) = 0 [pid 6290] close(3) = 0 [pid 6290] close(4) = 0 [pid 6290] close(5) = -1 EBADF (Bad file descriptor) [pid 6290] close(6) = -1 EBADF (Bad file descriptor) [pid 6290] close(7) = -1 EBADF (Bad file descriptor) [pid 6290] close(8) = -1 EBADF (Bad file descriptor) [pid 6290] close(9) = -1 EBADF (Bad file descriptor) [pid 6290] close(10) = -1 EBADF (Bad file descriptor) [pid 6290] close(11) = -1 EBADF (Bad file descriptor) [pid 6290] close(12) = -1 EBADF (Bad file descriptor) [pid 6290] close(13) = -1 EBADF (Bad file descriptor) [pid 6290] close(14) = -1 EBADF (Bad file descriptor) [pid 6290] close(15) = -1 EBADF (Bad file descriptor) [pid 6290] close(16) = -1 EBADF (Bad file descriptor) [pid 6290] close(17) = -1 EBADF (Bad file descriptor) [pid 6290] close(18) = -1 EBADF (Bad file descriptor) [pid 6290] close(19) = -1 EBADF (Bad file descriptor) [pid 6290] close(20 [pid 6292] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6290] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6290] close(21) = -1 EBADF (Bad file descriptor) [pid 6290] close(22) = -1 EBADF (Bad file descriptor) [pid 6290] close(23) = -1 EBADF (Bad file descriptor) [pid 6290] close(24) = -1 EBADF (Bad file descriptor) [pid 6290] close(25) = -1 EBADF (Bad file descriptor) [pid 6290] close(26) = -1 EBADF (Bad file descriptor) [pid 6290] close(27) = -1 EBADF (Bad file descriptor) [pid 6290] close(28) = -1 EBADF (Bad file descriptor) [pid 6290] close(29) = -1 EBADF (Bad file descriptor) [pid 6290] exit_group(0 [pid 6291] <... futex resumed>) = ? [pid 6290] <... exit_group resumed>) = ? [pid 6292] <... futex resumed>) = ? [pid 6291] +++ exited with 0 +++ [pid 6292] +++ exited with 0 +++ [pid 6290] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1269, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./423", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./423/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./423/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./423") = 0 [pid 5019] mkdir("./424", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1272 ./strace-static-x86_64: Process 6293 attached [pid 6293] set_robust_list(0x555556a426a0, 24) = 0 [pid 6293] chdir("./424") = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6293] setpgid(0, 0) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6293] write(3, "1000", 4) = 4 [pid 6293] close(3) = 0 [pid 6293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6293] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6293] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 74.669258][ T6291] loop0: detected capacity change from 0 to 1024 [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6294 attached => {parent_tid=[1273]}, 88) = 1273 [pid 6294] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6294] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6294] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6293] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6294] <... futex resumed>) = 0 [pid 6294] memfd_create("syzkaller", 0 [pid 6293] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6294] <... memfd_create resumed>) = 3 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6294] munmap(0x7f15b9a45000, 524288) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6294] close(3) = 0 [pid 6294] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6294] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6294] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6294] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6294] ioctl(4, LOOP_CLR_FD) = 0 [pid 6294] close(4) = 0 [pid 6294] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6294] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6293] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6294] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6293] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6294] <... mknodat resumed>) = 0 [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6294] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6295 attached ) = 0 [pid 6295] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6293] <... clone3 resumed> => {parent_tid=[1274]}, 88) = 1274 [pid 6295] <... rseq resumed>) = 0 [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6295] set_robust_list(0x7f15b9ac49a0, 24 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6295] <... set_robust_list resumed>) = 0 [pid 6293] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] rt_sigprocmask(SIG_SETMASK, [], [pid 6293] <... futex resumed>) = 0 [pid 6295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6295] mkdir(".", 0777 [pid 6294] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6295] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6295] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6295] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6295] chdir(".") = 0 [pid 6295] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6295] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] close(3) = 0 [pid 6293] close(4) = 0 [pid 6293] close(5) = -1 EBADF (Bad file descriptor) [pid 6293] close(6) = -1 EBADF (Bad file descriptor) [pid 6293] close(7) = -1 EBADF (Bad file descriptor) [pid 6293] close(8) = -1 EBADF (Bad file descriptor) [pid 6293] close(9) = -1 EBADF (Bad file descriptor) [pid 6293] close(10) = -1 EBADF (Bad file descriptor) [pid 6293] close(11) = -1 EBADF (Bad file descriptor) [pid 6293] close(12) = -1 EBADF (Bad file descriptor) [pid 6293] close(13) = -1 EBADF (Bad file descriptor) [pid 6293] close(14) = -1 EBADF (Bad file descriptor) [pid 6293] close(15) = -1 EBADF (Bad file descriptor) [pid 6293] close(16) = -1 EBADF (Bad file descriptor) [pid 6293] close(17) = -1 EBADF (Bad file descriptor) [pid 6293] close(18) = -1 EBADF (Bad file descriptor) [pid 6293] close(19) = -1 EBADF (Bad file descriptor) [pid 6293] close(20) = -1 EBADF (Bad file descriptor) [pid 6293] close(21) = -1 EBADF (Bad file descriptor) [pid 6293] close(22) = -1 EBADF (Bad file descriptor) [pid 6293] close(23) = -1 EBADF (Bad file descriptor) [pid 6293] close(24) = -1 EBADF (Bad file descriptor) [pid 6293] close(25) = -1 EBADF (Bad file descriptor) [pid 6293] close(26) = -1 EBADF (Bad file descriptor) [pid 6293] close(27) = -1 EBADF (Bad file descriptor) [pid 6293] close(28) = -1 EBADF (Bad file descriptor) [pid 6293] close(29) = -1 EBADF (Bad file descriptor) [pid 6293] exit_group(0 [pid 6295] <... futex resumed>) = ? [pid 6294] <... futex resumed>) = ? [pid 6293] <... exit_group resumed>) = ? [pid 6295] +++ exited with 0 +++ [pid 6294] +++ exited with 0 +++ [pid 6293] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1272, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./424", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./424/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.738944][ T6294] loop0: detected capacity change from 0 to 1024 [pid 5019] unlink("./424/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./424") = 0 [pid 5019] mkdir("./425", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6296 attached [pid 6296] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1275 [pid 6296] chdir("./425") = 0 [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6296] setpgid(0, 0) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6296] write(3, "1000", 4) = 4 [pid 6296] close(3) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6296] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6296] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6297 attached => {parent_tid=[1276]}, 88) = 1276 [pid 6297] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6297] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6297] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6297] <... futex resumed>) = 0 [pid 6297] memfd_create("syzkaller", 0) = 3 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6297] munmap(0x7f15b9a45000, 524288) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6297] close(3) = 0 [pid 6297] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6297] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6297] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6297] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6297] ioctl(4, LOOP_CLR_FD) = 0 [pid 6297] close(4) = 0 [pid 6297] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6296] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6296] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1277]}, 88) = 1277 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6298 attached [pid 6298] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6298] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6298] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6298] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6298] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6298] chdir(".") = 0 [pid 6298] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = 0 [pid 6298] <... futex resumed>) = 1 [pid 6298] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6297] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6297] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] close(3) = 0 [pid 6296] close(4) = 0 [pid 6296] close(5) = -1 EBADF (Bad file descriptor) [pid 6296] close(6) = -1 EBADF (Bad file descriptor) [pid 6296] close(7) = -1 EBADF (Bad file descriptor) [pid 6296] close(8) = -1 EBADF (Bad file descriptor) [pid 6296] close(9) = -1 EBADF (Bad file descriptor) [pid 6296] close(10) = -1 EBADF (Bad file descriptor) [pid 6296] close(11) = -1 EBADF (Bad file descriptor) [pid 6296] close(12) = -1 EBADF (Bad file descriptor) [pid 6296] close(13 [pid 6297] <... futex resumed>) = 0 [pid 6296] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6297] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] close(14) = -1 EBADF (Bad file descriptor) [pid 6296] close(15) = -1 EBADF (Bad file descriptor) [pid 6296] close(16) = -1 EBADF (Bad file descriptor) [pid 6296] close(17) = -1 EBADF (Bad file descriptor) [pid 6296] close(18) = -1 EBADF (Bad file descriptor) [pid 6296] close(19) = -1 EBADF (Bad file descriptor) [pid 6296] close(20) = -1 EBADF (Bad file descriptor) [pid 6296] close(21) = -1 EBADF (Bad file descriptor) [pid 6296] close(22) = -1 EBADF (Bad file descriptor) [pid 6296] close(23) = -1 EBADF (Bad file descriptor) [pid 6296] close(24) = -1 EBADF (Bad file descriptor) [pid 6296] close(25) = -1 EBADF (Bad file descriptor) [pid 6296] close(26) = -1 EBADF (Bad file descriptor) [pid 6296] close(27) = -1 EBADF (Bad file descriptor) [pid 6296] close(28) = -1 EBADF (Bad file descriptor) [pid 6296] close(29) = -1 EBADF (Bad file descriptor) [pid 6296] exit_group(0) = ? [pid 6297] <... futex resumed>) = ? [pid 6298] <... futex resumed>) = ? [pid 6297] +++ exited with 0 +++ [pid 6298] +++ exited with 0 +++ [pid 6296] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1275, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./425", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./425/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./425/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./425") = 0 [pid 5019] mkdir("./426", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1278 ./strace-static-x86_64: Process 6299 attached [pid 6299] set_robust_list(0x555556a426a0, 24) = 0 [pid 6299] chdir("./426") = 0 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6299] setpgid(0, 0) = 0 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6299] write(3, "1000", 4) = 4 [pid 6299] close(3) = 0 [pid 6299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6299] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.824616][ T6297] loop0: detected capacity change from 0 to 1024 [pid 6299] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6299] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6300 attached => {parent_tid=[1279]}, 88) = 1279 [pid 6300] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6300] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6300] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6299] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6300] <... futex resumed>) = 0 [pid 6300] memfd_create("syzkaller", 0) = 3 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6300] munmap(0x7f15b9a45000, 524288) = 0 [pid 6300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6300] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6300] close(3) = 0 [pid 6300] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6300] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6300] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6300] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6300] ioctl(4, LOOP_CLR_FD) = 0 [pid 6300] close(4) = 0 [pid 6300] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] <... futex resumed>) = 0 [pid 6299] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6299] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6300] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6299] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6300] <... mknodat resumed>) = 0 [pid 6299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6300] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6301 attached [pid 6300] <... futex resumed>) = 0 [pid 6299] <... clone3 resumed> => {parent_tid=[1280]}, 88) = 1280 [pid 6300] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6301] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6301] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6301] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6301] <... futex resumed>) = 0 [pid 6301] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6301] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6301] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6301] chdir(".") = 0 [pid 6301] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] <... futex resumed>) = 0 [pid 6299] close(3 [pid 6301] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] <... close resumed>) = 0 [pid 6299] close(4) = 0 [pid 6299] close(5) = -1 EBADF (Bad file descriptor) [pid 6299] close(6) = -1 EBADF (Bad file descriptor) [pid 6299] close(7) = -1 EBADF (Bad file descriptor) [pid 6299] close(8) = -1 EBADF (Bad file descriptor) [pid 6299] close(9) = -1 EBADF (Bad file descriptor) [pid 6299] close(10) = -1 EBADF (Bad file descriptor) [pid 6299] close(11) = -1 EBADF (Bad file descriptor) [pid 6299] close(12) = -1 EBADF (Bad file descriptor) [pid 6299] close(13) = -1 EBADF (Bad file descriptor) [pid 6299] close(14) = -1 EBADF (Bad file descriptor) [pid 6299] close(15) = -1 EBADF (Bad file descriptor) [pid 6299] close(16) = -1 EBADF (Bad file descriptor) [pid 6299] close(17) = -1 EBADF (Bad file descriptor) [pid 6299] close(18) = -1 EBADF (Bad file descriptor) [pid 6299] close(19) = -1 EBADF (Bad file descriptor) [pid 6299] close(20) = -1 EBADF (Bad file descriptor) [pid 6299] close(21) = -1 EBADF (Bad file descriptor) [pid 6299] close(22) = -1 EBADF (Bad file descriptor) [pid 6299] close(23) = -1 EBADF (Bad file descriptor) [pid 6299] close(24) = -1 EBADF (Bad file descriptor) [pid 6299] close(25) = -1 EBADF (Bad file descriptor) [pid 6299] close(26) = -1 EBADF (Bad file descriptor) [pid 6299] close(27) = -1 EBADF (Bad file descriptor) [pid 6299] close(28) = -1 EBADF (Bad file descriptor) [pid 6299] close(29) = -1 EBADF (Bad file descriptor) [pid 6299] exit_group(0 [pid 6301] <... futex resumed>) = ? [pid 6300] <... futex resumed>) = ? [pid 6299] <... exit_group resumed>) = ? [pid 6301] +++ exited with 0 +++ [pid 6300] +++ exited with 0 +++ [pid 6299] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1278, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./426", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./426/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./426/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./426") = 0 [pid 5019] mkdir("./427", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 74.898965][ T6300] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1281 ./strace-static-x86_64: Process 6302 attached [pid 6302] set_robust_list(0x555556a426a0, 24) = 0 [pid 6302] chdir("./427") = 0 [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6302] setpgid(0, 0) = 0 [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6302] write(3, "1000", 4) = 4 [pid 6302] close(3) = 0 [pid 6302] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6302] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6302] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6302] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1282]}, 88) = 1282 ./strace-static-x86_64: Process 6303 attached [pid 6303] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6303] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6303] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6302] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6303] <... futex resumed>) = 0 [pid 6303] memfd_create("syzkaller", 0 [pid 6302] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6303] <... memfd_create resumed>) = 3 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6303] munmap(0x7f15b9a45000, 524288) = 0 [pid 6303] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6303] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6303] close(3) = 0 [pid 6303] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6303] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6303] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6303] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6303] ioctl(4, LOOP_CLR_FD) = 0 [pid 6303] close(4) = 0 [pid 6303] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6302] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6304 attached [pid 6304] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6302] <... clone3 resumed> => {parent_tid=[1283]}, 88) = 1283 [pid 6304] <... rseq resumed>) = 0 [pid 6302] rt_sigprocmask(SIG_SETMASK, [], [pid 6304] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6304] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6302] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6304] <... futex resumed>) = 0 [pid 6304] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6304] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6302] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6303] <... mknodat resumed>) = 0 [pid 6303] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6303] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6304] <... mount resumed>) = 0 [pid 6304] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6304] chdir(".") = 0 [pid 6304] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6302] <... futex resumed>) = 0 [pid 6304] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6302] close(3) = 0 [pid 6302] close(4) = 0 [pid 6302] close(5) = -1 EBADF (Bad file descriptor) [pid 6302] close(6) = -1 EBADF (Bad file descriptor) [pid 6302] close(7) = -1 EBADF (Bad file descriptor) [pid 6302] close(8) = -1 EBADF (Bad file descriptor) [pid 6302] close(9) = -1 EBADF (Bad file descriptor) [pid 6302] close(10) = -1 EBADF (Bad file descriptor) [pid 6302] close(11) = -1 EBADF (Bad file descriptor) [pid 6302] close(12) = -1 EBADF (Bad file descriptor) [pid 6302] close(13) = -1 EBADF (Bad file descriptor) [pid 6302] close(14) = -1 EBADF (Bad file descriptor) [pid 6302] close(15) = -1 EBADF (Bad file descriptor) [pid 6302] close(16) = -1 EBADF (Bad file descriptor) [pid 6302] close(17) = -1 EBADF (Bad file descriptor) [pid 6302] close(18) = -1 EBADF (Bad file descriptor) [pid 6302] close(19) = -1 EBADF (Bad file descriptor) [pid 6302] close(20) = -1 EBADF (Bad file descriptor) [pid 6302] close(21) = -1 EBADF (Bad file descriptor) [pid 6302] close(22) = -1 EBADF (Bad file descriptor) [pid 6302] close(23) = -1 EBADF (Bad file descriptor) [pid 6302] close(24) = -1 EBADF (Bad file descriptor) [pid 6302] close(25) = -1 EBADF (Bad file descriptor) [pid 6302] close(26) = -1 EBADF (Bad file descriptor) [pid 6302] close(27) = -1 EBADF (Bad file descriptor) [pid 6302] close(28) = -1 EBADF (Bad file descriptor) [pid 6302] close(29) = -1 EBADF (Bad file descriptor) [pid 6302] exit_group(0 [pid 6304] <... futex resumed>) = ? [pid 6303] <... futex resumed>) = ? [pid 6302] <... exit_group resumed>) = ? [pid 6304] +++ exited with 0 +++ [pid 6303] +++ exited with 0 +++ [pid 6302] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1281, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./427", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./427/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./427/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./427") = 0 [pid 5019] mkdir("./428", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1284 ./strace-static-x86_64: Process 6305 attached [pid 6305] set_robust_list(0x555556a426a0, 24) = 0 [pid 6305] chdir("./428") = 0 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6305] setpgid(0, 0) = 0 [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6305] write(3, "1000", 4) = 4 [pid 6305] close(3) = 0 [pid 6305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6305] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6305] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6306 attached => {parent_tid=[1285]}, 88) = 1285 [pid 6305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6305] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6306] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6306] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6306] memfd_create("syzkaller", 0) = 3 [ 74.990331][ T6303] loop0: detected capacity change from 0 to 1024 [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6306] munmap(0x7f15b9a45000, 524288) = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6306] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6306] close(3) = 0 [pid 6306] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6306] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6306] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6306] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6306] ioctl(4, LOOP_CLR_FD) = 0 [pid 6306] close(4) = 0 [pid 6306] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = 0 [pid 6305] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6305] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1286]}, 88) = 1286 [pid 6305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6305] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6306] <... futex resumed>) = 1 [pid 6306] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6306] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6306] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6307 attached [pid 6307] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6307] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6307] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6307] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6307] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6307] chdir(".") = 0 [pid 6307] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = 0 [pid 6305] close(3) = 0 [pid 6305] close(4) = 0 [pid 6305] close(5) = -1 EBADF (Bad file descriptor) [pid 6305] close(6) = -1 EBADF (Bad file descriptor) [pid 6305] close(7) = -1 EBADF (Bad file descriptor) [pid 6305] close(8) = -1 EBADF (Bad file descriptor) [pid 6305] close(9) = -1 EBADF (Bad file descriptor) [pid 6305] close(10) = -1 EBADF (Bad file descriptor) [pid 6305] close(11) = -1 EBADF (Bad file descriptor) [pid 6305] close(12) = -1 EBADF (Bad file descriptor) [pid 6305] close(13) = -1 EBADF (Bad file descriptor) [pid 6305] close(14) = -1 EBADF (Bad file descriptor) [pid 6305] close(15) = -1 EBADF (Bad file descriptor) [pid 6305] close(16) = -1 EBADF (Bad file descriptor) [pid 6305] close(17) = -1 EBADF (Bad file descriptor) [pid 6305] close(18) = -1 EBADF (Bad file descriptor) [pid 6305] close(19) = -1 EBADF (Bad file descriptor) [pid 6305] close(20) = -1 EBADF (Bad file descriptor) [pid 6305] close(21) = -1 EBADF (Bad file descriptor) [pid 6305] close(22) = -1 EBADF (Bad file descriptor) [pid 6305] close(23) = -1 EBADF (Bad file descriptor) [pid 6305] close(24) = -1 EBADF (Bad file descriptor) [pid 6305] close(25) = -1 EBADF (Bad file descriptor) [pid 6305] close(26) = -1 EBADF (Bad file descriptor) [pid 6305] close(27) = -1 EBADF (Bad file descriptor) [pid 6305] close(28) = -1 EBADF (Bad file descriptor) [pid 6305] close(29) = -1 EBADF (Bad file descriptor) [pid 6305] exit_group(0) = ? [pid 6306] <... futex resumed>) = ? [pid 6306] +++ exited with 0 +++ [pid 6307] <... futex resumed>) = ? [pid 6307] +++ exited with 0 +++ [pid 6305] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1284, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./428", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./428/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./428/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./428") = 0 [pid 5019] mkdir("./429", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1287 ./strace-static-x86_64: Process 6308 attached [pid 6308] set_robust_list(0x555556a426a0, 24) = 0 [pid 6308] chdir("./429") = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6308] setpgid(0, 0) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6308] write(3, "1000", 4) = 4 [pid 6308] close(3) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6308] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6308] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1288]}, 88) = 1288 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6308] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6309 attached [pid 6309] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6309] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6309] memfd_create("syzkaller", 0) = 3 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 75.056849][ T6306] loop0: detected capacity change from 0 to 1024 [pid 6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6309] munmap(0x7f15b9a45000, 524288) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6309] close(3) = 0 [pid 6309] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6309] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6309] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6309] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6309] ioctl(4, LOOP_CLR_FD) = 0 [pid 6309] close(4) = 0 [pid 6309] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6308] <... futex resumed>) = 0 [pid 6308] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6308] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6309] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1289]}, 88) = 1289 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6308] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6309] <... mknodat resumed>) = 0 [pid 6309] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6309] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6310 attached [pid 6310] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6310] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6310] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6310] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6310] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6310] chdir(".") = 0 [pid 6310] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6308] <... futex resumed>) = 0 [pid 6308] close(3 [pid 6310] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6308] <... close resumed>) = 0 [pid 6308] close(4) = 0 [pid 6308] close(5) = -1 EBADF (Bad file descriptor) [pid 6308] close(6) = -1 EBADF (Bad file descriptor) [pid 6308] close(7) = -1 EBADF (Bad file descriptor) [pid 6308] close(8) = -1 EBADF (Bad file descriptor) [pid 6308] close(9) = -1 EBADF (Bad file descriptor) [pid 6308] close(10) = -1 EBADF (Bad file descriptor) [pid 6308] close(11) = -1 EBADF (Bad file descriptor) [pid 6308] close(12) = -1 EBADF (Bad file descriptor) [pid 6308] close(13) = -1 EBADF (Bad file descriptor) [pid 6308] close(14) = -1 EBADF (Bad file descriptor) [pid 6308] close(15) = -1 EBADF (Bad file descriptor) [pid 6308] close(16) = -1 EBADF (Bad file descriptor) [pid 6308] close(17) = -1 EBADF (Bad file descriptor) [pid 6308] close(18) = -1 EBADF (Bad file descriptor) [pid 6308] close(19) = -1 EBADF (Bad file descriptor) [pid 6308] close(20) = -1 EBADF (Bad file descriptor) [pid 6308] close(21) = -1 EBADF (Bad file descriptor) [pid 6308] close(22) = -1 EBADF (Bad file descriptor) [pid 6308] close(23) = -1 EBADF (Bad file descriptor) [pid 6308] close(24) = -1 EBADF (Bad file descriptor) [pid 6308] close(25) = -1 EBADF (Bad file descriptor) [pid 6308] close(26) = -1 EBADF (Bad file descriptor) [pid 6308] close(27) = -1 EBADF (Bad file descriptor) [pid 6308] close(28) = -1 EBADF (Bad file descriptor) [pid 6308] close(29) = -1 EBADF (Bad file descriptor) [pid 6308] exit_group(0 [pid 6309] <... futex resumed>) = ? [pid 6308] <... exit_group resumed>) = ? [pid 6310] <... futex resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 6310] +++ exited with 0 +++ [pid 6308] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1287, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./429", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./429/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./429/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./429") = 0 [pid 5019] mkdir("./430", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1290 ./strace-static-x86_64: Process 6311 attached [pid 6311] set_robust_list(0x555556a426a0, 24) = 0 [pid 6311] chdir("./430") = 0 [pid 6311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6311] setpgid(0, 0) = 0 [pid 6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6311] write(3, "1000", 4) = 4 [pid 6311] close(3) = 0 [pid 6311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6311] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 75.120601][ T6309] loop0: detected capacity change from 0 to 1024 [pid 6311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6311] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6312 attached [pid 6312] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6312] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6312] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6311] <... clone3 resumed> => {parent_tid=[1291]}, 88) = 1291 [pid 6311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6311] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6312] <... futex resumed>) = 0 [pid 6311] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6312] memfd_create("syzkaller", 0) = 3 [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6312] munmap(0x7f15b9a45000, 524288) = 0 [pid 6312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6312] close(3) = 0 [pid 6312] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6312] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6312] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6312] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6312] ioctl(4, LOOP_CLR_FD) = 0 [pid 6312] close(4) = 0 [pid 6312] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6311] <... futex resumed>) = 0 [pid 6311] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6311] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6312] <... futex resumed>) = 1 [pid 6312] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6311] <... clone3 resumed> => {parent_tid=[1292]}, 88) = 1292 ./strace-static-x86_64: Process 6313 attached [pid 6311] rt_sigprocmask(SIG_SETMASK, [], [pid 6313] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6313] <... rseq resumed>) = 0 [pid 6311] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6312] <... mknodat resumed>) = 0 [pid 6312] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6312] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6313] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6313] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6313] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6313] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6313] chdir(".") = 0 [pid 6313] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6311] <... futex resumed>) = 0 [pid 6313] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6311] close(3) = 0 [pid 6311] close(4) = 0 [pid 6311] close(5) = -1 EBADF (Bad file descriptor) [pid 6311] close(6) = -1 EBADF (Bad file descriptor) [pid 6311] close(7) = -1 EBADF (Bad file descriptor) [pid 6311] close(8) = -1 EBADF (Bad file descriptor) [pid 6311] close(9) = -1 EBADF (Bad file descriptor) [pid 6311] close(10) = -1 EBADF (Bad file descriptor) [pid 6311] close(11) = -1 EBADF (Bad file descriptor) [pid 6311] close(12) = -1 EBADF (Bad file descriptor) [pid 6311] close(13) = -1 EBADF (Bad file descriptor) [pid 6311] close(14) = -1 EBADF (Bad file descriptor) [pid 6311] close(15) = -1 EBADF (Bad file descriptor) [pid 6311] close(16) = -1 EBADF (Bad file descriptor) [pid 6311] close(17) = -1 EBADF (Bad file descriptor) [pid 6311] close(18) = -1 EBADF (Bad file descriptor) [pid 6311] close(19) = -1 EBADF (Bad file descriptor) [pid 6311] close(20) = -1 EBADF (Bad file descriptor) [pid 6311] close(21) = -1 EBADF (Bad file descriptor) [pid 6311] close(22) = -1 EBADF (Bad file descriptor) [pid 6311] close(23) = -1 EBADF (Bad file descriptor) [pid 6311] close(24) = -1 EBADF (Bad file descriptor) [pid 6311] close(25) = -1 EBADF (Bad file descriptor) [pid 6311] close(26) = -1 EBADF (Bad file descriptor) [pid 6311] close(27) = -1 EBADF (Bad file descriptor) [pid 6311] close(28) = -1 EBADF (Bad file descriptor) [pid 6311] close(29) = -1 EBADF (Bad file descriptor) [pid 6311] exit_group(0 [pid 6313] <... futex resumed>) = ? [pid 6312] <... futex resumed>) = ? [pid 6311] <... exit_group resumed>) = ? [pid 6313] +++ exited with 0 +++ [pid 6312] +++ exited with 0 +++ [pid 6311] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1290, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./430", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./430/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./430/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./430") = 0 [pid 5019] mkdir("./431", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1293 ./strace-static-x86_64: Process 6314 attached [pid 6314] set_robust_list(0x555556a426a0, 24) = 0 [pid 6314] chdir("./431") = 0 [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6314] setpgid(0, 0) = 0 [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6314] write(3, "1000", 4) = 4 [pid 6314] close(3) = 0 [pid 6314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6314] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6314] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6314] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 75.193250][ T6312] loop0: detected capacity change from 0 to 1024 [pid 6314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6315 attached => {parent_tid=[1294]}, 88) = 1294 [pid 6315] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6314] rt_sigprocmask(SIG_SETMASK, [], [pid 6315] set_robust_list(0x7f15c1e659a0, 24 [pid 6314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] <... set_robust_list resumed>) = 0 [pid 6314] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] rt_sigprocmask(SIG_SETMASK, [], [pid 6314] <... futex resumed>) = 0 [pid 6315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6314] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6315] memfd_create("syzkaller", 0) = 3 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6315] munmap(0x7f15b9a45000, 524288) = 0 [pid 6315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6315] close(3) = 0 [pid 6315] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6315] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6315] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6315] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6315] ioctl(4, LOOP_CLR_FD) = 0 [pid 6315] close(4) = 0 [pid 6315] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6314] <... futex resumed>) = 0 [pid 6315] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6314] <... futex resumed>) = 0 [pid 6315] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6314] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6314] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6314] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6315] <... mknodat resumed>) = 0 [pid 6314] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6315] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6315] <... futex resumed>) = 0 [pid 6314] <... clone3 resumed> => {parent_tid=[1295]}, 88) = 1295 [pid 6315] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6314] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6314] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6316 attached [pid 6316] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6316] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6316] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6316] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6316] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6316] chdir(".") = 0 [pid 6316] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6314] <... futex resumed>) = 0 [pid 6314] close(3) = 0 [pid 6314] close(4) = 0 [pid 6314] close(5) = -1 EBADF (Bad file descriptor) [pid 6314] close(6 [pid 6316] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6314] close(7) = -1 EBADF (Bad file descriptor) [pid 6314] close(8) = -1 EBADF (Bad file descriptor) [pid 6314] close(9) = -1 EBADF (Bad file descriptor) [pid 6314] close(10) = -1 EBADF (Bad file descriptor) [pid 6314] close(11) = -1 EBADF (Bad file descriptor) [pid 6314] close(12) = -1 EBADF (Bad file descriptor) [pid 6314] close(13) = -1 EBADF (Bad file descriptor) [pid 6314] close(14) = -1 EBADF (Bad file descriptor) [pid 6314] close(15) = -1 EBADF (Bad file descriptor) [pid 6314] close(16) = -1 EBADF (Bad file descriptor) [pid 6314] close(17) = -1 EBADF (Bad file descriptor) [pid 6314] close(18) = -1 EBADF (Bad file descriptor) [pid 6314] close(19) = -1 EBADF (Bad file descriptor) [pid 6314] close(20) = -1 EBADF (Bad file descriptor) [pid 6314] close(21) = -1 EBADF (Bad file descriptor) [pid 6314] close(22) = -1 EBADF (Bad file descriptor) [pid 6314] close(23) = -1 EBADF (Bad file descriptor) [pid 6314] close(24) = -1 EBADF (Bad file descriptor) [pid 6314] close(25) = -1 EBADF (Bad file descriptor) [pid 6314] close(26) = -1 EBADF (Bad file descriptor) [pid 6314] close(27) = -1 EBADF (Bad file descriptor) [pid 6314] close(28) = -1 EBADF (Bad file descriptor) [pid 6314] close(29) = -1 EBADF (Bad file descriptor) [pid 6314] exit_group(0 [pid 6316] <... futex resumed>) = ? [pid 6315] <... futex resumed>) = ? [pid 6314] <... exit_group resumed>) = ? [pid 6316] +++ exited with 0 +++ [pid 6315] +++ exited with 0 +++ [pid 6314] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1293, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./431", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./431/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./431/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./431") = 0 [pid 5019] mkdir("./432", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1296 ./strace-static-x86_64: Process 6317 attached [pid 6317] set_robust_list(0x555556a426a0, 24) = 0 [pid 6317] chdir("./432") = 0 [pid 6317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6317] setpgid(0, 0) = 0 [pid 6317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6317] write(3, "1000", 4) = 4 [pid 6317] close(3) = 0 [ 75.262446][ T6315] loop0: detected capacity change from 0 to 1024 [pid 6317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6317] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6317] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6317] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6317] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6318 attached [pid 6318] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6318] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6318] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6317] <... clone3 resumed> => {parent_tid=[1297]}, 88) = 1297 [pid 6317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6317] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6317] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6318] memfd_create("syzkaller", 0) = 3 [pid 6318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6318] munmap(0x7f15b9a45000, 524288) = 0 [pid 6318] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6318] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6318] close(3) = 0 [pid 6318] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6318] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6318] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6318] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6318] ioctl(4, LOOP_CLR_FD) = 0 [pid 6318] close(4) = 0 [pid 6318] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6317] <... futex resumed>) = 0 [pid 6317] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6317] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6317] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1298]}, 88) = 1298 [pid 6317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6317] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6318] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6319 attached [pid 6319] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6318] <... mknodat resumed>) = 0 [pid 6319] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6319] mkdir(".", 0777 [pid 6318] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6319] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6318] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6319] <... mount resumed>) = 0 [pid 6319] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6319] chdir(".") = 0 [pid 6319] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6317] <... futex resumed>) = 0 [pid 6319] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6317] close(3) = 0 [pid 6317] close(4) = 0 [pid 6317] close(5) = -1 EBADF (Bad file descriptor) [pid 6317] close(6) = -1 EBADF (Bad file descriptor) [pid 6317] close(7) = -1 EBADF (Bad file descriptor) [pid 6317] close(8) = -1 EBADF (Bad file descriptor) [pid 6317] close(9) = -1 EBADF (Bad file descriptor) [pid 6317] close(10) = -1 EBADF (Bad file descriptor) [pid 6317] close(11) = -1 EBADF (Bad file descriptor) [pid 6317] close(12) = -1 EBADF (Bad file descriptor) [pid 6317] close(13) = -1 EBADF (Bad file descriptor) [pid 6317] close(14) = -1 EBADF (Bad file descriptor) [pid 6317] close(15) = -1 EBADF (Bad file descriptor) [pid 6317] close(16) = -1 EBADF (Bad file descriptor) [pid 6317] close(17) = -1 EBADF (Bad file descriptor) [pid 6317] close(18) = -1 EBADF (Bad file descriptor) [pid 6317] close(19) = -1 EBADF (Bad file descriptor) [pid 6317] close(20) = -1 EBADF (Bad file descriptor) [pid 6317] close(21) = -1 EBADF (Bad file descriptor) [pid 6317] close(22) = -1 EBADF (Bad file descriptor) [pid 6317] close(23) = -1 EBADF (Bad file descriptor) [pid 6317] close(24) = -1 EBADF (Bad file descriptor) [pid 6317] close(25) = -1 EBADF (Bad file descriptor) [pid 6317] close(26) = -1 EBADF (Bad file descriptor) [pid 6317] close(27) = -1 EBADF (Bad file descriptor) [pid 6317] close(28) = -1 EBADF (Bad file descriptor) [pid 6317] close(29) = -1 EBADF (Bad file descriptor) [pid 6317] exit_group(0 [pid 6319] <... futex resumed>) = ? [pid 6318] <... futex resumed>) = ? [pid 6317] <... exit_group resumed>) = ? [pid 6319] +++ exited with 0 +++ [pid 6318] +++ exited with 0 +++ [pid 6317] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1296, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./432", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./432/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./432/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./432") = 0 [pid 5019] mkdir("./433", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1299 ./strace-static-x86_64: Process 6320 attached [pid 6320] set_robust_list(0x555556a426a0, 24) = 0 [pid 6320] chdir("./433") = 0 [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6320] setpgid(0, 0) = 0 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6320] write(3, "1000", 4) = 4 [pid 6320] close(3) = 0 [pid 6320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6320] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 75.336807][ T6318] loop0: detected capacity change from 0 to 1024 [pid 6320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1300]}, 88) = 1300 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6320] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6321 attached [pid 6321] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6321] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6321] memfd_create("syzkaller", 0) = 3 [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6321] munmap(0x7f15b9a45000, 524288) = 0 [pid 6321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6321] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6321] close(3) = 0 [pid 6321] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6321] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6321] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6321] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6321] ioctl(4, LOOP_CLR_FD) = 0 [pid 6321] close(4) = 0 [pid 6321] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6320] <... futex resumed>) = 0 [pid 6320] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6321] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6320] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6320] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1301]}, 88) = 1301 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6320] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6320] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6321] <... mknodat resumed>) = 0 [pid 6321] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6322 attached [pid 6322] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6322] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6322] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6322] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6322] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6322] chdir(".") = 0 [pid 6322] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6320] <... futex resumed>) = 0 [pid 6320] close(3) = 0 [pid 6320] close(4) = 0 [pid 6320] close(5) = -1 EBADF (Bad file descriptor) [pid 6320] close(6) = -1 EBADF (Bad file descriptor) [pid 6320] close(7) = -1 EBADF (Bad file descriptor) [pid 6320] close(8) = -1 EBADF (Bad file descriptor) [pid 6320] close(9) = -1 EBADF (Bad file descriptor) [pid 6320] close(10) = -1 EBADF (Bad file descriptor) [pid 6320] close(11) = -1 EBADF (Bad file descriptor) [pid 6320] close(12) = -1 EBADF (Bad file descriptor) [pid 6320] close(13) = -1 EBADF (Bad file descriptor) [pid 6320] close(14) = -1 EBADF (Bad file descriptor) [pid 6320] close(15) = -1 EBADF (Bad file descriptor) [pid 6320] close(16) = -1 EBADF (Bad file descriptor) [pid 6320] close(17) = -1 EBADF (Bad file descriptor) [pid 6320] close(18) = -1 EBADF (Bad file descriptor) [pid 6320] close(19) = -1 EBADF (Bad file descriptor) [pid 6320] close(20) = -1 EBADF (Bad file descriptor) [pid 6320] close(21) = -1 EBADF (Bad file descriptor) [pid 6320] close(22) = -1 EBADF (Bad file descriptor) [pid 6320] close(23) = -1 EBADF (Bad file descriptor) [pid 6320] close(24) = -1 EBADF (Bad file descriptor) [pid 6320] close(25) = -1 EBADF (Bad file descriptor) [pid 6320] close(26) = -1 EBADF (Bad file descriptor) [pid 6320] close(27 [pid 6322] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6320] close(28) = -1 EBADF (Bad file descriptor) [pid 6320] close(29) = -1 EBADF (Bad file descriptor) [pid 6320] exit_group(0 [pid 6322] <... futex resumed>) = ? [pid 6321] <... futex resumed>) = ? [pid 6320] <... exit_group resumed>) = ? [pid 6321] +++ exited with 0 +++ [pid 6322] +++ exited with 0 +++ [pid 6320] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1299, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./433", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./433/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./433/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./433") = 0 [pid 5019] mkdir("./434", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1302 ./strace-static-x86_64: Process 6323 attached [pid 6323] set_robust_list(0x555556a426a0, 24) = 0 [pid 6323] chdir("./434") = 0 [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6323] setpgid(0, 0) = 0 [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6323] write(3, "1000", 4) = 4 [pid 6323] close(3) = 0 [pid 6323] symlink("/dev/binderfs", "./binderfs") = 0 [ 75.406484][ T6321] loop0: detected capacity change from 0 to 1024 [pid 6323] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6323] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6324 attached => {parent_tid=[1303]}, 88) = 1303 [pid 6324] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6324] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6324] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6323] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = 1 [pid 6323] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6324] memfd_create("syzkaller", 0) = 3 [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6324] munmap(0x7f15b9a45000, 524288) = 0 [pid 6324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6324] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6324] close(3) = 0 [pid 6324] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6324] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6324] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6324] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6324] ioctl(4, LOOP_CLR_FD) = 0 [pid 6324] close(4) = 0 [pid 6324] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... futex resumed>) = 0 [pid 6323] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6323] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1304]}, 88) = 1304 [pid 6323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6323] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6324] <... futex resumed>) = 1 [pid 6324] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6325 attached [pid 6325] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6325] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6325] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6325] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6324] <... mknodat resumed>) = 0 [pid 6324] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6324] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] <... mount resumed>) = 0 [pid 6325] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6325] chdir(".") = 0 [pid 6325] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6323] <... futex resumed>) = 0 [pid 6323] close(3) = 0 [pid 6323] close(4) = 0 [pid 6323] close(5) = -1 EBADF (Bad file descriptor) [pid 6323] close(6) = -1 EBADF (Bad file descriptor) [pid 6323] close(7) = -1 EBADF (Bad file descriptor) [pid 6323] close(8) = -1 EBADF (Bad file descriptor) [pid 6323] close(9) = -1 EBADF (Bad file descriptor) [pid 6323] close(10) = -1 EBADF (Bad file descriptor) [pid 6323] close(11) = -1 EBADF (Bad file descriptor) [pid 6323] close(12) = -1 EBADF (Bad file descriptor) [pid 6323] close(13 [pid 6325] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6323] close(14) = -1 EBADF (Bad file descriptor) [pid 6323] close(15) = -1 EBADF (Bad file descriptor) [pid 6323] close(16) = -1 EBADF (Bad file descriptor) [pid 6323] close(17) = -1 EBADF (Bad file descriptor) [pid 6323] close(18) = -1 EBADF (Bad file descriptor) [pid 6323] close(19) = -1 EBADF (Bad file descriptor) [pid 6323] close(20) = -1 EBADF (Bad file descriptor) [pid 6323] close(21) = -1 EBADF (Bad file descriptor) [pid 6323] close(22) = -1 EBADF (Bad file descriptor) [pid 6323] close(23) = -1 EBADF (Bad file descriptor) [pid 6323] close(24) = -1 EBADF (Bad file descriptor) [pid 6323] close(25) = -1 EBADF (Bad file descriptor) [pid 6323] close(26) = -1 EBADF (Bad file descriptor) [pid 6323] close(27) = -1 EBADF (Bad file descriptor) [pid 6323] close(28) = -1 EBADF (Bad file descriptor) [pid 6323] close(29) = -1 EBADF (Bad file descriptor) [pid 6323] exit_group(0 [pid 6325] <... futex resumed>) = ? [pid 6324] <... futex resumed>) = ? [pid 6323] <... exit_group resumed>) = ? [pid 6325] +++ exited with 0 +++ [pid 6324] +++ exited with 0 +++ [pid 6323] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1302, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./434", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./434/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./434/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./434") = 0 [pid 5019] mkdir("./435", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1305 ./strace-static-x86_64: Process 6326 attached [pid 6326] set_robust_list(0x555556a426a0, 24) = 0 [pid 6326] chdir("./435") = 0 [pid 6326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6326] setpgid(0, 0) = 0 [ 75.481492][ T6324] loop0: detected capacity change from 0 to 1024 [pid 6326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6326] write(3, "1000", 4) = 4 [pid 6326] close(3) = 0 [pid 6326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6326] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6326] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6326] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6327 attached => {parent_tid=[1306]}, 88) = 1306 [pid 6327] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6327] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6327] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6326] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6327] <... futex resumed>) = 0 [pid 6326] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6327] memfd_create("syzkaller", 0) = 3 [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6327] munmap(0x7f15b9a45000, 524288) = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6327] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6327] close(3) = 0 [pid 6327] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6327] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6327] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6327] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6327] ioctl(4, LOOP_CLR_FD) = 0 [pid 6327] close(4) = 0 [pid 6327] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = 0 [pid 6326] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6326] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6326] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1307]}, 88) = 1307 [pid 6326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6326] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6326] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6327] <... futex resumed>) = 1 [pid 6327] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6328 attached [pid 6328] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6328] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6328] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6328] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6327] <... mknodat resumed>) = 0 [pid 6327] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] <... mount resumed>) = 0 [pid 6328] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6328] chdir(".") = 0 [pid 6328] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6326] <... futex resumed>) = 0 [pid 6326] close(3) = 0 [pid 6326] close(4) = 0 [pid 6328] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6326] close(5) = -1 EBADF (Bad file descriptor) [pid 6326] close(6) = -1 EBADF (Bad file descriptor) [pid 6326] close(7) = -1 EBADF (Bad file descriptor) [pid 6326] close(8) = -1 EBADF (Bad file descriptor) [pid 6326] close(9) = -1 EBADF (Bad file descriptor) [pid 6326] close(10) = -1 EBADF (Bad file descriptor) [pid 6326] close(11) = -1 EBADF (Bad file descriptor) [pid 6326] close(12) = -1 EBADF (Bad file descriptor) [pid 6326] close(13) = -1 EBADF (Bad file descriptor) [pid 6326] close(14) = -1 EBADF (Bad file descriptor) [pid 6326] close(15) = -1 EBADF (Bad file descriptor) [pid 6326] close(16) = -1 EBADF (Bad file descriptor) [pid 6326] close(17) = -1 EBADF (Bad file descriptor) [pid 6326] close(18) = -1 EBADF (Bad file descriptor) [pid 6326] close(19) = -1 EBADF (Bad file descriptor) [pid 6326] close(20) = -1 EBADF (Bad file descriptor) [pid 6326] close(21) = -1 EBADF (Bad file descriptor) [pid 6326] close(22) = -1 EBADF (Bad file descriptor) [pid 6326] close(23) = -1 EBADF (Bad file descriptor) [pid 6326] close(24) = -1 EBADF (Bad file descriptor) [pid 6326] close(25) = -1 EBADF (Bad file descriptor) [pid 6326] close(26) = -1 EBADF (Bad file descriptor) [pid 6326] close(27) = -1 EBADF (Bad file descriptor) [pid 6326] close(28) = -1 EBADF (Bad file descriptor) [pid 6326] close(29) = -1 EBADF (Bad file descriptor) [pid 6326] exit_group(0) = ? [pid 6328] <... futex resumed>) = ? [pid 6327] <... futex resumed>) = ? [pid 6327] +++ exited with 0 +++ [pid 6328] +++ exited with 0 +++ [pid 6326] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1305, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./435", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./435/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./435/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [ 75.559929][ T6327] loop0: detected capacity change from 0 to 1024 [pid 5019] rmdir("./435") = 0 [pid 5019] mkdir("./436", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6329 attached [pid 6329] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1308 [pid 6329] chdir("./436") = 0 [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6329] setpgid(0, 0) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6329] write(3, "1000", 4) = 4 [pid 6329] close(3) = 0 [pid 6329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6329] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6329] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1309]}, 88) = 1309 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6330 attached NULL, 8) = 0 [pid 6329] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6330] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6330] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6330] memfd_create("syzkaller", 0) = 3 [pid 6330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6330] munmap(0x7f15b9a45000, 524288) = 0 [pid 6330] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6330] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6330] close(3) = 0 [pid 6330] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6330] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6330] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6330] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6330] ioctl(4, LOOP_CLR_FD) = 0 [pid 6330] close(4) = 0 [pid 6330] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6329] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6329] <... futex resumed>) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6329] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6330] <... mknodat resumed>) = 0 [pid 6329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6330] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6330] <... futex resumed>) = 0 [pid 6329] <... clone3 resumed> => {parent_tid=[1310]}, 88) = 1310 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6329] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6330] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6331 attached [pid 6331] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6331] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6331] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6331] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6331] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6331] chdir(".") = 0 [pid 6331] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6329] close(3) = 0 [pid 6329] close(4) = 0 [pid 6331] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] close(5) = -1 EBADF (Bad file descriptor) [pid 6329] close(6) = -1 EBADF (Bad file descriptor) [pid 6329] close(7) = -1 EBADF (Bad file descriptor) [pid 6329] close(8) = -1 EBADF (Bad file descriptor) [pid 6329] close(9) = -1 EBADF (Bad file descriptor) [pid 6329] close(10) = -1 EBADF (Bad file descriptor) [pid 6329] close(11) = -1 EBADF (Bad file descriptor) [pid 6329] close(12) = -1 EBADF (Bad file descriptor) [pid 6329] close(13) = -1 EBADF (Bad file descriptor) [pid 6329] close(14) = -1 EBADF (Bad file descriptor) [pid 6329] close(15) = -1 EBADF (Bad file descriptor) [pid 6329] close(16) = -1 EBADF (Bad file descriptor) [pid 6329] close(17) = -1 EBADF (Bad file descriptor) [pid 6329] close(18) = -1 EBADF (Bad file descriptor) [pid 6329] close(19) = -1 EBADF (Bad file descriptor) [pid 6329] close(20) = -1 EBADF (Bad file descriptor) [pid 6329] close(21) = -1 EBADF (Bad file descriptor) [pid 6329] close(22) = -1 EBADF (Bad file descriptor) [pid 6329] close(23) = -1 EBADF (Bad file descriptor) [pid 6329] close(24) = -1 EBADF (Bad file descriptor) [pid 6329] close(25) = -1 EBADF (Bad file descriptor) [pid 6329] close(26) = -1 EBADF (Bad file descriptor) [pid 6329] close(27) = -1 EBADF (Bad file descriptor) [pid 6329] close(28) = -1 EBADF (Bad file descriptor) [pid 6329] close(29) = -1 EBADF (Bad file descriptor) [pid 6329] exit_group(0 [pid 6331] <... futex resumed>) = ? [pid 6330] <... futex resumed>) = ? [pid 6329] <... exit_group resumed>) = ? [pid 6331] +++ exited with 0 +++ [pid 6330] +++ exited with 0 +++ [pid 6329] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1308, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./436", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./436/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./436/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./436") = 0 [pid 5019] mkdir("./437", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1311 ./strace-static-x86_64: Process 6332 attached [pid 6332] set_robust_list(0x555556a426a0, 24) = 0 [pid 6332] chdir("./437") = 0 [ 75.638732][ T6330] loop0: detected capacity change from 0 to 1024 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6332] setpgid(0, 0) = 0 [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6332] write(3, "1000", 4) = 4 [pid 6332] close(3) = 0 [pid 6332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6332] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6332] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6332] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6333 attached => {parent_tid=[1312]}, 88) = 1312 [pid 6333] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6333] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6333] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6332] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6333] <... futex resumed>) = 0 [pid 6332] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6333] memfd_create("syzkaller", 0) = 3 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6333] munmap(0x7f15b9a45000, 524288) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6333] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6333] close(3) = 0 [pid 6333] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6333] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6333] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6333] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6333] ioctl(4, LOOP_CLR_FD) = 0 [pid 6333] close(4) = 0 [pid 6333] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... futex resumed>) = 0 [pid 6332] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6332] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6333] <... futex resumed>) = 1 [pid 6333] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6332] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6332] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6332] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6333] <... mknodat resumed>) = 0 [pid 6333] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6334 attached => {parent_tid=[1313]}, 88) = 1313 [pid 6334] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6334] <... rseq resumed>) = 0 [pid 6332] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6332] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6334] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6334] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6334] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6334] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6334] chdir(".") = 0 [pid 6334] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6332] <... futex resumed>) = 0 [pid 6332] close(3) = 0 [pid 6332] close(4) = 0 [pid 6332] close(5) = -1 EBADF (Bad file descriptor) [pid 6332] close(6) = -1 EBADF (Bad file descriptor) [pid 6332] close(7) = -1 EBADF (Bad file descriptor) [pid 6332] close(8 [pid 6334] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6332] close(9) = -1 EBADF (Bad file descriptor) [pid 6332] close(10) = -1 EBADF (Bad file descriptor) [pid 6332] close(11) = -1 EBADF (Bad file descriptor) [pid 6332] close(12) = -1 EBADF (Bad file descriptor) [pid 6332] close(13) = -1 EBADF (Bad file descriptor) [pid 6332] close(14) = -1 EBADF (Bad file descriptor) [pid 6332] close(15) = -1 EBADF (Bad file descriptor) [pid 6332] close(16) = -1 EBADF (Bad file descriptor) [pid 6332] close(17) = -1 EBADF (Bad file descriptor) [pid 6332] close(18) = -1 EBADF (Bad file descriptor) [pid 6332] close(19) = -1 EBADF (Bad file descriptor) [pid 6332] close(20) = -1 EBADF (Bad file descriptor) [pid 6332] close(21) = -1 EBADF (Bad file descriptor) [pid 6332] close(22) = -1 EBADF (Bad file descriptor) [pid 6332] close(23) = -1 EBADF (Bad file descriptor) [pid 6332] close(24) = -1 EBADF (Bad file descriptor) [pid 6332] close(25) = -1 EBADF (Bad file descriptor) [pid 6332] close(26) = -1 EBADF (Bad file descriptor) [pid 6332] close(27) = -1 EBADF (Bad file descriptor) [pid 6332] close(28) = -1 EBADF (Bad file descriptor) [pid 6332] close(29) = -1 EBADF (Bad file descriptor) [pid 6332] exit_group(0) = ? [pid 6334] <... futex resumed>) = ? [pid 6333] <... futex resumed>) = ? [pid 6333] +++ exited with 0 +++ [pid 6334] +++ exited with 0 +++ [pid 6332] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1311, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./437", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./437/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./437/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./437") = 0 [pid 5019] mkdir("./438", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1314 ./strace-static-x86_64: Process 6335 attached [pid 6335] set_robust_list(0x555556a426a0, 24) = 0 [pid 6335] chdir("./438") = 0 [pid 6335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6335] setpgid(0, 0) = 0 [pid 6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6335] write(3, "1000", 4) = 4 [pid 6335] close(3) = 0 [pid 6335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6335] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6335] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6335] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6335] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6336 attached => {parent_tid=[1315]}, 88) = 1315 [pid 6336] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6336] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6336] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6335] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6336] <... futex resumed>) = 0 [ 75.716445][ T6333] loop0: detected capacity change from 0 to 1024 [pid 6335] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6336] memfd_create("syzkaller", 0) = 3 [pid 6336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6336] munmap(0x7f15b9a45000, 524288) = 0 [pid 6336] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6336] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6336] close(3) = 0 [pid 6336] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6336] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6336] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6336] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6336] ioctl(4, LOOP_CLR_FD) = 0 [pid 6336] close(4) = 0 [pid 6336] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6335] <... futex resumed>) = 0 [pid 6335] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6336] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6335] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6335] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6336] <... mknodat resumed>) = 0 [pid 6335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6336] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6336] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1316]}, 88) = 1316 [pid 6335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6335] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6335] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6337 attached [pid 6337] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6337] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6337] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6337] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6337] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6337] chdir(".") = 0 [pid 6337] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] <... futex resumed>) = 0 [pid 6335] close(3) = 0 [pid 6335] close(4) = 0 [pid 6335] close(5) = -1 EBADF (Bad file descriptor) [pid 6335] close(6) = -1 EBADF (Bad file descriptor) [pid 6335] close(7) = -1 EBADF (Bad file descriptor) [pid 6335] close(8) = -1 EBADF (Bad file descriptor) [pid 6335] close(9) = -1 EBADF (Bad file descriptor) [pid 6335] close(10) = -1 EBADF (Bad file descriptor) [pid 6335] close(11) = -1 EBADF (Bad file descriptor) [pid 6335] close(12) = -1 EBADF (Bad file descriptor) [pid 6335] close(13) = -1 EBADF (Bad file descriptor) [pid 6335] close(14) = -1 EBADF (Bad file descriptor) [pid 6335] close(15) = -1 EBADF (Bad file descriptor) [pid 6335] close(16) = -1 EBADF (Bad file descriptor) [pid 6335] close(17) = -1 EBADF (Bad file descriptor) [pid 6335] close(18) = -1 EBADF (Bad file descriptor) [pid 6335] close(19) = -1 EBADF (Bad file descriptor) [pid 6335] close(20) = -1 EBADF (Bad file descriptor) [pid 6335] close(21) = -1 EBADF (Bad file descriptor) [pid 6335] close(22) = -1 EBADF (Bad file descriptor) [pid 6335] close(23) = -1 EBADF (Bad file descriptor) [pid 6335] close(24) = -1 EBADF (Bad file descriptor) [pid 6335] close(25) = -1 EBADF (Bad file descriptor) [pid 6335] close(26) = -1 EBADF (Bad file descriptor) [pid 6335] close(27) = -1 EBADF (Bad file descriptor) [pid 6335] close(28) = -1 EBADF (Bad file descriptor) [pid 6335] close(29) = -1 EBADF (Bad file descriptor) [pid 6335] exit_group(0 [pid 6336] <... futex resumed>) = ? [pid 6335] <... exit_group resumed>) = ? [pid 6336] +++ exited with 0 +++ [pid 6337] <... futex resumed>) = ? [pid 6337] +++ exited with 0 +++ [pid 6335] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1314, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./438", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./438/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./438/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./438") = 0 [pid 5019] mkdir("./439", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 75.784079][ T6336] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6338 attached [pid 6338] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1317 [pid 6338] <... set_robust_list resumed>) = 0 [pid 6338] chdir("./439") = 0 [pid 6338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6338] setpgid(0, 0) = 0 [pid 6338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6338] write(3, "1000", 4) = 4 [pid 6338] close(3) = 0 [pid 6338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6338] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6338] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6338] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6339 attached [pid 6339] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6339] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6339] rt_sigprocmask(SIG_SETMASK, [], [pid 6338] <... clone3 resumed> => {parent_tid=[1318]}, 88) = 1318 [pid 6338] rt_sigprocmask(SIG_SETMASK, [], [pid 6339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6339] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6338] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6339] <... futex resumed>) = 0 [pid 6338] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6339] memfd_create("syzkaller", 0) = 3 [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6339] munmap(0x7f15b9a45000, 524288) = 0 [pid 6339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6339] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6339] close(3) = 0 [pid 6339] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6339] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6339] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6339] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6339] ioctl(4, LOOP_CLR_FD) = 0 [pid 6339] close(4) = 0 [pid 6339] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6338] <... futex resumed>) = 0 [pid 6338] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6339] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6338] <... futex resumed>) = 0 [pid 6338] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6338] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6339] <... mknodat resumed>) = 0 [pid 6338] <... clone3 resumed> => {parent_tid=[1319]}, 88) = 1319 [pid 6339] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6338] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6340 attached ) = 0 [pid 6340] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6338] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6340] <... rseq resumed>) = 0 [pid 6340] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6340] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6340] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6339] <... futex resumed>) = 0 [pid 6339] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6340] <... mount resumed>) = 0 [pid 6340] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6340] chdir(".") = 0 [pid 6340] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] <... futex resumed>) = 0 [pid 6340] <... futex resumed>) = 1 [pid 6338] close(3) = 0 [pid 6338] close(4) = 0 [pid 6338] close(5) = -1 EBADF (Bad file descriptor) [pid 6338] close(6) = -1 EBADF (Bad file descriptor) [pid 6338] close(7) = -1 EBADF (Bad file descriptor) [pid 6338] close(8) = -1 EBADF (Bad file descriptor) [pid 6338] close(9) = -1 EBADF (Bad file descriptor) [pid 6338] close(10) = -1 EBADF (Bad file descriptor) [pid 6338] close(11) = -1 EBADF (Bad file descriptor) [pid 6338] close(12) = -1 EBADF (Bad file descriptor) [pid 6338] close(13) = -1 EBADF (Bad file descriptor) [pid 6338] close(14) = -1 EBADF (Bad file descriptor) [pid 6338] close(15) = -1 EBADF (Bad file descriptor) [pid 6340] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6338] close(16) = -1 EBADF (Bad file descriptor) [pid 6338] close(17) = -1 EBADF (Bad file descriptor) [pid 6338] close(18) = -1 EBADF (Bad file descriptor) [pid 6338] close(19) = -1 EBADF (Bad file descriptor) [pid 6338] close(20) = -1 EBADF (Bad file descriptor) [pid 6338] close(21) = -1 EBADF (Bad file descriptor) [pid 6338] close(22) = -1 EBADF (Bad file descriptor) [pid 6338] close(23) = -1 EBADF (Bad file descriptor) [pid 6338] close(24) = -1 EBADF (Bad file descriptor) [pid 6338] close(25) = -1 EBADF (Bad file descriptor) [pid 6338] close(26) = -1 EBADF (Bad file descriptor) [pid 6338] close(27) = -1 EBADF (Bad file descriptor) [pid 6338] close(28) = -1 EBADF (Bad file descriptor) [pid 6338] close(29) = -1 EBADF (Bad file descriptor) [pid 6338] exit_group(0 [pid 6339] <... futex resumed>) = ? [pid 6338] <... exit_group resumed>) = ? [pid 6340] <... futex resumed>) = ? [pid 6339] +++ exited with 0 +++ [pid 6340] +++ exited with 0 +++ [pid 6338] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1317, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./439", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 75.867787][ T7] cfg80211: failed to load regulatory.db [ 75.871368][ T6339] loop0: detected capacity change from 0 to 1024 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./439/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./439/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./439") = 0 [pid 5019] mkdir("./440", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1320 ./strace-static-x86_64: Process 6341 attached [pid 6341] set_robust_list(0x555556a426a0, 24) = 0 [pid 6341] chdir("./440") = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6341] setpgid(0, 0) = 0 [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6341] write(3, "1000", 4) = 4 [pid 6341] close(3) = 0 [pid 6341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6341] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6341] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6342 attached => {parent_tid=[1321]}, 88) = 1321 [pid 6342] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6342] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6342] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6341] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6342] <... futex resumed>) = 0 [pid 6341] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6342] memfd_create("syzkaller", 0) = 3 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6342] munmap(0x7f15b9a45000, 524288) = 0 [pid 6342] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6342] close(3) = 0 [pid 6342] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6342] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6342] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6342] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6342] ioctl(4, LOOP_CLR_FD) = 0 [pid 6342] close(4) = 0 [pid 6342] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6341] <... futex resumed>) = 0 [pid 6341] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6342] <... futex resumed>) = 1 [pid 6341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6341] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1322]}, 88) = 1322 [pid 6342] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6341] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6343 attached [pid 6343] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6343] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6343] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6343] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6342] <... mknodat resumed>) = 0 [pid 6342] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6342] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] <... mount resumed>) = 0 [pid 6343] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6343] chdir(".") = 0 [pid 6343] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6343] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] <... futex resumed>) = 0 [pid 6341] close(3) = 0 [pid 6341] close(4) = 0 [pid 6341] close(5) = -1 EBADF (Bad file descriptor) [pid 6341] close(6) = -1 EBADF (Bad file descriptor) [pid 6341] close(7) = -1 EBADF (Bad file descriptor) [pid 6341] close(8) = -1 EBADF (Bad file descriptor) [pid 6341] close(9) = -1 EBADF (Bad file descriptor) [pid 6341] close(10) = -1 EBADF (Bad file descriptor) [pid 6341] close(11) = -1 EBADF (Bad file descriptor) [pid 6341] close(12) = -1 EBADF (Bad file descriptor) [pid 6341] close(13) = -1 EBADF (Bad file descriptor) [pid 6341] close(14) = -1 EBADF (Bad file descriptor) [pid 6341] close(15) = -1 EBADF (Bad file descriptor) [pid 6341] close(16) = -1 EBADF (Bad file descriptor) [pid 6341] close(17) = -1 EBADF (Bad file descriptor) [pid 6341] close(18) = -1 EBADF (Bad file descriptor) [pid 6341] close(19) = -1 EBADF (Bad file descriptor) [pid 6341] close(20) = -1 EBADF (Bad file descriptor) [pid 6341] close(21) = -1 EBADF (Bad file descriptor) [pid 6341] close(22) = -1 EBADF (Bad file descriptor) [pid 6341] close(23) = -1 EBADF (Bad file descriptor) [pid 6341] close(24) = -1 EBADF (Bad file descriptor) [pid 6341] close(25) = -1 EBADF (Bad file descriptor) [pid 6341] close(26) = -1 EBADF (Bad file descriptor) [pid 6341] close(27) = -1 EBADF (Bad file descriptor) [pid 6341] close(28) = -1 EBADF (Bad file descriptor) [pid 6341] close(29) = -1 EBADF (Bad file descriptor) [pid 6341] exit_group(0) = ? [pid 6343] <... futex resumed>) = ? [pid 6342] <... futex resumed>) = ? [pid 6343] +++ exited with 0 +++ [pid 6342] +++ exited with 0 +++ [pid 6341] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1320, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./440", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./440/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./440/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./440") = 0 [pid 5019] mkdir("./441", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 75.962652][ T6342] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6344 attached [pid 6344] set_robust_list(0x555556a426a0, 24) = 0 [pid 6344] chdir("./441") = 0 [pid 6344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6344] setpgid(0, 0) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1323 [pid 6344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6344] write(3, "1000", 4) = 4 [pid 6344] close(3) = 0 [pid 6344] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6344] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6344] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6344] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6345 attached => {parent_tid=[1324]}, 88) = 1324 [pid 6344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6345] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6344] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6344] <... futex resumed>) = 0 [pid 6345] memfd_create("syzkaller", 0 [pid 6344] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6345] <... memfd_create resumed>) = 3 [pid 6345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6345] munmap(0x7f15b9a45000, 524288) = 0 [pid 6345] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6345] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6345] close(3) = 0 [pid 6345] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6345] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6345] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6345] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6345] ioctl(4, LOOP_CLR_FD) = 0 [pid 6345] close(4) = 0 [pid 6345] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] <... futex resumed>) = 0 [pid 6344] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6344] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6344] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6346 attached => {parent_tid=[1325]}, 88) = 1325 [pid 6346] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6344] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6344] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6345] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6346] <... rseq resumed>) = 0 [pid 6346] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6346] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6346] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6345] <... mknodat resumed>) = 0 [pid 6345] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6345] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] <... mount resumed>) = 0 [pid 6346] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6346] chdir(".") = 0 [pid 6346] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] <... futex resumed>) = 0 [pid 6344] close(3 [pid 6346] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6344] <... close resumed>) = 0 [pid 6344] close(4) = 0 [pid 6344] close(5) = -1 EBADF (Bad file descriptor) [pid 6344] close(6) = -1 EBADF (Bad file descriptor) [pid 6344] close(7) = -1 EBADF (Bad file descriptor) [pid 6344] close(8) = -1 EBADF (Bad file descriptor) [pid 6344] close(9) = -1 EBADF (Bad file descriptor) [pid 6344] close(10) = -1 EBADF (Bad file descriptor) [pid 6344] close(11) = -1 EBADF (Bad file descriptor) [pid 6344] close(12) = -1 EBADF (Bad file descriptor) [pid 6344] close(13) = -1 EBADF (Bad file descriptor) [pid 6344] close(14) = -1 EBADF (Bad file descriptor) [pid 6344] close(15) = -1 EBADF (Bad file descriptor) [pid 6344] close(16) = -1 EBADF (Bad file descriptor) [pid 6344] close(17) = -1 EBADF (Bad file descriptor) [pid 6344] close(18) = -1 EBADF (Bad file descriptor) [pid 6344] close(19) = -1 EBADF (Bad file descriptor) [pid 6344] close(20) = -1 EBADF (Bad file descriptor) [pid 6344] close(21) = -1 EBADF (Bad file descriptor) [pid 6344] close(22) = -1 EBADF (Bad file descriptor) [pid 6344] close(23) = -1 EBADF (Bad file descriptor) [pid 6344] close(24) = -1 EBADF (Bad file descriptor) [pid 6344] close(25) = -1 EBADF (Bad file descriptor) [pid 6344] close(26) = -1 EBADF (Bad file descriptor) [pid 6344] close(27) = -1 EBADF (Bad file descriptor) [pid 6344] close(28) = -1 EBADF (Bad file descriptor) [pid 6344] close(29) = -1 EBADF (Bad file descriptor) [pid 6344] exit_group(0 [pid 6345] <... futex resumed>) = ? [pid 6344] <... exit_group resumed>) = ? [pid 6346] <... futex resumed>) = ? [pid 6345] +++ exited with 0 +++ [pid 6346] +++ exited with 0 +++ [pid 6344] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1323, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./441", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./441/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./441/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./441") = 0 [pid 5019] mkdir("./442", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1326 ./strace-static-x86_64: Process 6347 attached [pid 6347] set_robust_list(0x555556a426a0, 24) = 0 [pid 6347] chdir("./442") = 0 [ 76.041261][ T6345] loop0: detected capacity change from 0 to 1024 [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6347] setpgid(0, 0) = 0 [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6347] write(3, "1000", 4) = 4 [pid 6347] close(3) = 0 [pid 6347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6347] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6347] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6347] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6348 attached => {parent_tid=[1327]}, 88) = 1327 [pid 6348] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6348] set_robust_list(0x7f15c1e659a0, 24 [pid 6347] rt_sigprocmask(SIG_SETMASK, [], [pid 6348] <... set_robust_list resumed>) = 0 [pid 6348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6348] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6347] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... futex resumed>) = 0 [pid 6347] <... futex resumed>) = 1 [pid 6347] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6348] memfd_create("syzkaller", 0) = 3 [pid 6348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6348] munmap(0x7f15b9a45000, 524288) = 0 [pid 6348] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6348] close(3) = 0 [pid 6348] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6348] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6348] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6348] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6348] ioctl(4, LOOP_CLR_FD) = 0 [pid 6348] close(4) = 0 [pid 6348] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6347] <... futex resumed>) = 0 [pid 6348] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 6348] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6347] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] <... mknodat resumed>) = 0 [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6348] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6348] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6347] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6349 attached => {parent_tid=[1328]}, 88) = 1328 [pid 6349] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6349] <... rseq resumed>) = 0 [pid 6349] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6349] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6347] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6349] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6349] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6349] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6349] chdir(".") = 0 [pid 6349] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6347] <... futex resumed>) = 0 [pid 6347] close(3) = 0 [pid 6347] close(4) = 0 [pid 6347] close(5) = -1 EBADF (Bad file descriptor) [pid 6349] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] close(6) = -1 EBADF (Bad file descriptor) [pid 6347] close(7) = -1 EBADF (Bad file descriptor) [pid 6347] close(8) = -1 EBADF (Bad file descriptor) [pid 6347] close(9) = -1 EBADF (Bad file descriptor) [pid 6347] close(10) = -1 EBADF (Bad file descriptor) [pid 6347] close(11) = -1 EBADF (Bad file descriptor) [pid 6347] close(12) = -1 EBADF (Bad file descriptor) [pid 6347] close(13) = -1 EBADF (Bad file descriptor) [pid 6347] close(14) = -1 EBADF (Bad file descriptor) [pid 6347] close(15) = -1 EBADF (Bad file descriptor) [pid 6347] close(16) = -1 EBADF (Bad file descriptor) [pid 6347] close(17) = -1 EBADF (Bad file descriptor) [pid 6347] close(18) = -1 EBADF (Bad file descriptor) [pid 6347] close(19) = -1 EBADF (Bad file descriptor) [pid 6347] close(20) = -1 EBADF (Bad file descriptor) [pid 6347] close(21) = -1 EBADF (Bad file descriptor) [pid 6347] close(22) = -1 EBADF (Bad file descriptor) [pid 6347] close(23) = -1 EBADF (Bad file descriptor) [pid 6347] close(24) = -1 EBADF (Bad file descriptor) [pid 6347] close(25) = -1 EBADF (Bad file descriptor) [pid 6347] close(26) = -1 EBADF (Bad file descriptor) [pid 6347] close(27) = -1 EBADF (Bad file descriptor) [pid 6347] close(28) = -1 EBADF (Bad file descriptor) [pid 6347] close(29) = -1 EBADF (Bad file descriptor) [pid 6347] exit_group(0 [pid 6349] <... futex resumed>) = ? [pid 6348] <... futex resumed>) = ? [pid 6347] <... exit_group resumed>) = ? [pid 6349] +++ exited with 0 +++ [pid 6348] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1326, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./442", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./442/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./442/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./442") = 0 [pid 5019] mkdir("./443", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1329 ./strace-static-x86_64: Process 6350 attached [pid 6350] set_robust_list(0x555556a426a0, 24) = 0 [pid 6350] chdir("./443") = 0 [pid 6350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6350] setpgid(0, 0) = 0 [pid 6350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6350] write(3, "1000", 4) = 4 [pid 6350] close(3) = 0 [pid 6350] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6350] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6350] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [ 76.118845][ T6348] loop0: detected capacity change from 0 to 1024 [pid 6350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6350] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6351 attached [pid 6351] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6351] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6351] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] <... clone3 resumed> => {parent_tid=[1330]}, 88) = 1330 [pid 6350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6350] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6351] <... futex resumed>) = 0 [pid 6350] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6351] memfd_create("syzkaller", 0) = 3 [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6351] munmap(0x7f15b9a45000, 524288) = 0 [pid 6351] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6351] close(3) = 0 [pid 6351] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6351] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6351] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6351] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6351] ioctl(4, LOOP_CLR_FD) = 0 [pid 6351] close(4) = 0 [pid 6351] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6350] <... futex resumed>) = 0 [pid 6351] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6350] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6350] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6350] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6352 attached [pid 6352] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6350] <... clone3 resumed> => {parent_tid=[1331]}, 88) = 1331 [pid 6352] <... rseq resumed>) = 0 [pid 6352] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6352] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6350] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6352] <... futex resumed>) = 0 [pid 6352] mkdir(".", 0777 [pid 6350] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6351] <... mknodat resumed>) = 0 [pid 6352] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6352] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6351] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6351] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... mount resumed>) = 0 [pid 6352] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6352] chdir(".") = 0 [pid 6352] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6350] <... futex resumed>) = 0 [pid 6350] close(3) = 0 [pid 6350] close(4) = 0 [pid 6350] close(5) = -1 EBADF (Bad file descriptor) [pid 6350] close(6) = -1 EBADF (Bad file descriptor) [pid 6350] close(7) = -1 EBADF (Bad file descriptor) [pid 6350] close(8) = -1 EBADF (Bad file descriptor) [pid 6350] close(9) = -1 EBADF (Bad file descriptor) [pid 6350] close(10) = -1 EBADF (Bad file descriptor) [pid 6352] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] close(11) = -1 EBADF (Bad file descriptor) [pid 6350] close(12) = -1 EBADF (Bad file descriptor) [pid 6350] close(13) = -1 EBADF (Bad file descriptor) [pid 6350] close(14) = -1 EBADF (Bad file descriptor) [pid 6350] close(15) = -1 EBADF (Bad file descriptor) [pid 6350] close(16) = -1 EBADF (Bad file descriptor) [pid 6350] close(17) = -1 EBADF (Bad file descriptor) [pid 6350] close(18) = -1 EBADF (Bad file descriptor) [pid 6350] close(19) = -1 EBADF (Bad file descriptor) [pid 6350] close(20) = -1 EBADF (Bad file descriptor) [pid 6350] close(21) = -1 EBADF (Bad file descriptor) [pid 6350] close(22) = -1 EBADF (Bad file descriptor) [pid 6350] close(23) = -1 EBADF (Bad file descriptor) [pid 6350] close(24) = -1 EBADF (Bad file descriptor) [pid 6350] close(25) = -1 EBADF (Bad file descriptor) [pid 6350] close(26) = -1 EBADF (Bad file descriptor) [pid 6350] close(27) = -1 EBADF (Bad file descriptor) [pid 6350] close(28) = -1 EBADF (Bad file descriptor) [pid 6350] close(29) = -1 EBADF (Bad file descriptor) [pid 6350] exit_group(0 [pid 6352] <... futex resumed>) = ? [pid 6351] <... futex resumed>) = ? [pid 6350] <... exit_group resumed>) = ? [pid 6352] +++ exited with 0 +++ [pid 6351] +++ exited with 0 +++ [pid 6350] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1329, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./443", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./443/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./443/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./443") = 0 [pid 5019] mkdir("./444", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 76.191496][ T6351] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1332 ./strace-static-x86_64: Process 6353 attached [pid 6353] set_robust_list(0x555556a426a0, 24) = 0 [pid 6353] chdir("./444") = 0 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6353] setpgid(0, 0) = 0 [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6353] write(3, "1000", 4) = 4 [pid 6353] close(3) = 0 [pid 6353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6353] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6353] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6354 attached => {parent_tid=[1333]}, 88) = 1333 [pid 6354] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6354] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6353] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6354] memfd_create("syzkaller", 0) = 3 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6354] munmap(0x7f15b9a45000, 524288) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6354] close(3) = 0 [pid 6354] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6354] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6354] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6354] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6354] ioctl(4, LOOP_CLR_FD) = 0 [pid 6354] close(4) = 0 [pid 6354] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6353] <... futex resumed>) = 0 [pid 6353] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6353] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6354] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6353] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1334]}, 88) = 1334 [pid 6353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6353] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6355 attached [pid 6355] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6355] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6355] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6355] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6355] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6355] chdir(".") = 0 [pid 6355] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 0 [pid 6355] <... futex resumed>) = 1 [pid 6355] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6354] <... mknodat resumed>) = 0 [pid 6354] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] close(3) = 0 [pid 6353] close(4) = 0 [pid 6353] close(5) = -1 EBADF (Bad file descriptor) [pid 6353] close(6) = -1 EBADF (Bad file descriptor) [pid 6353] close(7) = -1 EBADF (Bad file descriptor) [pid 6353] close(8) = -1 EBADF (Bad file descriptor) [pid 6353] close(9) = -1 EBADF (Bad file descriptor) [pid 6353] close(10) = -1 EBADF (Bad file descriptor) [pid 6353] close(11) = -1 EBADF (Bad file descriptor) [pid 6353] close(12) = -1 EBADF (Bad file descriptor) [pid 6353] close(13) = -1 EBADF (Bad file descriptor) [pid 6353] close(14) = -1 EBADF (Bad file descriptor) [pid 6353] close(15) = -1 EBADF (Bad file descriptor) [pid 6353] close(16) = -1 EBADF (Bad file descriptor) [pid 6353] close(17) = -1 EBADF (Bad file descriptor) [pid 6353] close(18) = -1 EBADF (Bad file descriptor) [pid 6353] close(19) = -1 EBADF (Bad file descriptor) [pid 6353] close(20) = -1 EBADF (Bad file descriptor) [pid 6353] close(21) = -1 EBADF (Bad file descriptor) [pid 6353] close(22) = -1 EBADF (Bad file descriptor) [pid 6353] close(23) = -1 EBADF (Bad file descriptor) [pid 6353] close(24) = -1 EBADF (Bad file descriptor) [pid 6353] close(25) = -1 EBADF (Bad file descriptor) [pid 6353] close(26) = -1 EBADF (Bad file descriptor) [pid 6353] close(27) = -1 EBADF (Bad file descriptor) [pid 6353] close(28) = -1 EBADF (Bad file descriptor) [pid 6353] close(29) = -1 EBADF (Bad file descriptor) [pid 6353] exit_group(0) = ? [pid 6355] <... futex resumed>) = ? [pid 6354] <... futex resumed>) = ? [pid 6355] +++ exited with 0 +++ [pid 6354] +++ exited with 0 +++ [pid 6353] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./444", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./444/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./444/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./444") = 0 [pid 5019] mkdir("./445", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1335 ./strace-static-x86_64: Process 6356 attached [pid 6356] set_robust_list(0x555556a426a0, 24) = 0 [pid 6356] chdir("./445") = 0 [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6356] setpgid(0, 0) = 0 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6356] write(3, "1000", 4) = 4 [pid 6356] close(3) = 0 [pid 6356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6356] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6356] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6356] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1336]}, 88) = 1336 [pid 6356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6356] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6356] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6357 attached [pid 6357] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6357] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6357] memfd_create("syzkaller", 0) = 3 [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 76.272595][ T6354] loop0: detected capacity change from 0 to 1024 [pid 6357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6357] munmap(0x7f15b9a45000, 524288) = 0 [pid 6357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6357] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6357] close(3) = 0 [pid 6357] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6357] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6357] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6357] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6357] ioctl(4, LOOP_CLR_FD) = 0 [pid 6357] close(4) = 0 [pid 6357] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6356] <... futex resumed>) = 0 [pid 6356] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6356] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6357] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6356] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6356] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1337]}, 88) = 1337 [pid 6356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6356] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6356] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6358 attached [pid 6358] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6358] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6358] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6358] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6357] <... mknodat resumed>) = 0 [pid 6357] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6357] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6358] <... mount resumed>) = 0 [pid 6358] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6358] chdir(".") = 0 [pid 6358] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... futex resumed>) = 0 [pid 6358] <... futex resumed>) = 1 [pid 6356] close(3) = 0 [pid 6356] close(4) = 0 [pid 6356] close(5) = -1 EBADF (Bad file descriptor) [pid 6356] close(6) = -1 EBADF (Bad file descriptor) [pid 6356] close(7) = -1 EBADF (Bad file descriptor) [pid 6356] close(8) = -1 EBADF (Bad file descriptor) [pid 6356] close(9) = -1 EBADF (Bad file descriptor) [pid 6356] close(10) = -1 EBADF (Bad file descriptor) [pid 6356] close(11) = -1 EBADF (Bad file descriptor) [pid 6356] close(12) = -1 EBADF (Bad file descriptor) [pid 6356] close(13) = -1 EBADF (Bad file descriptor) [pid 6356] close(14) = -1 EBADF (Bad file descriptor) [pid 6356] close(15) = -1 EBADF (Bad file descriptor) [pid 6356] close(16) = -1 EBADF (Bad file descriptor) [pid 6356] close(17) = -1 EBADF (Bad file descriptor) [pid 6356] close(18) = -1 EBADF (Bad file descriptor) [pid 6356] close(19) = -1 EBADF (Bad file descriptor) [pid 6356] close(20) = -1 EBADF (Bad file descriptor) [pid 6356] close(21) = -1 EBADF (Bad file descriptor) [pid 6356] close(22) = -1 EBADF (Bad file descriptor) [pid 6356] close(23) = -1 EBADF (Bad file descriptor) [pid 6356] close(24) = -1 EBADF (Bad file descriptor) [pid 6356] close(25) = -1 EBADF (Bad file descriptor) [pid 6356] close(26) = -1 EBADF (Bad file descriptor) [pid 6356] close(27) = -1 EBADF (Bad file descriptor) [pid 6356] close(28) = -1 EBADF (Bad file descriptor) [pid 6356] close(29) = -1 EBADF (Bad file descriptor) [pid 6356] exit_group(0 [pid 6357] <... futex resumed>) = ? [pid 6356] <... exit_group resumed>) = ? [pid 6357] +++ exited with 0 +++ [pid 6358] +++ exited with 0 +++ [pid 6356] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1335, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./445", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./445/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./445/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./445") = 0 [pid 5019] mkdir("./446", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6359 attached [pid 6359] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1338 [pid 6359] chdir("./446") = 0 [pid 6359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6359] setpgid(0, 0) = 0 [pid 6359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6359] write(3, "1000", 4) = 4 [pid 6359] close(3) = 0 [pid 6359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6359] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6359] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6359] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 76.335421][ T6357] loop0: detected capacity change from 0 to 1024 [pid 6359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6359] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6360 attached => {parent_tid=[1339]}, 88) = 1339 [pid 6360] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6360] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6360] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6359] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6360] <... futex resumed>) = 0 [pid 6360] memfd_create("syzkaller", 0) = 3 [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6359] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6360] munmap(0x7f15b9a45000, 524288) = 0 [pid 6360] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6360] close(3) = 0 [pid 6360] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6360] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6360] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6360] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6360] ioctl(4, LOOP_CLR_FD) = 0 [pid 6360] close(4) = 0 [pid 6360] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6359] <... futex resumed>) = 0 [pid 6360] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6359] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6360] <... futex resumed>) = 0 [pid 6360] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6359] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6359] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1340]}, 88) = 1340 [pid 6359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6359] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6359] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6361 attached [pid 6361] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6361] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6361] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6361] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6360] <... mknodat resumed>) = 0 [pid 6360] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6360] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6361] <... mount resumed>) = 0 [pid 6361] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6361] chdir(".") = 0 [pid 6361] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6359] <... futex resumed>) = 0 [pid 6359] close(3) = 0 [pid 6359] close(4) = 0 [pid 6359] close(5 [pid 6361] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6359] close(6) = -1 EBADF (Bad file descriptor) [pid 6359] close(7) = -1 EBADF (Bad file descriptor) [pid 6359] close(8) = -1 EBADF (Bad file descriptor) [pid 6359] close(9) = -1 EBADF (Bad file descriptor) [pid 6359] close(10) = -1 EBADF (Bad file descriptor) [pid 6359] close(11) = -1 EBADF (Bad file descriptor) [pid 6359] close(12) = -1 EBADF (Bad file descriptor) [pid 6359] close(13) = -1 EBADF (Bad file descriptor) [pid 6359] close(14) = -1 EBADF (Bad file descriptor) [pid 6359] close(15) = -1 EBADF (Bad file descriptor) [pid 6359] close(16) = -1 EBADF (Bad file descriptor) [pid 6359] close(17) = -1 EBADF (Bad file descriptor) [pid 6359] close(18) = -1 EBADF (Bad file descriptor) [pid 6359] close(19) = -1 EBADF (Bad file descriptor) [pid 6359] close(20) = -1 EBADF (Bad file descriptor) [pid 6359] close(21) = -1 EBADF (Bad file descriptor) [pid 6359] close(22) = -1 EBADF (Bad file descriptor) [pid 6359] close(23) = -1 EBADF (Bad file descriptor) [pid 6359] close(24) = -1 EBADF (Bad file descriptor) [pid 6359] close(25) = -1 EBADF (Bad file descriptor) [pid 6359] close(26) = -1 EBADF (Bad file descriptor) [pid 6359] close(27) = -1 EBADF (Bad file descriptor) [pid 6359] close(28) = -1 EBADF (Bad file descriptor) [pid 6359] close(29) = -1 EBADF (Bad file descriptor) [pid 6359] exit_group(0 [pid 6361] <... futex resumed>) = ? [pid 6360] <... futex resumed>) = ? [pid 6359] <... exit_group resumed>) = ? [pid 6361] +++ exited with 0 +++ [pid 6360] +++ exited with 0 +++ [pid 6359] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1338, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./446", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./446/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./446/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./446") = 0 [pid 5019] mkdir("./447", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1341 ./strace-static-x86_64: Process 6362 attached [pid 6362] set_robust_list(0x555556a426a0, 24) = 0 [pid 6362] chdir("./447") = 0 [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6362] setpgid(0, 0) = 0 [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6362] write(3, "1000", 4) = 4 [pid 6362] close(3) = 0 [pid 6362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6362] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6362] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6362] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 76.407879][ T6360] loop0: detected capacity change from 0 to 1024 [pid 6362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6363 attached => {parent_tid=[1342]}, 88) = 1342 [pid 6363] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6363] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6363] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6362] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6363] <... futex resumed>) = 0 [pid 6363] memfd_create("syzkaller", 0 [pid 6362] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6363] <... memfd_create resumed>) = 3 [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6363] munmap(0x7f15b9a45000, 524288) = 0 [pid 6363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6363] close(3) = 0 [pid 6363] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6363] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6363] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6363] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6363] ioctl(4, LOOP_CLR_FD) = 0 [pid 6363] close(4) = 0 [pid 6363] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... futex resumed>) = 0 [pid 6362] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 6362] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6362] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1343]}, 88) = 1343 [pid 6362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6362] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6362] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6363] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6364 attached [pid 6364] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6364] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6363] <... mknodat resumed>) = 0 [pid 6363] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6363] <... futex resumed>) = 0 [pid 6364] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6363] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6364] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6364] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6364] chdir(".") = 0 [pid 6364] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... futex resumed>) = 0 [pid 6364] <... futex resumed>) = 1 [pid 6362] close(3) = 0 [pid 6362] close(4) = 0 [pid 6362] close(5) = -1 EBADF (Bad file descriptor) [pid 6364] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] close(6) = -1 EBADF (Bad file descriptor) [pid 6362] close(7) = -1 EBADF (Bad file descriptor) [pid 6362] close(8) = -1 EBADF (Bad file descriptor) [pid 6362] close(9) = -1 EBADF (Bad file descriptor) [pid 6362] close(10) = -1 EBADF (Bad file descriptor) [pid 6362] close(11) = -1 EBADF (Bad file descriptor) [pid 6362] close(12) = -1 EBADF (Bad file descriptor) [pid 6362] close(13) = -1 EBADF (Bad file descriptor) [pid 6362] close(14) = -1 EBADF (Bad file descriptor) [pid 6362] close(15) = -1 EBADF (Bad file descriptor) [pid 6362] close(16) = -1 EBADF (Bad file descriptor) [pid 6362] close(17) = -1 EBADF (Bad file descriptor) [pid 6362] close(18) = -1 EBADF (Bad file descriptor) [pid 6362] close(19) = -1 EBADF (Bad file descriptor) [pid 6362] close(20) = -1 EBADF (Bad file descriptor) [pid 6362] close(21) = -1 EBADF (Bad file descriptor) [pid 6362] close(22) = -1 EBADF (Bad file descriptor) [pid 6362] close(23) = -1 EBADF (Bad file descriptor) [pid 6362] close(24) = -1 EBADF (Bad file descriptor) [pid 6362] close(25) = -1 EBADF (Bad file descriptor) [pid 6362] close(26) = -1 EBADF (Bad file descriptor) [pid 6362] close(27) = -1 EBADF (Bad file descriptor) [pid 6362] close(28) = -1 EBADF (Bad file descriptor) [pid 6362] close(29) = -1 EBADF (Bad file descriptor) [pid 6362] exit_group(0 [pid 6364] <... futex resumed>) = ? [pid 6363] <... futex resumed>) = ? [pid 6362] <... exit_group resumed>) = ? [pid 6364] +++ exited with 0 +++ [pid 6363] +++ exited with 0 +++ [pid 6362] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1341, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./447", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./447/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./447/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./447") = 0 [pid 5019] mkdir("./448", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 76.478508][ T6363] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6365 attached [pid 6365] set_robust_list(0x555556a426a0, 24) = 0 [pid 6365] chdir("./448") = 0 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4) = 4 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6365] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1344 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6365] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6366 attached [pid 6366] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6365] <... clone3 resumed> => {parent_tid=[1345]}, 88) = 1345 [pid 6366] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6366] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6366] memfd_create("syzkaller", 0 [pid 6365] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6366] <... memfd_create resumed>) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6366] munmap(0x7f15b9a45000, 524288) = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6366] close(3) = 0 [pid 6366] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6366] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6366] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6366] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6366] ioctl(4, LOOP_CLR_FD) = 0 [pid 6366] close(4) = 0 [pid 6366] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] <... futex resumed>) = 0 [pid 6365] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6365] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1346]}, 88) = 1346 [pid 6366] <... futex resumed>) = 1 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6365] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6367 attached [pid 6367] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6367] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6367] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6367] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6366] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6367] <... mount resumed>) = 0 [pid 6367] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6367] chdir(".") = 0 [pid 6367] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] <... futex resumed>) = 0 [pid 6367] <... futex resumed>) = 1 [pid 6367] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6366] <... mknodat resumed>) = 0 [pid 6366] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6365] close(3) = 0 [pid 6365] close(4) = 0 [pid 6365] close(5) = -1 EBADF (Bad file descriptor) [pid 6365] close(6) = -1 EBADF (Bad file descriptor) [pid 6365] close(7) = -1 EBADF (Bad file descriptor) [pid 6365] close(8) = -1 EBADF (Bad file descriptor) [pid 6365] close(9) = -1 EBADF (Bad file descriptor) [pid 6365] close(10) = -1 EBADF (Bad file descriptor) [pid 6365] close(11) = -1 EBADF (Bad file descriptor) [pid 6365] close(12) = -1 EBADF (Bad file descriptor) [pid 6365] close(13) = -1 EBADF (Bad file descriptor) [pid 6365] close(14) = -1 EBADF (Bad file descriptor) [pid 6365] close(15) = -1 EBADF (Bad file descriptor) [pid 6365] close(16) = -1 EBADF (Bad file descriptor) [pid 6365] close(17) = -1 EBADF (Bad file descriptor) [pid 6365] close(18) = -1 EBADF (Bad file descriptor) [pid 6365] close(19) = -1 EBADF (Bad file descriptor) [pid 6365] close(20) = -1 EBADF (Bad file descriptor) [pid 6365] close(21) = -1 EBADF (Bad file descriptor) [pid 6365] close(22) = -1 EBADF (Bad file descriptor) [pid 6365] close(23) = -1 EBADF (Bad file descriptor) [pid 6365] close(24) = -1 EBADF (Bad file descriptor) [pid 6365] close(25) = -1 EBADF (Bad file descriptor) [pid 6365] close(26) = -1 EBADF (Bad file descriptor) [pid 6365] close(27) = -1 EBADF (Bad file descriptor) [pid 6365] close(28) = -1 EBADF (Bad file descriptor) [pid 6365] close(29) = -1 EBADF (Bad file descriptor) [pid 6365] exit_group(0) = ? [pid 6367] <... futex resumed>) = ? [pid 6366] +++ exited with 0 +++ [pid 6367] +++ exited with 0 +++ [pid 6365] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1344, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./448", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./448/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./448/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./448") = 0 [pid 5019] mkdir("./449", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1347 ./strace-static-x86_64: Process 6368 attached [pid 6368] set_robust_list(0x555556a426a0, 24) = 0 [pid 6368] chdir("./449") = 0 [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6368] setpgid(0, 0) = 0 [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6368] write(3, "1000", 4) = 4 [pid 6368] close(3) = 0 [pid 6368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6368] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6368] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1348]}, 88) = 1348 [pid 6368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6368] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6369 attached [pid 6369] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6369] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6369] memfd_create("syzkaller", 0) = 3 [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 76.554295][ T6366] loop0: detected capacity change from 0 to 1024 [pid 6369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6369] munmap(0x7f15b9a45000, 524288) = 0 [pid 6369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6369] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6369] close(3) = 0 [pid 6369] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6369] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6369] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6369] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6369] ioctl(4, LOOP_CLR_FD) = 0 [pid 6369] close(4) = 0 [pid 6369] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6369] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6368] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6368] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1349]}, 88) = 1349 [pid 6368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6368] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6368] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6370 attached [pid 6370] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6370] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6369] <... mknodat resumed>) = 0 [pid 6370] mkdir(".", 0777 [pid 6369] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6370] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6369] <... futex resumed>) = 0 [pid 6369] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6370] <... mount resumed>) = 0 [pid 6370] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6370] chdir(".") = 0 [pid 6370] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6368] <... futex resumed>) = 0 [pid 6368] close(3) = 0 [pid 6370] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6368] close(4) = 0 [pid 6368] close(5) = -1 EBADF (Bad file descriptor) [pid 6368] close(6) = -1 EBADF (Bad file descriptor) [pid 6368] close(7) = -1 EBADF (Bad file descriptor) [pid 6368] close(8) = -1 EBADF (Bad file descriptor) [pid 6368] close(9) = -1 EBADF (Bad file descriptor) [pid 6368] close(10) = -1 EBADF (Bad file descriptor) [pid 6368] close(11) = -1 EBADF (Bad file descriptor) [pid 6368] close(12) = -1 EBADF (Bad file descriptor) [pid 6368] close(13) = -1 EBADF (Bad file descriptor) [pid 6368] close(14) = -1 EBADF (Bad file descriptor) [pid 6368] close(15) = -1 EBADF (Bad file descriptor) [pid 6368] close(16) = -1 EBADF (Bad file descriptor) [pid 6368] close(17) = -1 EBADF (Bad file descriptor) [pid 6368] close(18) = -1 EBADF (Bad file descriptor) [pid 6368] close(19) = -1 EBADF (Bad file descriptor) [pid 6368] close(20) = -1 EBADF (Bad file descriptor) [pid 6368] close(21) = -1 EBADF (Bad file descriptor) [pid 6368] close(22) = -1 EBADF (Bad file descriptor) [pid 6368] close(23) = -1 EBADF (Bad file descriptor) [pid 6368] close(24) = -1 EBADF (Bad file descriptor) [pid 6368] close(25) = -1 EBADF (Bad file descriptor) [pid 6368] close(26) = -1 EBADF (Bad file descriptor) [pid 6368] close(27) = -1 EBADF (Bad file descriptor) [pid 6368] close(28) = -1 EBADF (Bad file descriptor) [pid 6368] close(29) = -1 EBADF (Bad file descriptor) [pid 6368] exit_group(0) = ? [pid 6370] <... futex resumed>) = ? [pid 6369] <... futex resumed>) = ? [pid 6370] +++ exited with 0 +++ [pid 6369] +++ exited with 0 +++ [pid 6368] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1347, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./449", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./449/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./449/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./449") = 0 [pid 5019] mkdir("./450", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6371 attached [pid 6371] set_robust_list(0x555556a426a0, 24) = 0 [pid 6371] chdir("./450") = 0 [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6371] setpgid(0, 0) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1350 [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6371] write(3, "1000", 4) = 4 [pid 6371] close(3) = 0 [pid 6371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6371] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6371] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 76.616864][ T6369] loop0: detected capacity change from 0 to 1024 [pid 6371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1351]}, 88) = 1351 [pid 6371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6371] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6372 attached [pid 6372] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6372] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6372] memfd_create("syzkaller", 0) = 3 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6372] munmap(0x7f15b9a45000, 524288) = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6372] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6372] close(3) = 0 [pid 6372] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6372] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6372] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6372] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6372] ioctl(4, LOOP_CLR_FD) = 0 [pid 6372] close(4) = 0 [pid 6372] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6371] <... futex resumed>) = 0 [pid 6371] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6372] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6371] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1352]}, 88) = 1352 [pid 6371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6371] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6373 attached [pid 6373] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6373] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6373] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6373] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6372] <... mknodat resumed>) = 0 [pid 6373] <... mount resumed>) = 0 [pid 6373] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6373] chdir(".") = 0 [pid 6373] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = 0 [pid 6373] <... futex resumed>) = 1 [pid 6373] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6372] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] close(3) = 0 [pid 6371] close(4) = 0 [pid 6371] close(5) = -1 EBADF (Bad file descriptor) [pid 6371] close(6) = -1 EBADF (Bad file descriptor) [pid 6371] close(7) = -1 EBADF (Bad file descriptor) [pid 6371] close(8) = -1 EBADF (Bad file descriptor) [pid 6371] close(9) = -1 EBADF (Bad file descriptor) [pid 6371] close(10) = -1 EBADF (Bad file descriptor) [pid 6371] close(11) = -1 EBADF (Bad file descriptor) [pid 6371] close(12) = -1 EBADF (Bad file descriptor) [pid 6371] close(13) = -1 EBADF (Bad file descriptor) [pid 6371] close(14) = -1 EBADF (Bad file descriptor) [pid 6371] close(15) = -1 EBADF (Bad file descriptor) [pid 6371] close(16) = -1 EBADF (Bad file descriptor) [pid 6371] close(17) = -1 EBADF (Bad file descriptor) [pid 6371] close(18) = -1 EBADF (Bad file descriptor) [pid 6371] close(19) = -1 EBADF (Bad file descriptor) [pid 6371] close(20) = -1 EBADF (Bad file descriptor) [pid 6371] close(21) = -1 EBADF (Bad file descriptor) [pid 6371] close(22) = -1 EBADF (Bad file descriptor) [pid 6371] close(23) = -1 EBADF (Bad file descriptor) [pid 6371] close(24) = -1 EBADF (Bad file descriptor) [pid 6371] close(25) = -1 EBADF (Bad file descriptor) [pid 6371] close(26) = -1 EBADF (Bad file descriptor) [pid 6371] close(27) = -1 EBADF (Bad file descriptor) [pid 6371] close(28) = -1 EBADF (Bad file descriptor) [pid 6371] close(29) = -1 EBADF (Bad file descriptor) [pid 6371] exit_group(0) = ? [pid 6372] <... futex resumed>) = ? [pid 6373] <... futex resumed>) = ? [pid 6373] +++ exited with 0 +++ [pid 6372] +++ exited with 0 +++ [pid 6371] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1350, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./450", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./450/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./450/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./450") = 0 [pid 5019] mkdir("./451", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1353 ./strace-static-x86_64: Process 6374 attached [pid 6374] set_robust_list(0x555556a426a0, 24) = 0 [pid 6374] chdir("./451") = 0 [pid 6374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6374] setpgid(0, 0) = 0 [pid 6374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6374] write(3, "1000", 4) = 4 [pid 6374] close(3) = 0 [pid 6374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6374] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 76.686177][ T6372] loop0: detected capacity change from 0 to 1024 [pid 6374] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6374] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6375 attached [pid 6375] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6375] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6375] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] <... clone3 resumed> => {parent_tid=[1354]}, 88) = 1354 [pid 6374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6374] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6375] <... futex resumed>) = 0 [pid 6374] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6375] memfd_create("syzkaller", 0) = 3 [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6375] munmap(0x7f15b9a45000, 524288) = 0 [pid 6375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6375] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6375] close(3) = 0 [pid 6375] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6375] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6375] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6375] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6375] ioctl(4, LOOP_CLR_FD) = 0 [pid 6375] close(4) = 0 [pid 6375] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... futex resumed>) = 0 [pid 6374] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6374] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6374] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1355]}, 88) = 1355 [pid 6374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6374] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6374] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6375] <... futex resumed>) = 1 [pid 6375] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6376 attached [pid 6376] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6375] <... mknodat resumed>) = 0 [pid 6375] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6375] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] <... rseq resumed>) = 0 [pid 6376] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6376] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6376] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6376] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6376] chdir(".") = 0 [pid 6376] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6374] <... futex resumed>) = 0 [pid 6374] close(3) = 0 [pid 6374] close(4) = 0 [pid 6374] close(5) = -1 EBADF (Bad file descriptor) [pid 6374] close(6) = -1 EBADF (Bad file descriptor) [pid 6374] close(7) = -1 EBADF (Bad file descriptor) [pid 6374] close(8) = -1 EBADF (Bad file descriptor) [pid 6374] close(9) = -1 EBADF (Bad file descriptor) [pid 6374] close(10) = -1 EBADF (Bad file descriptor) [pid 6374] close(11) = -1 EBADF (Bad file descriptor) [pid 6374] close(12) = -1 EBADF (Bad file descriptor) [pid 6374] close(13) = -1 EBADF (Bad file descriptor) [pid 6374] close(14) = -1 EBADF (Bad file descriptor) [pid 6374] close(15) = -1 EBADF (Bad file descriptor) [pid 6374] close(16) = -1 EBADF (Bad file descriptor) [pid 6374] close(17) = -1 EBADF (Bad file descriptor) [pid 6374] close(18) = -1 EBADF (Bad file descriptor) [pid 6374] close(19 [pid 6376] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6374] close(20) = -1 EBADF (Bad file descriptor) [pid 6374] close(21) = -1 EBADF (Bad file descriptor) [pid 6374] close(22) = -1 EBADF (Bad file descriptor) [pid 6374] close(23) = -1 EBADF (Bad file descriptor) [pid 6374] close(24) = -1 EBADF (Bad file descriptor) [pid 6374] close(25) = -1 EBADF (Bad file descriptor) [pid 6374] close(26) = -1 EBADF (Bad file descriptor) [pid 6374] close(27) = -1 EBADF (Bad file descriptor) [pid 6374] close(28) = -1 EBADF (Bad file descriptor) [pid 6374] close(29) = -1 EBADF (Bad file descriptor) [pid 6374] exit_group(0 [pid 6375] <... futex resumed>) = ? [pid 6374] <... exit_group resumed>) = ? [pid 6376] <... futex resumed>) = ? [pid 6375] +++ exited with 0 +++ [pid 6376] +++ exited with 0 +++ [pid 6374] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1353, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./451", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./451/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./451/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./451") = 0 [pid 5019] mkdir("./452", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1356 ./strace-static-x86_64: Process 6377 attached [pid 6377] set_robust_list(0x555556a426a0, 24) = 0 [pid 6377] chdir("./452") = 0 [pid 6377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6377] setpgid(0, 0) = 0 [pid 6377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6377] write(3, "1000", 4) = 4 [pid 6377] close(3) = 0 [pid 6377] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6377] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6377] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6377] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6377] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1357]}, 88) = 1357 ./strace-static-x86_64: Process 6378 attached [pid 6378] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6378] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6378] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6377] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 76.759145][ T6375] loop0: detected capacity change from 0 to 1024 [pid 6378] <... futex resumed>) = 0 [pid 6377] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6378] memfd_create("syzkaller", 0) = 3 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6378] munmap(0x7f15b9a45000, 524288) = 0 [pid 6378] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6378] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6378] close(3) = 0 [pid 6378] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6378] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6378] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6378] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6378] ioctl(4, LOOP_CLR_FD) = 0 [pid 6378] close(4) = 0 [pid 6378] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6377] <... futex resumed>) = 0 [pid 6377] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6377] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6377] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6378] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6377] <... mprotect resumed>) = 0 [pid 6377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6379 attached [pid 6379] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6379] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6379] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6377] <... clone3 resumed> => {parent_tid=[1358]}, 88) = 1358 [pid 6377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6377] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6377] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6379] <... futex resumed>) = 0 [pid 6379] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6379] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6378] <... mknodat resumed>) = 0 [pid 6378] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6378] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] <... mount resumed>) = 0 [pid 6379] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6379] chdir(".") = 0 [pid 6379] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6377] <... futex resumed>) = 0 [pid 6377] close(3) = 0 [pid 6377] close(4) = 0 [pid 6377] close(5) = -1 EBADF (Bad file descriptor) [pid 6377] close(6) = -1 EBADF (Bad file descriptor) [pid 6377] close(7) = -1 EBADF (Bad file descriptor) [pid 6377] close(8) = -1 EBADF (Bad file descriptor) [pid 6377] close(9) = -1 EBADF (Bad file descriptor) [pid 6377] close(10) = -1 EBADF (Bad file descriptor) [pid 6377] close(11) = -1 EBADF (Bad file descriptor) [pid 6377] close(12) = -1 EBADF (Bad file descriptor) [pid 6377] close(13) = -1 EBADF (Bad file descriptor) [pid 6377] close(14) = -1 EBADF (Bad file descriptor) [pid 6377] close(15) = -1 EBADF (Bad file descriptor) [pid 6377] close(16) = -1 EBADF (Bad file descriptor) [pid 6377] close(17) = -1 EBADF (Bad file descriptor) [pid 6377] close(18) = -1 EBADF (Bad file descriptor) [pid 6377] close(19) = -1 EBADF (Bad file descriptor) [pid 6377] close(20) = -1 EBADF (Bad file descriptor) [pid 6377] close(21) = -1 EBADF (Bad file descriptor) [pid 6377] close(22) = -1 EBADF (Bad file descriptor) [pid 6377] close(23) = -1 EBADF (Bad file descriptor) [pid 6377] close(24) = -1 EBADF (Bad file descriptor) [pid 6377] close(25) = -1 EBADF (Bad file descriptor) [pid 6377] close(26) = -1 EBADF (Bad file descriptor) [pid 6377] close(27) = -1 EBADF (Bad file descriptor) [pid 6377] close(28) = -1 EBADF (Bad file descriptor) [pid 6377] close(29) = -1 EBADF (Bad file descriptor) [pid 6377] exit_group(0 [pid 6378] <... futex resumed>) = ? [pid 6377] <... exit_group resumed>) = ? [pid 6378] +++ exited with 0 +++ [pid 6379] +++ exited with 0 +++ [pid 6377] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1356, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./452", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./452/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./452/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./452") = 0 [pid 5019] mkdir("./453", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1359 [ 76.826734][ T6378] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6380 attached [pid 6380] set_robust_list(0x555556a426a0, 24) = 0 [pid 6380] chdir("./453") = 0 [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6380] setpgid(0, 0) = 0 [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6380] write(3, "1000", 4) = 4 [pid 6380] close(3) = 0 [pid 6380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6380] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6380] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6380] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1360]}, 88) = 1360 ./strace-static-x86_64: Process 6381 attached [pid 6381] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6381] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6380] rt_sigprocmask(SIG_SETMASK, [], [pid 6381] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6380] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6381] memfd_create("syzkaller", 0) = 3 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6381] munmap(0x7f15b9a45000, 524288) = 0 [pid 6381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6381] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6381] close(3) = 0 [pid 6381] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6381] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6381] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6381] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6381] ioctl(4, LOOP_CLR_FD) = 0 [pid 6381] close(4) = 0 [pid 6381] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6380] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6380] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6381] <... futex resumed>) = 1 [pid 6380] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6381] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6380] <... mprotect resumed>) = 0 [pid 6380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6382 attached => {parent_tid=[1361]}, 88) = 1361 [pid 6380] rt_sigprocmask(SIG_SETMASK, [], [pid 6381] <... mknodat resumed>) = 0 [pid 6380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6381] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6380] <... futex resumed>) = 0 [pid 6381] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6382] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6382] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6382] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6382] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6382] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6382] chdir(".") = 0 [pid 6382] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6380] close(3) = 0 [pid 6380] close(4) = 0 [pid 6380] close(5) = -1 EBADF (Bad file descriptor) [pid 6382] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6380] close(6) = -1 EBADF (Bad file descriptor) [pid 6380] close(7) = -1 EBADF (Bad file descriptor) [pid 6380] close(8) = -1 EBADF (Bad file descriptor) [pid 6380] close(9) = -1 EBADF (Bad file descriptor) [pid 6380] close(10) = -1 EBADF (Bad file descriptor) [pid 6380] close(11) = -1 EBADF (Bad file descriptor) [pid 6380] close(12) = -1 EBADF (Bad file descriptor) [pid 6380] close(13) = -1 EBADF (Bad file descriptor) [pid 6380] close(14) = -1 EBADF (Bad file descriptor) [pid 6380] close(15) = -1 EBADF (Bad file descriptor) [pid 6380] close(16) = -1 EBADF (Bad file descriptor) [pid 6380] close(17) = -1 EBADF (Bad file descriptor) [pid 6380] close(18) = -1 EBADF (Bad file descriptor) [pid 6380] close(19) = -1 EBADF (Bad file descriptor) [pid 6380] close(20) = -1 EBADF (Bad file descriptor) [pid 6380] close(21) = -1 EBADF (Bad file descriptor) [pid 6380] close(22) = -1 EBADF (Bad file descriptor) [pid 6380] close(23) = -1 EBADF (Bad file descriptor) [pid 6380] close(24) = -1 EBADF (Bad file descriptor) [pid 6380] close(25) = -1 EBADF (Bad file descriptor) [pid 6380] close(26) = -1 EBADF (Bad file descriptor) [pid 6380] close(27) = -1 EBADF (Bad file descriptor) [pid 6380] close(28) = -1 EBADF (Bad file descriptor) [pid 6380] close(29) = -1 EBADF (Bad file descriptor) [pid 6380] exit_group(0 [pid 6381] <... futex resumed>) = ? [pid 6380] <... exit_group resumed>) = ? [pid 6382] <... futex resumed>) = ? [pid 6381] +++ exited with 0 +++ [pid 6382] +++ exited with 0 +++ [pid 6380] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1359, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./453", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./453/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./453/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./453/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./453") = 0 [pid 5019] mkdir("./454", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1362 ./strace-static-x86_64: Process 6383 attached [pid 6383] set_robust_list(0x555556a426a0, 24) = 0 [pid 6383] chdir("./454") = 0 [pid 6383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6383] setpgid(0, 0) = 0 [pid 6383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6383] write(3, "1000", 4) = 4 [pid 6383] close(3) = 0 [pid 6383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6383] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6383] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6384 attached => {parent_tid=[1363]}, 88) = 1363 [pid 6384] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6384] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6384] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6383] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6384] <... futex resumed>) = 0 [pid 6384] memfd_create("syzkaller", 0 [ 76.907567][ T6381] loop0: detected capacity change from 0 to 1024 [pid 6383] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6384] <... memfd_create resumed>) = 3 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6384] munmap(0x7f15b9a45000, 524288) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6384] close(3) = 0 [pid 6384] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6384] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6384] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6384] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6384] ioctl(4, LOOP_CLR_FD) = 0 [pid 6384] close(4) = 0 [pid 6384] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6383] <... futex resumed>) = 0 [pid 6384] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6383] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6383] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1364]}, 88) = 1364 [pid 6383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6383] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6385 attached [pid 6385] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6385] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6385] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6385] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6385] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6385] chdir(".") = 0 [pid 6385] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... futex resumed>) = 0 [pid 6385] <... futex resumed>) = 1 [pid 6385] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... mknodat resumed>) = 0 [pid 6384] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] close(3) = 0 [pid 6383] close(4) = 0 [pid 6383] close(5) = -1 EBADF (Bad file descriptor) [pid 6383] close(6) = -1 EBADF (Bad file descriptor) [pid 6383] close(7) = -1 EBADF (Bad file descriptor) [pid 6383] close(8) = -1 EBADF (Bad file descriptor) [pid 6383] close(9) = -1 EBADF (Bad file descriptor) [pid 6383] close(10) = -1 EBADF (Bad file descriptor) [pid 6383] close(11) = -1 EBADF (Bad file descriptor) [pid 6383] close(12) = -1 EBADF (Bad file descriptor) [pid 6383] close(13) = -1 EBADF (Bad file descriptor) [pid 6383] close(14) = -1 EBADF (Bad file descriptor) [pid 6383] close(15 [pid 6384] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6383] close(16) = -1 EBADF (Bad file descriptor) [pid 6383] close(17) = -1 EBADF (Bad file descriptor) [pid 6383] close(18) = -1 EBADF (Bad file descriptor) [pid 6383] close(19) = -1 EBADF (Bad file descriptor) [pid 6383] close(20) = -1 EBADF (Bad file descriptor) [pid 6383] close(21) = -1 EBADF (Bad file descriptor) [pid 6383] close(22) = -1 EBADF (Bad file descriptor) [pid 6383] close(23) = -1 EBADF (Bad file descriptor) [pid 6383] close(24) = -1 EBADF (Bad file descriptor) [pid 6383] close(25) = -1 EBADF (Bad file descriptor) [pid 6383] close(26) = -1 EBADF (Bad file descriptor) [pid 6383] close(27) = -1 EBADF (Bad file descriptor) [pid 6383] close(28) = -1 EBADF (Bad file descriptor) [pid 6383] close(29) = -1 EBADF (Bad file descriptor) [pid 6383] exit_group(0) = ? [pid 6384] <... futex resumed>) = ? [pid 6385] <... futex resumed>) = ? [pid 6385] +++ exited with 0 +++ [pid 6384] +++ exited with 0 +++ [pid 6383] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./454", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./454/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./454/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./454") = 0 [pid 5019] mkdir("./455", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1365 ./strace-static-x86_64: Process 6386 attached [pid 6386] set_robust_list(0x555556a426a0, 24) = 0 [pid 6386] chdir("./455") = 0 [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6386] setpgid(0, 0) = 0 [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6386] write(3, "1000", 4) = 4 [pid 6386] close(3) = 0 [pid 6386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6386] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6386] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6386] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1366]}, 88) = 1366 [pid 6386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6386] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6386] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6387 attached [pid 6387] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6387] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6387] memfd_create("syzkaller", 0) = 3 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 76.974787][ T6384] loop0: detected capacity change from 0 to 1024 [pid 6387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6387] munmap(0x7f15b9a45000, 524288) = 0 [pid 6387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6387] close(3) = 0 [pid 6387] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6387] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6387] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6387] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6387] ioctl(4, LOOP_CLR_FD) = 0 [pid 6387] close(4) = 0 [pid 6387] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... futex resumed>) = 0 [pid 6386] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6386] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6386] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1367]}, 88) = 1367 [pid 6386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6386] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6386] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6387] <... futex resumed>) = 1 [pid 6387] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6387] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6387] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6388 attached [pid 6388] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6388] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6388] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6388] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6388] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6388] chdir(".") = 0 [pid 6388] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... futex resumed>) = 0 [pid 6386] close(3) = 0 [pid 6386] close(4) = 0 [pid 6386] close(5) = -1 EBADF (Bad file descriptor) [pid 6386] close(6) = -1 EBADF (Bad file descriptor) [pid 6386] close(7) = -1 EBADF (Bad file descriptor) [pid 6386] close(8) = -1 EBADF (Bad file descriptor) [pid 6386] close(9) = -1 EBADF (Bad file descriptor) [pid 6386] close(10) = -1 EBADF (Bad file descriptor) [pid 6386] close(11) = -1 EBADF (Bad file descriptor) [pid 6386] close(12) = -1 EBADF (Bad file descriptor) [pid 6386] close(13) = -1 EBADF (Bad file descriptor) [pid 6386] close(14) = -1 EBADF (Bad file descriptor) [pid 6386] close(15) = -1 EBADF (Bad file descriptor) [pid 6386] close(16) = -1 EBADF (Bad file descriptor) [pid 6386] close(17) = -1 EBADF (Bad file descriptor) [pid 6386] close(18) = -1 EBADF (Bad file descriptor) [pid 6386] close(19) = -1 EBADF (Bad file descriptor) [pid 6386] close(20) = -1 EBADF (Bad file descriptor) [pid 6386] close(21) = -1 EBADF (Bad file descriptor) [pid 6386] close(22) = -1 EBADF (Bad file descriptor) [pid 6386] close(23) = -1 EBADF (Bad file descriptor) [pid 6386] close(24) = -1 EBADF (Bad file descriptor) [pid 6386] close(25) = -1 EBADF (Bad file descriptor) [pid 6386] close(26) = -1 EBADF (Bad file descriptor) [pid 6386] close(27) = -1 EBADF (Bad file descriptor) [pid 6386] close(28) = -1 EBADF (Bad file descriptor) [pid 6386] close(29 [pid 6388] <... futex resumed>) = 1 [pid 6386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6388] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] exit_group(0 [pid 6388] <... futex resumed>) = ? [pid 6387] <... futex resumed>) = ? [pid 6386] <... exit_group resumed>) = ? [pid 6388] +++ exited with 0 +++ [pid 6387] +++ exited with 0 +++ [pid 6386] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1365, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./455", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./455/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./455/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./455") = 0 [pid 5019] mkdir("./456", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1368 ./strace-static-x86_64: Process 6389 attached [pid 6389] set_robust_list(0x555556a426a0, 24) = 0 [pid 6389] chdir("./456") = 0 [pid 6389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6389] setpgid(0, 0) = 0 [pid 6389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6389] write(3, "1000", 4) = 4 [pid 6389] close(3) = 0 [pid 6389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6389] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6389] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6389] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6389] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1369]}, 88) = 1369 [pid 6389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6389] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6389] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6390 attached [pid 6390] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6390] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6390] memfd_create("syzkaller", 0) = 3 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 77.038797][ T6387] loop0: detected capacity change from 0 to 1024 [pid 6390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6390] munmap(0x7f15b9a45000, 524288) = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6390] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6390] close(3) = 0 [pid 6390] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6390] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6390] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6390] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6390] ioctl(4, LOOP_CLR_FD) = 0 [pid 6390] close(4) = 0 [pid 6390] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6389] <... futex resumed>) = 0 [pid 6389] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6389] <... futex resumed>) = 0 [pid 6389] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6389] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1370]}, 88) = 1370 [pid 6389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6389] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6389] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6390] <... mknodat resumed>) = 0 [pid 6390] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6390] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6391 attached [pid 6391] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6391] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6391] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6391] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6391] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6391] chdir(".") = 0 [pid 6391] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6389] <... futex resumed>) = 0 [pid 6389] close(3) = 0 [pid 6389] close(4) = 0 [pid 6389] close(5) = -1 EBADF (Bad file descriptor) [pid 6389] close(6) = -1 EBADF (Bad file descriptor) [pid 6389] close(7) = -1 EBADF (Bad file descriptor) [pid 6389] close(8 [pid 6391] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6389] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6389] close(9) = -1 EBADF (Bad file descriptor) [pid 6389] close(10) = -1 EBADF (Bad file descriptor) [pid 6389] close(11) = -1 EBADF (Bad file descriptor) [pid 6389] close(12) = -1 EBADF (Bad file descriptor) [pid 6389] close(13) = -1 EBADF (Bad file descriptor) [pid 6389] close(14) = -1 EBADF (Bad file descriptor) [pid 6389] close(15) = -1 EBADF (Bad file descriptor) [pid 6389] close(16) = -1 EBADF (Bad file descriptor) [pid 6389] close(17) = -1 EBADF (Bad file descriptor) [pid 6389] close(18) = -1 EBADF (Bad file descriptor) [pid 6389] close(19) = -1 EBADF (Bad file descriptor) [pid 6389] close(20) = -1 EBADF (Bad file descriptor) [pid 6389] close(21) = -1 EBADF (Bad file descriptor) [pid 6389] close(22) = -1 EBADF (Bad file descriptor) [pid 6389] close(23) = -1 EBADF (Bad file descriptor) [pid 6389] close(24) = -1 EBADF (Bad file descriptor) [pid 6389] close(25) = -1 EBADF (Bad file descriptor) [pid 6389] close(26) = -1 EBADF (Bad file descriptor) [pid 6389] close(27) = -1 EBADF (Bad file descriptor) [pid 6389] close(28) = -1 EBADF (Bad file descriptor) [pid 6389] close(29) = -1 EBADF (Bad file descriptor) [pid 6389] exit_group(0 [pid 6391] <... futex resumed>) = ? [pid 6390] <... futex resumed>) = ? [pid 6389] <... exit_group resumed>) = ? [pid 6391] +++ exited with 0 +++ [pid 6390] +++ exited with 0 +++ [pid 6389] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1368, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./456", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./456/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./456/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./456") = 0 [pid 5019] mkdir("./457", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1371 ./strace-static-x86_64: Process 6392 attached [pid 6392] set_robust_list(0x555556a426a0, 24) = 0 [ 77.103499][ T6390] loop0: detected capacity change from 0 to 1024 [pid 6392] chdir("./457") = 0 [pid 6392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6392] setpgid(0, 0) = 0 [pid 6392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6392] write(3, "1000", 4) = 4 [pid 6392] close(3) = 0 [pid 6392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6392] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6392] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6392] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6393 attached => {parent_tid=[1372]}, 88) = 1372 [pid 6393] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6393] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6393] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6392] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6393] <... futex resumed>) = 0 [pid 6392] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6393] memfd_create("syzkaller", 0) = 3 [pid 6393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6393] munmap(0x7f15b9a45000, 524288) = 0 [pid 6393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6393] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6393] close(3) = 0 [pid 6393] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6393] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6393] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6393] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6393] ioctl(4, LOOP_CLR_FD) = 0 [pid 6393] close(4) = 0 [pid 6393] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6392] <... futex resumed>) = 0 [pid 6392] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6392] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6392] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1373]}, 88) = 1373 [pid 6392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6392] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6392] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6394 attached [pid 6394] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6394] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6394] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6394] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6393] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6394] <... mount resumed>) = 0 [pid 6394] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6394] chdir(".") = 0 [pid 6394] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... futex resumed>) = 0 [pid 6394] <... futex resumed>) = 1 [pid 6394] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] <... mknodat resumed>) = 0 [pid 6393] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6393] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6392] close(3) = 0 [pid 6392] close(4) = 0 [pid 6392] close(5) = -1 EBADF (Bad file descriptor) [pid 6392] close(6) = -1 EBADF (Bad file descriptor) [pid 6392] close(7) = -1 EBADF (Bad file descriptor) [pid 6392] close(8) = -1 EBADF (Bad file descriptor) [pid 6392] close(9) = -1 EBADF (Bad file descriptor) [pid 6392] close(10) = -1 EBADF (Bad file descriptor) [pid 6392] close(11) = -1 EBADF (Bad file descriptor) [pid 6392] close(12) = -1 EBADF (Bad file descriptor) [pid 6392] close(13) = -1 EBADF (Bad file descriptor) [pid 6392] close(14) = -1 EBADF (Bad file descriptor) [pid 6392] close(15) = -1 EBADF (Bad file descriptor) [pid 6392] close(16) = -1 EBADF (Bad file descriptor) [pid 6392] close(17) = -1 EBADF (Bad file descriptor) [pid 6392] close(18) = -1 EBADF (Bad file descriptor) [pid 6392] close(19) = -1 EBADF (Bad file descriptor) [pid 6392] close(20) = -1 EBADF (Bad file descriptor) [pid 6392] close(21) = -1 EBADF (Bad file descriptor) [pid 6392] close(22) = -1 EBADF (Bad file descriptor) [pid 6392] close(23) = -1 EBADF (Bad file descriptor) [pid 6392] close(24) = -1 EBADF (Bad file descriptor) [pid 6392] close(25) = -1 EBADF (Bad file descriptor) [pid 6392] close(26) = -1 EBADF (Bad file descriptor) [pid 6392] close(27) = -1 EBADF (Bad file descriptor) [pid 6392] close(28) = -1 EBADF (Bad file descriptor) [pid 6392] close(29) = -1 EBADF (Bad file descriptor) [pid 6392] exit_group(0 [pid 6394] <... futex resumed>) = ? [pid 6393] <... futex resumed>) = ? [pid 6392] <... exit_group resumed>) = ? [pid 6393] +++ exited with 0 +++ [pid 6394] +++ exited with 0 +++ [pid 6392] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1371, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./457", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./457/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./457/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./457") = 0 [pid 5019] mkdir("./458", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1374 ./strace-static-x86_64: Process 6395 attached [pid 6395] set_robust_list(0x555556a426a0, 24) = 0 [pid 6395] chdir("./458") = 0 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6395] setpgid(0, 0) = 0 [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6395] write(3, "1000", 4) = 4 [pid 6395] close(3) = 0 [pid 6395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6395] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6395] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1375]}, 88) = 1375 [pid 6395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6395] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6396 attached [pid 6396] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6396] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6396] memfd_create("syzkaller", 0) = 3 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 77.193719][ T6393] loop0: detected capacity change from 0 to 1024 [pid 6396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6396] munmap(0x7f15b9a45000, 524288) = 0 [pid 6396] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6396] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6396] close(3) = 0 [pid 6396] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6396] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6396] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6396] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6396] ioctl(4, LOOP_CLR_FD) = 0 [pid 6396] close(4) = 0 [pid 6396] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6395] <... futex resumed>) = 0 [pid 6396] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6395] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6395] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6397 attached => {parent_tid=[1376]}, 88) = 1376 [pid 6397] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6395] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6397] <... rseq resumed>) = 0 [pid 6397] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6397] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6397] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6396] <... mknodat resumed>) = 0 [pid 6396] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6396] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6397] <... mount resumed>) = 0 [pid 6397] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6397] chdir(".") = 0 [pid 6397] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... futex resumed>) = 0 [pid 6395] close(3) = 0 [pid 6395] close(4) = 0 [pid 6395] close(5) = -1 EBADF (Bad file descriptor) [pid 6395] close(6) = -1 EBADF (Bad file descriptor) [pid 6395] close(7) = -1 EBADF (Bad file descriptor) [pid 6395] close(8) = -1 EBADF (Bad file descriptor) [pid 6395] close(9) = -1 EBADF (Bad file descriptor) [pid 6395] close(10) = -1 EBADF (Bad file descriptor) [pid 6395] close(11) = -1 EBADF (Bad file descriptor) [pid 6395] close(12) = -1 EBADF (Bad file descriptor) [pid 6395] close(13) = -1 EBADF (Bad file descriptor) [pid 6395] close(14) = -1 EBADF (Bad file descriptor) [pid 6395] close(15) = -1 EBADF (Bad file descriptor) [pid 6395] close(16) = -1 EBADF (Bad file descriptor) [pid 6395] close(17) = -1 EBADF (Bad file descriptor) [pid 6395] close(18) = -1 EBADF (Bad file descriptor) [pid 6395] close(19) = -1 EBADF (Bad file descriptor) [pid 6395] close(20) = -1 EBADF (Bad file descriptor) [pid 6395] close(21) = -1 EBADF (Bad file descriptor) [pid 6395] close(22) = -1 EBADF (Bad file descriptor) [pid 6395] close(23) = -1 EBADF (Bad file descriptor) [pid 6395] close(24) = -1 EBADF (Bad file descriptor) [pid 6395] close(25) = -1 EBADF (Bad file descriptor) [pid 6395] close(26) = -1 EBADF (Bad file descriptor) [pid 6395] close(27) = -1 EBADF (Bad file descriptor) [pid 6395] close(28) = -1 EBADF (Bad file descriptor) [pid 6395] close(29) = -1 EBADF (Bad file descriptor) [pid 6395] exit_group(0 [pid 6396] <... futex resumed>) = ? [pid 6395] <... exit_group resumed>) = ? [pid 6396] +++ exited with 0 +++ [pid 6397] <... futex resumed>) = ? [pid 6397] +++ exited with 0 +++ [pid 6395] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1374, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./458", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./458/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./458/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./458") = 0 [pid 5019] mkdir("./459", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1377 ./strace-static-x86_64: Process 6398 attached [ 77.261239][ T6396] loop0: detected capacity change from 0 to 1024 [pid 6398] set_robust_list(0x555556a426a0, 24) = 0 [pid 6398] chdir("./459") = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6398] setpgid(0, 0) = 0 [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6398] write(3, "1000", 4) = 4 [pid 6398] close(3) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6398] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6398] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6399 attached [pid 6399] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6399] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6399] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... clone3 resumed> => {parent_tid=[1378]}, 88) = 1378 [pid 6398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6398] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6399] <... futex resumed>) = 0 [pid 6399] memfd_create("syzkaller", 0 [pid 6398] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6399] <... memfd_create resumed>) = 3 [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6399] munmap(0x7f15b9a45000, 524288) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6399] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6399] close(3) = 0 [pid 6399] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6399] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6399] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6399] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6399] ioctl(4, LOOP_CLR_FD) = 0 [pid 6399] close(4) = 0 [pid 6399] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6399] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6399] <... futex resumed>) = 0 [pid 6399] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6398] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6398] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6399] <... mknodat resumed>) = 0 [pid 6399] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] <... clone3 resumed> => {parent_tid=[1379]}, 88) = 1379 [pid 6398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6398] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = 0 [pid 6398] <... futex resumed>) = 0 [pid 6398] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6400 attached [pid 6400] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6400] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6400] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6400] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6399] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6400] <... mount resumed>) = 0 [pid 6400] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6400] chdir(".") = 0 [pid 6400] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6398] <... futex resumed>) = 0 [pid 6398] close(3) = 0 [pid 6398] close(4) = 0 [pid 6398] close(5) = -1 EBADF (Bad file descriptor) [pid 6398] close(6) = -1 EBADF (Bad file descriptor) [pid 6398] close(7) = -1 EBADF (Bad file descriptor) [pid 6398] close(8) = -1 EBADF (Bad file descriptor) [pid 6398] close(9) = -1 EBADF (Bad file descriptor) [pid 6398] close(10) = -1 EBADF (Bad file descriptor) [pid 6398] close(11) = -1 EBADF (Bad file descriptor) [pid 6398] close(12) = -1 EBADF (Bad file descriptor) [pid 6398] close(13) = -1 EBADF (Bad file descriptor) [pid 6398] close(14) = -1 EBADF (Bad file descriptor) [pid 6398] close(15) = -1 EBADF (Bad file descriptor) [pid 6398] close(16) = -1 EBADF (Bad file descriptor) [pid 6398] close(17) = -1 EBADF (Bad file descriptor) [pid 6398] close(18) = -1 EBADF (Bad file descriptor) [pid 6398] close(19) = -1 EBADF (Bad file descriptor) [pid 6398] close(20) = -1 EBADF (Bad file descriptor) [pid 6398] close(21) = -1 EBADF (Bad file descriptor) [pid 6398] close(22) = -1 EBADF (Bad file descriptor) [pid 6398] close(23) = -1 EBADF (Bad file descriptor) [pid 6398] close(24) = -1 EBADF (Bad file descriptor) [pid 6400] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] close(25) = -1 EBADF (Bad file descriptor) [pid 6398] close(26) = -1 EBADF (Bad file descriptor) [pid 6398] close(27) = -1 EBADF (Bad file descriptor) [pid 6398] close(28) = -1 EBADF (Bad file descriptor) [pid 6398] close(29) = -1 EBADF (Bad file descriptor) [pid 6398] exit_group(0) = ? [pid 6400] <... futex resumed>) = ? [pid 6399] <... futex resumed>) = ? [pid 6399] +++ exited with 0 +++ [pid 6400] +++ exited with 0 +++ [pid 6398] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1377, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./459", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./459/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./459/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./459") = 0 [pid 5019] mkdir("./460", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1380 ./strace-static-x86_64: Process 6401 attached [pid 6401] set_robust_list(0x555556a426a0, 24) = 0 [pid 6401] chdir("./460") = 0 [pid 6401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6401] setpgid(0, 0) = 0 [pid 6401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6401] write(3, "1000", 4) = 4 [pid 6401] close(3) = 0 [pid 6401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6401] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6401] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1381]}, 88) = 1381 [pid 6401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6401] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6402 attached [pid 6402] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6402] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 77.341326][ T6399] loop0: detected capacity change from 0 to 1024 [pid 6402] memfd_create("syzkaller", 0) = 3 [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6402] munmap(0x7f15b9a45000, 524288) = 0 [pid 6402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6402] close(3) = 0 [pid 6402] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6402] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6402] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6402] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6402] ioctl(4, LOOP_CLR_FD) = 0 [pid 6402] close(4) = 0 [pid 6402] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6401] <... futex resumed>) = 0 [pid 6401] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6402] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6401] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6401] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1382]}, 88) = 1382 [pid 6401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6401] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6403 attached [pid 6403] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6403] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6403] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6403] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6402] <... mknodat resumed>) = 0 [pid 6402] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6402] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6403] <... mount resumed>) = 0 [pid 6403] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6403] chdir(".") = 0 [pid 6403] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6401] <... futex resumed>) = 0 [pid 6401] close(3) = 0 [pid 6401] close(4) = 0 [pid 6403] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6401] close(5) = -1 EBADF (Bad file descriptor) [pid 6401] close(6) = -1 EBADF (Bad file descriptor) [pid 6401] close(7) = -1 EBADF (Bad file descriptor) [pid 6401] close(8) = -1 EBADF (Bad file descriptor) [pid 6401] close(9) = -1 EBADF (Bad file descriptor) [pid 6401] close(10) = -1 EBADF (Bad file descriptor) [pid 6401] close(11) = -1 EBADF (Bad file descriptor) [pid 6401] close(12) = -1 EBADF (Bad file descriptor) [pid 6401] close(13) = -1 EBADF (Bad file descriptor) [pid 6401] close(14) = -1 EBADF (Bad file descriptor) [pid 6401] close(15) = -1 EBADF (Bad file descriptor) [pid 6401] close(16) = -1 EBADF (Bad file descriptor) [pid 6401] close(17) = -1 EBADF (Bad file descriptor) [pid 6401] close(18) = -1 EBADF (Bad file descriptor) [pid 6401] close(19) = -1 EBADF (Bad file descriptor) [pid 6401] close(20) = -1 EBADF (Bad file descriptor) [pid 6401] close(21) = -1 EBADF (Bad file descriptor) [pid 6401] close(22) = -1 EBADF (Bad file descriptor) [pid 6401] close(23) = -1 EBADF (Bad file descriptor) [pid 6401] close(24) = -1 EBADF (Bad file descriptor) [pid 6401] close(25) = -1 EBADF (Bad file descriptor) [pid 6401] close(26) = -1 EBADF (Bad file descriptor) [pid 6401] close(27) = -1 EBADF (Bad file descriptor) [pid 6401] close(28) = -1 EBADF (Bad file descriptor) [pid 6401] close(29) = -1 EBADF (Bad file descriptor) [pid 6401] exit_group(0 [pid 6402] <... futex resumed>) = ? [pid 6401] <... exit_group resumed>) = ? [pid 6402] +++ exited with 0 +++ [pid 6403] <... futex resumed>) = ? [pid 6403] +++ exited with 0 +++ [pid 6401] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1380, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./460", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./460/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./460/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./460") = 0 [pid 5019] mkdir("./461", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1383 ./strace-static-x86_64: Process 6404 attached [pid 6404] set_robust_list(0x555556a426a0, 24) = 0 [pid 6404] chdir("./461") = 0 [pid 6404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6404] setpgid(0, 0) = 0 [pid 6404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 77.408307][ T6402] loop0: detected capacity change from 0 to 1024 [pid 6404] write(3, "1000", 4) = 4 [pid 6404] close(3) = 0 [pid 6404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6404] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6404] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6405 attached => {parent_tid=[1384]}, 88) = 1384 [pid 6405] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6405] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6405] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6404] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6405] memfd_create("syzkaller", 0) = 3 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6404] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6405] <... mmap resumed>) = 0x7f15b9a45000 [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6405] munmap(0x7f15b9a45000, 524288) = 0 [pid 6405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6405] close(3) = 0 [pid 6405] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6405] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6405] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6405] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6405] ioctl(4, LOOP_CLR_FD) = 0 [pid 6405] close(4) = 0 [pid 6405] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... futex resumed>) = 0 [pid 6404] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6404] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1385]}, 88) = 1385 [pid 6404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6404] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6405] <... futex resumed>) = 1 [pid 6405] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6406 attached [pid 6406] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6406] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6406] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6406] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6405] <... mknodat resumed>) = 0 [pid 6405] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6405] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6406] <... mount resumed>) = 0 [pid 6406] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6406] chdir(".") = 0 [pid 6406] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6404] close(3) = 0 [pid 6404] close(4) = 0 [pid 6404] close(5) = -1 EBADF (Bad file descriptor) [pid 6404] close(6) = -1 EBADF (Bad file descriptor) [pid 6404] close(7) = -1 EBADF (Bad file descriptor) [pid 6406] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] close(8) = -1 EBADF (Bad file descriptor) [pid 6404] close(9) = -1 EBADF (Bad file descriptor) [pid 6404] close(10) = -1 EBADF (Bad file descriptor) [pid 6404] close(11) = -1 EBADF (Bad file descriptor) [pid 6404] close(12) = -1 EBADF (Bad file descriptor) [pid 6404] close(13) = -1 EBADF (Bad file descriptor) [pid 6404] close(14) = -1 EBADF (Bad file descriptor) [pid 6404] close(15) = -1 EBADF (Bad file descriptor) [pid 6404] close(16) = -1 EBADF (Bad file descriptor) [pid 6404] close(17) = -1 EBADF (Bad file descriptor) [pid 6404] close(18) = -1 EBADF (Bad file descriptor) [pid 6404] close(19) = -1 EBADF (Bad file descriptor) [pid 6404] close(20) = -1 EBADF (Bad file descriptor) [pid 6404] close(21) = -1 EBADF (Bad file descriptor) [pid 6404] close(22) = -1 EBADF (Bad file descriptor) [pid 6404] close(23) = -1 EBADF (Bad file descriptor) [pid 6404] close(24) = -1 EBADF (Bad file descriptor) [pid 6404] close(25) = -1 EBADF (Bad file descriptor) [pid 6404] close(26) = -1 EBADF (Bad file descriptor) [pid 6404] close(27) = -1 EBADF (Bad file descriptor) [pid 6404] close(28) = -1 EBADF (Bad file descriptor) [pid 6404] close(29) = -1 EBADF (Bad file descriptor) [pid 6404] exit_group(0 [pid 6405] <... futex resumed>) = ? [pid 6404] <... exit_group resumed>) = ? [pid 6406] <... futex resumed>) = ? [pid 6405] +++ exited with 0 +++ [pid 6406] +++ exited with 0 +++ [pid 6404] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1383, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./461", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./461/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./461/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./461") = 0 [pid 5019] mkdir("./462", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 77.486549][ T6405] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1386 ./strace-static-x86_64: Process 6407 attached [pid 6407] set_robust_list(0x555556a426a0, 24) = 0 [pid 6407] chdir("./462") = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6407] setpgid(0, 0) = 0 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6407] write(3, "1000", 4) = 4 [pid 6407] close(3) = 0 [pid 6407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6407] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6407] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6407] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6408 attached [pid 6408] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6407] <... clone3 resumed> => {parent_tid=[1387]}, 88) = 1387 [pid 6408] set_robust_list(0x7f15c1e659a0, 24 [pid 6407] rt_sigprocmask(SIG_SETMASK, [], [pid 6408] <... set_robust_list resumed>) = 0 [pid 6408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6408] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6407] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6407] <... futex resumed>) = 0 [pid 6408] memfd_create("syzkaller", 0 [pid 6407] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6408] <... memfd_create resumed>) = 3 [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6408] munmap(0x7f15b9a45000, 524288) = 0 [pid 6408] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6408] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6408] close(3) = 0 [pid 6408] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6408] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6408] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6408] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6408] ioctl(4, LOOP_CLR_FD) = 0 [pid 6408] close(4) = 0 [pid 6408] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6407] <... futex resumed>) = 0 [pid 6408] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6407] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6408] <... futex resumed>) = 0 [pid 6407] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6407] <... futex resumed>) = 0 [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6408] <... mknodat resumed>) = 0 [pid 6407] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6408] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6407] <... mprotect resumed>) = 0 [pid 6408] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6409 attached => {parent_tid=[1388]}, 88) = 1388 [pid 6407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6407] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6407] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6409] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6409] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6409] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6409] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6409] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6409] chdir(".") = 0 [pid 6409] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6407] <... futex resumed>) = 0 [pid 6407] close(3) = 0 [pid 6407] close(4) = 0 [pid 6407] close(5) = -1 EBADF (Bad file descriptor) [pid 6407] close(6) = -1 EBADF (Bad file descriptor) [pid 6407] close(7 [pid 6409] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6407] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6407] close(8) = -1 EBADF (Bad file descriptor) [pid 6407] close(9) = -1 EBADF (Bad file descriptor) [pid 6407] close(10) = -1 EBADF (Bad file descriptor) [pid 6407] close(11) = -1 EBADF (Bad file descriptor) [pid 6407] close(12) = -1 EBADF (Bad file descriptor) [pid 6407] close(13) = -1 EBADF (Bad file descriptor) [pid 6407] close(14) = -1 EBADF (Bad file descriptor) [pid 6407] close(15) = -1 EBADF (Bad file descriptor) [pid 6407] close(16) = -1 EBADF (Bad file descriptor) [pid 6407] close(17) = -1 EBADF (Bad file descriptor) [pid 6407] close(18) = -1 EBADF (Bad file descriptor) [pid 6407] close(19) = -1 EBADF (Bad file descriptor) [pid 6407] close(20) = -1 EBADF (Bad file descriptor) [pid 6407] close(21) = -1 EBADF (Bad file descriptor) [pid 6407] close(22) = -1 EBADF (Bad file descriptor) [pid 6407] close(23) = -1 EBADF (Bad file descriptor) [pid 6407] close(24) = -1 EBADF (Bad file descriptor) [pid 6407] close(25) = -1 EBADF (Bad file descriptor) [pid 6407] close(26) = -1 EBADF (Bad file descriptor) [pid 6407] close(27) = -1 EBADF (Bad file descriptor) [pid 6407] close(28) = -1 EBADF (Bad file descriptor) [pid 6407] close(29) = -1 EBADF (Bad file descriptor) [pid 6407] exit_group(0 [pid 6408] <... futex resumed>) = ? [pid 6407] <... exit_group resumed>) = ? [pid 6409] <... futex resumed>) = ? [pid 6408] +++ exited with 0 +++ [pid 6409] +++ exited with 0 +++ [pid 6407] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1386, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./462", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./462/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./462/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./462/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./462") = 0 [pid 5019] mkdir("./463", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 77.569371][ T6408] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1389 ./strace-static-x86_64: Process 6410 attached [pid 6410] set_robust_list(0x555556a426a0, 24) = 0 [pid 6410] chdir("./463") = 0 [pid 6410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6410] setpgid(0, 0) = 0 [pid 6410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6410] write(3, "1000", 4) = 4 [pid 6410] close(3) = 0 [pid 6410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6410] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6410] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6410] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6411 attached [pid 6411] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6411] set_robust_list(0x7f15c1e659a0, 24 [pid 6410] <... clone3 resumed> => {parent_tid=[1390]}, 88) = 1390 [pid 6411] <... set_robust_list resumed>) = 0 [pid 6411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6410] rt_sigprocmask(SIG_SETMASK, [], [pid 6411] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6410] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 1 [pid 6410] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6411] memfd_create("syzkaller", 0) = 3 [pid 6411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6411] munmap(0x7f15b9a45000, 524288) = 0 [pid 6411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6411] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6411] close(3) = 0 [pid 6411] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6411] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6411] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6411] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6411] ioctl(4, LOOP_CLR_FD) = 0 [pid 6411] close(4) = 0 [pid 6411] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 6410] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... futex resumed>) = 1 [pid 6410] <... futex resumed>) = 0 [pid 6411] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6410] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6410] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1391]}, 88) = 1391 [pid 6410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6410] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6410] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6412 attached [pid 6412] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6412] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6412] rt_sigprocmask(SIG_SETMASK, [], [pid 6411] <... mknodat resumed>) = 0 [pid 6412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6412] mkdir(".", 0777 [pid 6411] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6411] <... futex resumed>) = 0 [pid 6412] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6411] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... mount resumed>) = 0 [pid 6412] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6412] chdir(".") = 0 [pid 6412] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6410] <... futex resumed>) = 0 [pid 6410] close(3) = 0 [pid 6410] close(4) = 0 [pid 6412] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6410] close(5) = -1 EBADF (Bad file descriptor) [pid 6410] close(6) = -1 EBADF (Bad file descriptor) [pid 6410] close(7) = -1 EBADF (Bad file descriptor) [pid 6410] close(8) = -1 EBADF (Bad file descriptor) [pid 6410] close(9) = -1 EBADF (Bad file descriptor) [pid 6410] close(10) = -1 EBADF (Bad file descriptor) [pid 6410] close(11) = -1 EBADF (Bad file descriptor) [pid 6410] close(12) = -1 EBADF (Bad file descriptor) [pid 6410] close(13) = -1 EBADF (Bad file descriptor) [pid 6410] close(14) = -1 EBADF (Bad file descriptor) [pid 6410] close(15) = -1 EBADF (Bad file descriptor) [pid 6410] close(16) = -1 EBADF (Bad file descriptor) [pid 6410] close(17) = -1 EBADF (Bad file descriptor) [pid 6410] close(18) = -1 EBADF (Bad file descriptor) [pid 6410] close(19) = -1 EBADF (Bad file descriptor) [pid 6410] close(20) = -1 EBADF (Bad file descriptor) [pid 6410] close(21) = -1 EBADF (Bad file descriptor) [pid 6410] close(22) = -1 EBADF (Bad file descriptor) [pid 6410] close(23) = -1 EBADF (Bad file descriptor) [pid 6410] close(24) = -1 EBADF (Bad file descriptor) [pid 6410] close(25) = -1 EBADF (Bad file descriptor) [pid 6410] close(26) = -1 EBADF (Bad file descriptor) [pid 6410] close(27) = -1 EBADF (Bad file descriptor) [pid 6410] close(28) = -1 EBADF (Bad file descriptor) [pid 6410] close(29) = -1 EBADF (Bad file descriptor) [pid 6410] exit_group(0 [pid 6411] <... futex resumed>) = ? [pid 6410] <... exit_group resumed>) = ? [pid 6412] <... futex resumed>) = ? [pid 6411] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ [pid 6410] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1389, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./463", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./463/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./463/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./463/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./463") = 0 [pid 5019] mkdir("./464", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 77.649596][ T6411] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1392 ./strace-static-x86_64: Process 6413 attached [pid 6413] set_robust_list(0x555556a426a0, 24) = 0 [pid 6413] chdir("./464") = 0 [pid 6413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6413] setpgid(0, 0) = 0 [pid 6413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6413] write(3, "1000", 4) = 4 [pid 6413] close(3) = 0 [pid 6413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6413] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6413] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1393]}, 88) = 1393 [pid 6413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6413] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6414 attached [pid 6414] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6414] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6414] memfd_create("syzkaller", 0) = 3 [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6414] munmap(0x7f15b9a45000, 524288) = 0 [pid 6414] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6414] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6414] close(3) = 0 [pid 6414] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6414] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6414] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6414] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6414] ioctl(4, LOOP_CLR_FD) = 0 [pid 6414] close(4) = 0 [pid 6414] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] <... futex resumed>) = 0 [pid 6413] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6413] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6414] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6413] <... mprotect resumed>) = 0 [pid 6413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1394]}, 88) = 1394 [pid 6413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6413] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6413] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6415 attached [pid 6415] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6414] <... mknodat resumed>) = 0 [pid 6415] <... rseq resumed>) = 0 [pid 6415] set_robust_list(0x7f15b9ac49a0, 24 [pid 6414] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... set_robust_list resumed>) = 0 [pid 6414] <... futex resumed>) = 0 [pid 6415] rt_sigprocmask(SIG_SETMASK, [], [pid 6414] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6415] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6415] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6415] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6415] chdir(".") = 0 [pid 6415] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] <... futex resumed>) = 0 [pid 6413] close(3) = 0 [pid 6413] close(4) = 0 [pid 6413] close(5) = -1 EBADF (Bad file descriptor) [pid 6413] close(6 [pid 6415] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6413] close(7) = -1 EBADF (Bad file descriptor) [pid 6413] close(8) = -1 EBADF (Bad file descriptor) [pid 6413] close(9) = -1 EBADF (Bad file descriptor) [pid 6413] close(10) = -1 EBADF (Bad file descriptor) [pid 6413] close(11) = -1 EBADF (Bad file descriptor) [pid 6413] close(12) = -1 EBADF (Bad file descriptor) [pid 6413] close(13) = -1 EBADF (Bad file descriptor) [pid 6413] close(14) = -1 EBADF (Bad file descriptor) [pid 6413] close(15) = -1 EBADF (Bad file descriptor) [pid 6413] close(16) = -1 EBADF (Bad file descriptor) [pid 6413] close(17) = -1 EBADF (Bad file descriptor) [pid 6413] close(18) = -1 EBADF (Bad file descriptor) [pid 6413] close(19) = -1 EBADF (Bad file descriptor) [pid 6413] close(20) = -1 EBADF (Bad file descriptor) [pid 6413] close(21) = -1 EBADF (Bad file descriptor) [pid 6413] close(22) = -1 EBADF (Bad file descriptor) [pid 6413] close(23) = -1 EBADF (Bad file descriptor) [pid 6413] close(24) = -1 EBADF (Bad file descriptor) [pid 6413] close(25) = -1 EBADF (Bad file descriptor) [pid 6413] close(26) = -1 EBADF (Bad file descriptor) [pid 6413] close(27) = -1 EBADF (Bad file descriptor) [pid 6413] close(28) = -1 EBADF (Bad file descriptor) [pid 6413] close(29) = -1 EBADF (Bad file descriptor) [pid 6413] exit_group(0) = ? [pid 6414] <... futex resumed>) = ? [pid 6414] +++ exited with 0 +++ [pid 6415] <... futex resumed>) = ? [pid 6415] +++ exited with 0 +++ [pid 6413] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1392, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./464", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./464/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./464/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./464") = 0 [pid 5019] mkdir("./465", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6416 attached [ 77.727514][ T6414] loop0: detected capacity change from 0 to 1024 [pid 6416] set_robust_list(0x555556a426a0, 24) = 0 [pid 6416] chdir("./465" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1395 [pid 6416] <... chdir resumed>) = 0 [pid 6416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6416] setpgid(0, 0) = 0 [pid 6416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6416] write(3, "1000", 4) = 4 [pid 6416] close(3) = 0 [pid 6416] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6416] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6416] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6416] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6416] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1396]}, 88) = 1396 [pid 6416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6416] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6416] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6417 attached [pid 6417] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6417] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6417] memfd_create("syzkaller", 0) = 3 [pid 6417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6417] munmap(0x7f15b9a45000, 524288) = 0 [pid 6417] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6417] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6417] close(3) = 0 [pid 6417] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6417] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6417] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6417] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6417] ioctl(4, LOOP_CLR_FD) = 0 [pid 6417] close(4) = 0 [pid 6417] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... futex resumed>) = 0 [pid 6417] <... futex resumed>) = 1 [pid 6416] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6416] <... futex resumed>) = 0 [pid 6416] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6416] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6416] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1397]}, 88) = 1397 ./strace-static-x86_64: Process 6418 attached [pid 6418] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6418] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6418] rt_sigprocmask(SIG_SETMASK, [], [pid 6416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6416] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6416] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6418] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6418] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6417] <... mknodat resumed>) = 0 [pid 6417] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6417] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6418] <... mount resumed>) = 0 [pid 6418] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6418] chdir(".") = 0 [pid 6418] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... futex resumed>) = 0 [pid 6416] close(3) = 0 [pid 6416] close(4) = 0 [pid 6416] close(5) = -1 EBADF (Bad file descriptor) [pid 6416] close(6) = -1 EBADF (Bad file descriptor) [pid 6416] close(7) = -1 EBADF (Bad file descriptor) [pid 6416] close(8) = -1 EBADF (Bad file descriptor) [pid 6416] close(9) = -1 EBADF (Bad file descriptor) [pid 6416] close(10) = -1 EBADF (Bad file descriptor) [pid 6416] close(11) = -1 EBADF (Bad file descriptor) [pid 6416] close(12) = -1 EBADF (Bad file descriptor) [pid 6416] close(13) = -1 EBADF (Bad file descriptor) [pid 6416] close(14) = -1 EBADF (Bad file descriptor) [pid 6416] close(15) = -1 EBADF (Bad file descriptor) [pid 6416] close(16) = -1 EBADF (Bad file descriptor) [pid 6416] close(17) = -1 EBADF (Bad file descriptor) [pid 6416] close(18) = -1 EBADF (Bad file descriptor) [pid 6416] close(19) = -1 EBADF (Bad file descriptor) [pid 6416] close(20) = -1 EBADF (Bad file descriptor) [pid 6416] close(21) = -1 EBADF (Bad file descriptor) [pid 6416] close(22) = -1 EBADF (Bad file descriptor) [pid 6416] close(23) = -1 EBADF (Bad file descriptor) [pid 6416] close(24) = -1 EBADF (Bad file descriptor) [pid 6416] close(25) = -1 EBADF (Bad file descriptor) [pid 6416] close(26) = -1 EBADF (Bad file descriptor) [pid 6416] close(27) = -1 EBADF (Bad file descriptor) [pid 6416] close(28) = -1 EBADF (Bad file descriptor) [pid 6416] close(29) = -1 EBADF (Bad file descriptor) [pid 6416] exit_group(0 [pid 6417] <... futex resumed>) = ? [pid 6416] <... exit_group resumed>) = ? [pid 6417] +++ exited with 0 +++ [pid 6418] <... futex resumed>) = ? [pid 6418] +++ exited with 0 +++ [pid 6416] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1395, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./465", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./465/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./465/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./465") = 0 [pid 5019] mkdir("./466", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6419 attached [pid 6419] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1398 [pid 6419] <... set_robust_list resumed>) = 0 [pid 6419] chdir("./466") = 0 [pid 6419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6419] setpgid(0, 0) = 0 [pid 6419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6419] write(3, "1000", 4) = 4 [pid 6419] close(3) = 0 [pid 6419] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6419] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6419] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6419] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6419] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6419] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6419] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1399]}, 88) = 1399 [pid 6419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6419] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6419] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6420 attached [pid 6420] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6420] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6420] memfd_create("syzkaller", 0) = 3 [pid 6420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 77.802940][ T6417] loop0: detected capacity change from 0 to 1024 [pid 6420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6420] munmap(0x7f15b9a45000, 524288) = 0 [pid 6420] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6420] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6420] close(3) = 0 [pid 6420] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6420] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6420] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6420] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6420] ioctl(4, LOOP_CLR_FD) = 0 [pid 6420] close(4) = 0 [pid 6420] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] <... futex resumed>) = 0 [pid 6419] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6419] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6419] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6419] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6419] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6421 attached [pid 6421] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6419] <... clone3 resumed> => {parent_tid=[1400]}, 88) = 1400 [pid 6421] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6421] rt_sigprocmask(SIG_SETMASK, [], [pid 6419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6419] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6421] mkdir(".", 0777 [pid 6419] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6420] <... futex resumed>) = 1 [pid 6421] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6420] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6421] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6420] <... mknodat resumed>) = 0 [pid 6420] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6420] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] <... mount resumed>) = 0 [pid 6421] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6421] chdir(".") = 0 [pid 6421] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] <... futex resumed>) = 0 [pid 6419] close(3) = 0 [pid 6421] <... futex resumed>) = 1 [pid 6419] close(4) = 0 [pid 6419] close(5) = -1 EBADF (Bad file descriptor) [pid 6419] close(6) = -1 EBADF (Bad file descriptor) [pid 6419] close(7) = -1 EBADF (Bad file descriptor) [pid 6419] close(8 [pid 6421] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6419] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6419] close(9) = -1 EBADF (Bad file descriptor) [pid 6419] close(10) = -1 EBADF (Bad file descriptor) [pid 6419] close(11) = -1 EBADF (Bad file descriptor) [pid 6419] close(12) = -1 EBADF (Bad file descriptor) [pid 6419] close(13) = -1 EBADF (Bad file descriptor) [pid 6419] close(14) = -1 EBADF (Bad file descriptor) [pid 6419] close(15) = -1 EBADF (Bad file descriptor) [pid 6419] close(16) = -1 EBADF (Bad file descriptor) [pid 6419] close(17) = -1 EBADF (Bad file descriptor) [pid 6419] close(18) = -1 EBADF (Bad file descriptor) [pid 6419] close(19) = -1 EBADF (Bad file descriptor) [pid 6419] close(20) = -1 EBADF (Bad file descriptor) [pid 6419] close(21) = -1 EBADF (Bad file descriptor) [pid 6419] close(22) = -1 EBADF (Bad file descriptor) [pid 6419] close(23) = -1 EBADF (Bad file descriptor) [pid 6419] close(24) = -1 EBADF (Bad file descriptor) [pid 6419] close(25) = -1 EBADF (Bad file descriptor) [pid 6419] close(26) = -1 EBADF (Bad file descriptor) [pid 6419] close(27) = -1 EBADF (Bad file descriptor) [pid 6419] close(28) = -1 EBADF (Bad file descriptor) [pid 6419] close(29) = -1 EBADF (Bad file descriptor) [pid 6419] exit_group(0 [pid 6421] <... futex resumed>) = ? [pid 6420] <... futex resumed>) = ? [pid 6419] <... exit_group resumed>) = ? [pid 6421] +++ exited with 0 +++ [pid 6420] +++ exited with 0 +++ [pid 6419] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1398, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./466", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 77.869762][ T6420] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./466/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./466/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./466") = 0 [pid 5019] mkdir("./467", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1401 ./strace-static-x86_64: Process 6422 attached [pid 6422] set_robust_list(0x555556a426a0, 24) = 0 [pid 6422] chdir("./467") = 0 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6422] setpgid(0, 0) = 0 [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6422] write(3, "1000", 4) = 4 [pid 6422] close(3) = 0 [pid 6422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6422] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6422] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6423 attached [pid 6423] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6423] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6423] rt_sigprocmask(SIG_SETMASK, [], [pid 6422] <... clone3 resumed> => {parent_tid=[1402]}, 88) = 1402 [pid 6423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6423] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6422] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6423] <... futex resumed>) = 0 [pid 6423] memfd_create("syzkaller", 0) = 3 [pid 6423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6423] munmap(0x7f15b9a45000, 524288) = 0 [pid 6423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6423] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6423] close(3) = 0 [pid 6423] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6423] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6423] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6423] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6423] ioctl(4, LOOP_CLR_FD) = 0 [pid 6423] close(4) = 0 [pid 6423] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = 0 [pid 6422] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6422] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1403]}, 88) = 1403 [pid 6422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6422] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6422] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6423] <... futex resumed>) = 1 [pid 6423] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6423] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6423] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6424 attached [pid 6424] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6424] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6424] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6424] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6424] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6424] chdir(".") = 0 [pid 6424] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6422] close(3) = 0 [pid 6422] close(4) = 0 [pid 6422] close(5) = -1 EBADF (Bad file descriptor) [pid 6422] close(6) = -1 EBADF (Bad file descriptor) [pid 6422] close(7) = -1 EBADF (Bad file descriptor) [pid 6422] close(8) = -1 EBADF (Bad file descriptor) [pid 6422] close(9) = -1 EBADF (Bad file descriptor) [pid 6422] close(10) = -1 EBADF (Bad file descriptor) [pid 6422] close(11) = -1 EBADF (Bad file descriptor) [pid 6422] close(12) = -1 EBADF (Bad file descriptor) [pid 6422] close(13) = -1 EBADF (Bad file descriptor) [pid 6422] close(14) = -1 EBADF (Bad file descriptor) [pid 6422] close(15) = -1 EBADF (Bad file descriptor) [pid 6422] close(16) = -1 EBADF (Bad file descriptor) [pid 6422] close(17) = -1 EBADF (Bad file descriptor) [pid 6422] close(18) = -1 EBADF (Bad file descriptor) [pid 6422] close(19) = -1 EBADF (Bad file descriptor) [pid 6422] close(20) = -1 EBADF (Bad file descriptor) [pid 6422] close(21) = -1 EBADF (Bad file descriptor) [pid 6422] close(22) = -1 EBADF (Bad file descriptor) [pid 6422] close(23) = -1 EBADF (Bad file descriptor) [pid 6422] close(24) = -1 EBADF (Bad file descriptor) [pid 6422] close(25) = -1 EBADF (Bad file descriptor) [pid 6422] close(26) = -1 EBADF (Bad file descriptor) [pid 6422] close(27) = -1 EBADF (Bad file descriptor) [pid 6422] close(28) = -1 EBADF (Bad file descriptor) [pid 6422] close(29) = -1 EBADF (Bad file descriptor) [pid 6422] exit_group(0 [pid 6423] <... futex resumed>) = ? [pid 6422] <... exit_group resumed>) = ? [pid 6423] +++ exited with 0 +++ [pid 6424] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1401, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./467", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./467/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./467/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./467") = 0 [pid 5019] mkdir("./468", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1404 ./strace-static-x86_64: Process 6425 attached [pid 6425] set_robust_list(0x555556a426a0, 24) = 0 [pid 6425] chdir("./468") = 0 [pid 6425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6425] setpgid(0, 0) = 0 [pid 6425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6425] write(3, "1000", 4) = 4 [pid 6425] close(3) = 0 [ 77.958899][ T6423] loop0: detected capacity change from 0 to 1024 [pid 6425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6425] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6425] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1405]}, 88) = 1405 [pid 6425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6425] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6426 attached [pid 6426] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6426] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6426] memfd_create("syzkaller", 0) = 3 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6426] munmap(0x7f15b9a45000, 524288) = 0 [pid 6426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6426] close(3) = 0 [pid 6426] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6426] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6426] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6426] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6426] ioctl(4, LOOP_CLR_FD) = 0 [pid 6426] close(4) = 0 [pid 6426] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = 0 [pid 6425] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6425] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1406]}, 88) = 1406 [pid 6425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6425] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6425] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6426] <... futex resumed>) = 1 [pid 6426] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6427 attached [pid 6427] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6427] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6427] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6427] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6426] <... mknodat resumed>) = 0 [pid 6426] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6426] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] <... mount resumed>) = 0 [pid 6427] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6427] chdir(".") = 0 [pid 6427] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = 0 [pid 6425] close(3) = 0 [pid 6425] close(4) = 0 [pid 6425] close(5) = -1 EBADF (Bad file descriptor) [pid 6425] close(6) = -1 EBADF (Bad file descriptor) [pid 6425] close(7) = -1 EBADF (Bad file descriptor) [pid 6425] close(8) = -1 EBADF (Bad file descriptor) [pid 6425] close(9) = -1 EBADF (Bad file descriptor) [pid 6425] close(10) = -1 EBADF (Bad file descriptor) [pid 6425] close(11) = -1 EBADF (Bad file descriptor) [pid 6425] close(12) = -1 EBADF (Bad file descriptor) [pid 6425] close(13) = -1 EBADF (Bad file descriptor) [pid 6425] close(14) = -1 EBADF (Bad file descriptor) [pid 6425] close(15) = -1 EBADF (Bad file descriptor) [pid 6425] close(16) = -1 EBADF (Bad file descriptor) [pid 6425] close(17) = -1 EBADF (Bad file descriptor) [pid 6425] close(18) = -1 EBADF (Bad file descriptor) [pid 6425] close(19) = -1 EBADF (Bad file descriptor) [pid 6425] close(20) = -1 EBADF (Bad file descriptor) [pid 6425] close(21) = -1 EBADF (Bad file descriptor) [pid 6425] close(22) = -1 EBADF (Bad file descriptor) [pid 6425] close(23) = -1 EBADF (Bad file descriptor) [pid 6425] close(24) = -1 EBADF (Bad file descriptor) [pid 6425] close(25) = -1 EBADF (Bad file descriptor) [pid 6425] close(26) = -1 EBADF (Bad file descriptor) [pid 6425] close(27) = -1 EBADF (Bad file descriptor) [pid 6425] close(28) = -1 EBADF (Bad file descriptor) [pid 6425] close(29) = -1 EBADF (Bad file descriptor) [pid 6425] exit_group(0) = ? [pid 6426] <... futex resumed>) = ? [pid 6426] +++ exited with 0 +++ [pid 6427] <... futex resumed>) = ? [pid 6427] +++ exited with 0 +++ [pid 6425] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1404, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./468", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./468/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./468/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./468") = 0 [pid 5019] mkdir("./469", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1407 ./strace-static-x86_64: Process 6428 attached [pid 6428] set_robust_list(0x555556a426a0, 24) = 0 [pid 6428] chdir("./469") = 0 [pid 6428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6428] setpgid(0, 0) = 0 [pid 6428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6428] write(3, "1000", 4) = 4 [pid 6428] close(3) = 0 [ 78.039858][ T6426] loop0: detected capacity change from 0 to 1024 [pid 6428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6428] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6428] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6429 attached => {parent_tid=[1408]}, 88) = 1408 [pid 6429] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6429] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6429] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6428] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6429] memfd_create("syzkaller", 0 [pid 6428] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6429] <... memfd_create resumed>) = 3 [pid 6429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6429] munmap(0x7f15b9a45000, 524288) = 0 [pid 6429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6429] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6429] close(3) = 0 [pid 6429] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6429] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6429] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6429] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6429] ioctl(4, LOOP_CLR_FD) = 0 [pid 6429] close(4) = 0 [pid 6429] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6428] <... futex resumed>) = 0 [pid 6428] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6429] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6428] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6429] <... mknodat resumed>) = 0 [pid 6428] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6429] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6430 attached [pid 6430] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6430] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6430] rt_sigprocmask(SIG_SETMASK, [], [pid 6428] <... clone3 resumed> => {parent_tid=[1409]}, 88) = 1409 [pid 6430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6429] <... futex resumed>) = 0 [pid 6428] rt_sigprocmask(SIG_SETMASK, [], [pid 6429] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6428] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6428] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6430] <... futex resumed>) = 0 [pid 6430] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6430] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6430] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6430] chdir(".") = 0 [pid 6430] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6428] <... futex resumed>) = 0 [pid 6428] close(3) = 0 [pid 6428] close(4) = 0 [pid 6428] close(5) = -1 EBADF (Bad file descriptor) [pid 6428] close(6) = -1 EBADF (Bad file descriptor) [pid 6428] close(7) = -1 EBADF (Bad file descriptor) [pid 6428] close(8) = -1 EBADF (Bad file descriptor) [pid 6430] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6428] close(9) = -1 EBADF (Bad file descriptor) [pid 6428] close(10) = -1 EBADF (Bad file descriptor) [pid 6428] close(11) = -1 EBADF (Bad file descriptor) [pid 6428] close(12) = -1 EBADF (Bad file descriptor) [pid 6428] close(13) = -1 EBADF (Bad file descriptor) [pid 6428] close(14) = -1 EBADF (Bad file descriptor) [pid 6428] close(15) = -1 EBADF (Bad file descriptor) [pid 6428] close(16) = -1 EBADF (Bad file descriptor) [pid 6428] close(17) = -1 EBADF (Bad file descriptor) [pid 6428] close(18) = -1 EBADF (Bad file descriptor) [pid 6428] close(19) = -1 EBADF (Bad file descriptor) [pid 6428] close(20) = -1 EBADF (Bad file descriptor) [pid 6428] close(21) = -1 EBADF (Bad file descriptor) [pid 6428] close(22) = -1 EBADF (Bad file descriptor) [pid 6428] close(23) = -1 EBADF (Bad file descriptor) [pid 6428] close(24) = -1 EBADF (Bad file descriptor) [pid 6428] close(25) = -1 EBADF (Bad file descriptor) [pid 6428] close(26) = -1 EBADF (Bad file descriptor) [pid 6428] close(27) = -1 EBADF (Bad file descriptor) [pid 6428] close(28) = -1 EBADF (Bad file descriptor) [pid 6428] close(29) = -1 EBADF (Bad file descriptor) [pid 6428] exit_group(0) = ? [pid 6429] <... futex resumed>) = ? [pid 6430] <... futex resumed>) = ? [pid 6429] +++ exited with 0 +++ [pid 6430] +++ exited with 0 +++ [pid 6428] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1407, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./469", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./469/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./469/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./469") = 0 [pid 5019] mkdir("./470", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 78.113443][ T6429] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1410 ./strace-static-x86_64: Process 6431 attached [pid 6431] set_robust_list(0x555556a426a0, 24) = 0 [pid 6431] chdir("./470") = 0 [pid 6431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6431] setpgid(0, 0) = 0 [pid 6431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6431] write(3, "1000", 4) = 4 [pid 6431] close(3) = 0 [pid 6431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6431] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6431] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6431] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6432 attached => {parent_tid=[1411]}, 88) = 1411 [pid 6431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6431] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6431] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6432] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6432] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6432] memfd_create("syzkaller", 0) = 3 [pid 6432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6432] munmap(0x7f15b9a45000, 524288) = 0 [pid 6432] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6432] close(3) = 0 [pid 6432] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6432] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6432] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6432] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6432] ioctl(4, LOOP_CLR_FD) = 0 [pid 6432] close(4) = 0 [pid 6432] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6431] <... futex resumed>) = 0 [pid 6431] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6432] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6431] <... futex resumed>) = 0 [pid 6431] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6432] <... mknodat resumed>) = 0 [pid 6431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6431] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6432] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... mprotect resumed>) = 0 [pid 6432] <... futex resumed>) = 0 [pid 6431] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6432] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6431] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6433 attached [pid 6433] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6433] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6433] rt_sigprocmask(SIG_SETMASK, [], [pid 6431] <... clone3 resumed> => {parent_tid=[1412]}, 88) = 1412 [pid 6431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6431] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] mkdir(".", 0777 [pid 6431] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6433] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6433] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6433] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6433] chdir(".") = 0 [pid 6433] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6431] <... futex resumed>) = 0 [pid 6431] close(3) = 0 [pid 6431] close(4) = 0 [pid 6431] close(5) = -1 EBADF (Bad file descriptor) [pid 6431] close(6) = -1 EBADF (Bad file descriptor) [pid 6433] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6431] close(7) = -1 EBADF (Bad file descriptor) [pid 6431] close(8) = -1 EBADF (Bad file descriptor) [pid 6431] close(9) = -1 EBADF (Bad file descriptor) [pid 6431] close(10) = -1 EBADF (Bad file descriptor) [pid 6431] close(11) = -1 EBADF (Bad file descriptor) [pid 6431] close(12) = -1 EBADF (Bad file descriptor) [pid 6431] close(13) = -1 EBADF (Bad file descriptor) [pid 6431] close(14) = -1 EBADF (Bad file descriptor) [pid 6431] close(15) = -1 EBADF (Bad file descriptor) [pid 6431] close(16) = -1 EBADF (Bad file descriptor) [pid 6431] close(17) = -1 EBADF (Bad file descriptor) [pid 6431] close(18) = -1 EBADF (Bad file descriptor) [pid 6431] close(19) = -1 EBADF (Bad file descriptor) [pid 6431] close(20) = -1 EBADF (Bad file descriptor) [pid 6431] close(21) = -1 EBADF (Bad file descriptor) [pid 6431] close(22) = -1 EBADF (Bad file descriptor) [pid 6431] close(23) = -1 EBADF (Bad file descriptor) [pid 6431] close(24) = -1 EBADF (Bad file descriptor) [pid 6431] close(25) = -1 EBADF (Bad file descriptor) [pid 6431] close(26) = -1 EBADF (Bad file descriptor) [pid 6431] close(27) = -1 EBADF (Bad file descriptor) [pid 6431] close(28) = -1 EBADF (Bad file descriptor) [pid 6431] close(29) = -1 EBADF (Bad file descriptor) [pid 6431] exit_group(0) = ? [pid 6432] <... futex resumed>) = ? [pid 6433] <... futex resumed>) = ? [pid 6432] +++ exited with 0 +++ [pid 6433] +++ exited with 0 +++ [pid 6431] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1410, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./470", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 78.195937][ T6432] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "./470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./470/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./470/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./470/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./470") = 0 [pid 5019] mkdir("./471", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1413 ./strace-static-x86_64: Process 6434 attached [pid 6434] set_robust_list(0x555556a426a0, 24) = 0 [pid 6434] chdir("./471") = 0 [pid 6434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6434] setpgid(0, 0) = 0 [pid 6434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6434] write(3, "1000", 4) = 4 [pid 6434] close(3) = 0 [pid 6434] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6434] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6434] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1414]}, 88) = 1414 [pid 6434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6434] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6435 attached [pid 6435] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6435] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6435] memfd_create("syzkaller", 0) = 3 [pid 6435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6435] munmap(0x7f15b9a45000, 524288) = 0 [pid 6435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6435] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6435] close(3) = 0 [pid 6435] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6435] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6435] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6435] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6435] ioctl(4, LOOP_CLR_FD) = 0 [pid 6435] close(4) = 0 [pid 6435] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6435] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6434] <... futex resumed>) = 0 [pid 6434] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6434] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6434] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1415]}, 88) = 1415 [pid 6434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6436 attached [pid 6434] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6435] <... futex resumed>) = 0 [pid 6435] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6436] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6436] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6436] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6436] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6435] <... mknodat resumed>) = 0 [pid 6435] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6435] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] <... mount resumed>) = 0 [pid 6436] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6436] chdir(".") = 0 [pid 6436] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6434] <... futex resumed>) = 0 [pid 6434] close(3) = 0 [pid 6434] close(4) = 0 [pid 6434] close(5) = -1 EBADF (Bad file descriptor) [pid 6434] close(6) = -1 EBADF (Bad file descriptor) [pid 6434] close(7) = -1 EBADF (Bad file descriptor) [pid 6434] close(8 [pid 6436] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6434] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6434] close(9) = -1 EBADF (Bad file descriptor) [pid 6434] close(10) = -1 EBADF (Bad file descriptor) [pid 6434] close(11) = -1 EBADF (Bad file descriptor) [pid 6434] close(12) = -1 EBADF (Bad file descriptor) [pid 6434] close(13) = -1 EBADF (Bad file descriptor) [pid 6434] close(14) = -1 EBADF (Bad file descriptor) [pid 6434] close(15) = -1 EBADF (Bad file descriptor) [pid 6434] close(16) = -1 EBADF (Bad file descriptor) [pid 6434] close(17) = -1 EBADF (Bad file descriptor) [pid 6434] close(18) = -1 EBADF (Bad file descriptor) [pid 6434] close(19) = -1 EBADF (Bad file descriptor) [pid 6434] close(20) = -1 EBADF (Bad file descriptor) [pid 6434] close(21) = -1 EBADF (Bad file descriptor) [pid 6434] close(22) = -1 EBADF (Bad file descriptor) [pid 6434] close(23) = -1 EBADF (Bad file descriptor) [pid 6434] close(24) = -1 EBADF (Bad file descriptor) [pid 6434] close(25) = -1 EBADF (Bad file descriptor) [pid 6434] close(26) = -1 EBADF (Bad file descriptor) [pid 6434] close(27) = -1 EBADF (Bad file descriptor) [pid 6434] close(28) = -1 EBADF (Bad file descriptor) [pid 6434] close(29) = -1 EBADF (Bad file descriptor) [pid 6434] exit_group(0 [pid 6436] <... futex resumed>) = ? [pid 6435] <... futex resumed>) = ? [pid 6434] <... exit_group resumed>) = ? [pid 6436] +++ exited with 0 +++ [pid 6435] +++ exited with 0 +++ [pid 6434] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1413, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./471", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./471/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./471/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./471") = 0 [pid 5019] mkdir("./472", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1416 ./strace-static-x86_64: Process 6437 attached [pid 6437] set_robust_list(0x555556a426a0, 24) = 0 [pid 6437] chdir("./472") = 0 [pid 6437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 78.291809][ T6435] loop0: detected capacity change from 0 to 1024 [pid 6437] setpgid(0, 0) = 0 [pid 6437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6437] write(3, "1000", 4) = 4 [pid 6437] close(3) = 0 [pid 6437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6437] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6437] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6437] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1417]}, 88) = 1417 [pid 6437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6437] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6438 attached ) = 0 [pid 6437] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6438] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6438] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6438] memfd_create("syzkaller", 0) = 3 [pid 6438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6438] munmap(0x7f15b9a45000, 524288) = 0 [pid 6438] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6438] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6438] close(3) = 0 [pid 6438] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6438] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6438] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6438] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6438] ioctl(4, LOOP_CLR_FD) = 0 [pid 6438] close(4) = 0 [pid 6438] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6437] <... futex resumed>) = 0 [pid 6437] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6438] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6437] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6437] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1418]}, 88) = 1418 [pid 6437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6437] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6437] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6439 attached [pid 6439] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6439] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6439] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6439] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6438] <... mknodat resumed>) = 0 [pid 6438] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] <... mount resumed>) = 0 [pid 6439] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6438] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] chdir(".") = 0 [pid 6439] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] <... futex resumed>) = 0 [pid 6437] close(3) = 0 [pid 6437] close(4) = 0 [pid 6437] close(5) = -1 EBADF (Bad file descriptor) [pid 6437] close(6) = -1 EBADF (Bad file descriptor) [pid 6437] close(7) = -1 EBADF (Bad file descriptor) [pid 6437] close(8) = -1 EBADF (Bad file descriptor) [pid 6437] close(9) = -1 EBADF (Bad file descriptor) [pid 6437] close(10) = -1 EBADF (Bad file descriptor) [pid 6437] close(11) = -1 EBADF (Bad file descriptor) [pid 6437] close(12) = -1 EBADF (Bad file descriptor) [pid 6437] close(13) = -1 EBADF (Bad file descriptor) [pid 6437] close(14) = -1 EBADF (Bad file descriptor) [pid 6437] close(15) = -1 EBADF (Bad file descriptor) [pid 6437] close(16) = -1 EBADF (Bad file descriptor) [pid 6437] close(17) = -1 EBADF (Bad file descriptor) [pid 6437] close(18) = -1 EBADF (Bad file descriptor) [pid 6437] close(19) = -1 EBADF (Bad file descriptor) [pid 6437] close(20) = -1 EBADF (Bad file descriptor) [pid 6437] close(21) = -1 EBADF (Bad file descriptor) [pid 6437] close(22) = -1 EBADF (Bad file descriptor) [pid 6437] close(23) = -1 EBADF (Bad file descriptor) [pid 6437] close(24 [pid 6439] <... futex resumed>) = 1 [pid 6437] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6439] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6437] close(25) = -1 EBADF (Bad file descriptor) [pid 6437] close(26) = -1 EBADF (Bad file descriptor) [pid 6437] close(27) = -1 EBADF (Bad file descriptor) [pid 6437] close(28) = -1 EBADF (Bad file descriptor) [pid 6437] close(29) = -1 EBADF (Bad file descriptor) [pid 6437] exit_group(0 [pid 6439] <... futex resumed>) = ? [pid 6438] <... futex resumed>) = ? [pid 6437] <... exit_group resumed>) = ? [pid 6439] +++ exited with 0 +++ [pid 6438] +++ exited with 0 +++ [pid 6437] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1416, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./472", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./472/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./472/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./472") = 0 [pid 5019] mkdir("./473", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1419 ./strace-static-x86_64: Process 6440 attached [pid 6440] set_robust_list(0x555556a426a0, 24) = 0 [pid 6440] chdir("./473") = 0 [pid 6440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6440] setpgid(0, 0) = 0 [pid 6440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6440] write(3, "1000", 4) = 4 [pid 6440] close(3) = 0 [pid 6440] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6440] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6440] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6440] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 78.370271][ T6438] loop0: detected capacity change from 0 to 1024 [pid 6440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6441 attached [pid 6441] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6441] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6441] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] <... clone3 resumed> => {parent_tid=[1420]}, 88) = 1420 [pid 6440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6440] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6441] <... futex resumed>) = 0 [pid 6441] memfd_create("syzkaller", 0) = 3 [pid 6441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6440] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6441] <... mmap resumed>) = 0x7f15b9a45000 [pid 6441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6441] munmap(0x7f15b9a45000, 524288) = 0 [pid 6441] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6441] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6441] close(3) = 0 [pid 6441] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6441] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6441] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6441] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6441] ioctl(4, LOOP_CLR_FD) = 0 [pid 6441] close(4) = 0 [pid 6441] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] <... futex resumed>) = 0 [pid 6440] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6440] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6440] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1421]}, 88) = 1421 [pid 6440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6440] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6440] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6441] <... futex resumed>) = 1 [pid 6441] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6441] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6441] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6442 attached [pid 6442] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6442] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6442] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6442] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6442] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6442] chdir(".") = 0 [pid 6442] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] <... futex resumed>) = 0 [pid 6440] close(3) = 0 [pid 6440] close(4) = 0 [pid 6440] close(5) = -1 EBADF (Bad file descriptor) [pid 6440] close(6) = -1 EBADF (Bad file descriptor) [pid 6440] close(7) = -1 EBADF (Bad file descriptor) [pid 6440] close(8) = -1 EBADF (Bad file descriptor) [pid 6440] close(9) = -1 EBADF (Bad file descriptor) [pid 6440] close(10) = -1 EBADF (Bad file descriptor) [pid 6440] close(11) = -1 EBADF (Bad file descriptor) [pid 6440] close(12) = -1 EBADF (Bad file descriptor) [pid 6440] close(13) = -1 EBADF (Bad file descriptor) [pid 6440] close(14) = -1 EBADF (Bad file descriptor) [pid 6440] close(15) = -1 EBADF (Bad file descriptor) [pid 6440] close(16) = -1 EBADF (Bad file descriptor) [pid 6440] close(17) = -1 EBADF (Bad file descriptor) [pid 6440] close(18) = -1 EBADF (Bad file descriptor) [pid 6440] close(19) = -1 EBADF (Bad file descriptor) [pid 6440] close(20) = -1 EBADF (Bad file descriptor) [pid 6440] close(21) = -1 EBADF (Bad file descriptor) [pid 6440] close(22) = -1 EBADF (Bad file descriptor) [pid 6440] close(23) = -1 EBADF (Bad file descriptor) [pid 6440] close(24) = -1 EBADF (Bad file descriptor) [pid 6440] close(25) = -1 EBADF (Bad file descriptor) [pid 6440] close(26) = -1 EBADF (Bad file descriptor) [pid 6440] close(27) = -1 EBADF (Bad file descriptor) [pid 6440] close(28) = -1 EBADF (Bad file descriptor) [pid 6440] close(29) = -1 EBADF (Bad file descriptor) [pid 6440] exit_group(0 [pid 6441] <... futex resumed>) = ? [pid 6440] <... exit_group resumed>) = ? [pid 6441] +++ exited with 0 +++ [pid 6442] <... futex resumed>) = ? [pid 6442] +++ exited with 0 +++ [pid 6440] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1419, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./473", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./473/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./473/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./473") = 0 [pid 5019] mkdir("./474", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1422 ./strace-static-x86_64: Process 6443 attached [pid 6443] set_robust_list(0x555556a426a0, 24) = 0 [pid 6443] chdir("./474") = 0 [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6443] setpgid(0, 0) = 0 [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6443] write(3, "1000", 4) = 4 [pid 6443] close(3) = 0 [pid 6443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6443] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6443] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1423]}, 88) = 1423 [pid 6443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6443] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6444 attached [pid 6444] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6444] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6444] memfd_create("syzkaller", 0) = 3 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6444] munmap(0x7f15b9a45000, 524288) = 0 [ 78.432875][ T6441] loop0: detected capacity change from 0 to 1024 [pid 6444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6444] close(3) = 0 [pid 6444] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6444] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6444] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6444] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6444] ioctl(4, LOOP_CLR_FD) = 0 [pid 6444] close(4) = 0 [pid 6444] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = 1 [pid 6444] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6443] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6443] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6445 attached [pid 6445] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6443] <... clone3 resumed> => {parent_tid=[1424]}, 88) = 1424 [pid 6443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6443] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... rseq resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6445] set_robust_list(0x7f15b9ac49a0, 24 [pid 6443] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6445] <... set_robust_list resumed>) = 0 [pid 6445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6445] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6445] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6444] <... mknodat resumed>) = 0 [pid 6444] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6444] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] <... mount resumed>) = 0 [pid 6445] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6445] chdir(".") = 0 [pid 6445] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = 0 [pid 6443] close(3) = 0 [pid 6443] close(4) = 0 [pid 6443] close(5) = -1 EBADF (Bad file descriptor) [pid 6443] close(6) = -1 EBADF (Bad file descriptor) [pid 6443] close(7) = -1 EBADF (Bad file descriptor) [pid 6443] close(8) = -1 EBADF (Bad file descriptor) [pid 6443] close(9) = -1 EBADF (Bad file descriptor) [pid 6443] close(10) = -1 EBADF (Bad file descriptor) [pid 6443] close(11) = -1 EBADF (Bad file descriptor) [pid 6443] close(12) = -1 EBADF (Bad file descriptor) [pid 6443] close(13) = -1 EBADF (Bad file descriptor) [pid 6443] close(14) = -1 EBADF (Bad file descriptor) [pid 6443] close(15) = -1 EBADF (Bad file descriptor) [pid 6443] close(16) = -1 EBADF (Bad file descriptor) [pid 6443] close(17) = -1 EBADF (Bad file descriptor) [pid 6443] close(18) = -1 EBADF (Bad file descriptor) [pid 6443] close(19) = -1 EBADF (Bad file descriptor) [pid 6443] close(20) = -1 EBADF (Bad file descriptor) [pid 6443] close(21) = -1 EBADF (Bad file descriptor) [pid 6443] close(22) = -1 EBADF (Bad file descriptor) [pid 6443] close(23) = -1 EBADF (Bad file descriptor) [pid 6443] close(24) = -1 EBADF (Bad file descriptor) [pid 6443] close(25) = -1 EBADF (Bad file descriptor) [pid 6443] close(26) = -1 EBADF (Bad file descriptor) [pid 6443] close(27) = -1 EBADF (Bad file descriptor) [pid 6443] close(28 [pid 6445] <... futex resumed>) = 1 [pid 6443] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6445] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6443] close(29) = -1 EBADF (Bad file descriptor) [pid 6443] exit_group(0 [pid 6445] <... futex resumed>) = ? [pid 6444] <... futex resumed>) = ? [pid 6443] <... exit_group resumed>) = ? [pid 6445] +++ exited with 0 +++ [pid 6444] +++ exited with 0 +++ [pid 6443] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1422, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./474", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./474/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./474/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./474") = 0 [pid 5019] mkdir("./475", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1425 ./strace-static-x86_64: Process 6446 attached [pid 6446] set_robust_list(0x555556a426a0, 24) = 0 [pid 6446] chdir("./475") = 0 [pid 6446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6446] setpgid(0, 0) = 0 [pid 6446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6446] write(3, "1000", 4) = 4 [pid 6446] close(3) = 0 [pid 6446] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6446] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6446] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1426]}, 88) = 1426 [pid 6446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6446] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6447 attached [pid 6447] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6447] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6447] memfd_create("syzkaller", 0) = 3 [pid 6447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 78.495042][ T6444] loop0: detected capacity change from 0 to 1024 [pid 6447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6447] munmap(0x7f15b9a45000, 524288) = 0 [pid 6447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6447] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6447] close(3) = 0 [pid 6447] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6447] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6447] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6447] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6447] ioctl(4, LOOP_CLR_FD) = 0 [pid 6447] close(4) = 0 [pid 6447] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6446] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6446] <... futex resumed>) = 0 [pid 6446] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6446] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6448 attached [pid 6448] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6448] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6448] rt_sigprocmask(SIG_SETMASK, [], [pid 6446] <... clone3 resumed> => {parent_tid=[1427]}, 88) = 1427 [pid 6448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6446] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] mkdir(".", 0777 [pid 6446] <... futex resumed>) = 0 [pid 6448] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6446] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6448] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6447] <... mknodat resumed>) = 0 [pid 6447] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6447] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] <... mount resumed>) = 0 [pid 6448] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6448] chdir(".") = 0 [pid 6448] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6446] close(3 [pid 6448] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] <... close resumed>) = 0 [pid 6446] close(4) = 0 [pid 6446] close(5) = -1 EBADF (Bad file descriptor) [pid 6446] close(6) = -1 EBADF (Bad file descriptor) [pid 6446] close(7) = -1 EBADF (Bad file descriptor) [pid 6446] close(8) = -1 EBADF (Bad file descriptor) [pid 6446] close(9) = -1 EBADF (Bad file descriptor) [pid 6446] close(10) = -1 EBADF (Bad file descriptor) [pid 6446] close(11) = -1 EBADF (Bad file descriptor) [pid 6446] close(12) = -1 EBADF (Bad file descriptor) [pid 6446] close(13) = -1 EBADF (Bad file descriptor) [pid 6446] close(14) = -1 EBADF (Bad file descriptor) [pid 6446] close(15) = -1 EBADF (Bad file descriptor) [pid 6446] close(16) = -1 EBADF (Bad file descriptor) [pid 6446] close(17) = -1 EBADF (Bad file descriptor) [pid 6446] close(18) = -1 EBADF (Bad file descriptor) [pid 6446] close(19) = -1 EBADF (Bad file descriptor) [pid 6446] close(20) = -1 EBADF (Bad file descriptor) [pid 6446] close(21) = -1 EBADF (Bad file descriptor) [pid 6446] close(22) = -1 EBADF (Bad file descriptor) [pid 6446] close(23) = -1 EBADF (Bad file descriptor) [pid 6446] close(24) = -1 EBADF (Bad file descriptor) [pid 6446] close(25) = -1 EBADF (Bad file descriptor) [pid 6446] close(26) = -1 EBADF (Bad file descriptor) [pid 6446] close(27) = -1 EBADF (Bad file descriptor) [pid 6446] close(28) = -1 EBADF (Bad file descriptor) [pid 6446] close(29) = -1 EBADF (Bad file descriptor) [pid 6446] exit_group(0) = ? [pid 6448] <... futex resumed>) = ? [pid 6447] <... futex resumed>) = ? [pid 6447] +++ exited with 0 +++ [pid 6448] +++ exited with 0 +++ [pid 6446] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1425, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./475", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./475/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./475/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./475") = 0 [pid 5019] mkdir("./476", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1428 ./strace-static-x86_64: Process 6449 attached [pid 6449] set_robust_list(0x555556a426a0, 24) = 0 [pid 6449] chdir("./476") = 0 [pid 6449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6449] setpgid(0, 0) = 0 [pid 6449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6449] write(3, "1000", 4) = 4 [pid 6449] close(3) = 0 [pid 6449] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6449] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6449] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6449] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1429]}, 88) = 1429 [pid 6449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6449] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6449] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6450 attached [pid 6450] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6450] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6450] memfd_create("syzkaller", 0) = 3 [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6450] munmap(0x7f15b9a45000, 524288) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 78.562141][ T6447] loop0: detected capacity change from 0 to 1024 [pid 6450] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6450] close(3) = 0 [pid 6450] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6450] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6450] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6450] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6450] ioctl(4, LOOP_CLR_FD) = 0 [pid 6450] close(4) = 0 [pid 6450] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... futex resumed>) = 0 [pid 6449] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6449] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6449] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1430]}, 88) = 1430 [pid 6449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6449] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6449] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6450] <... futex resumed>) = 1 [pid 6450] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6450] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6450] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6451 attached [pid 6451] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6451] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6451] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6451] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6451] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6451] chdir(".") = 0 [pid 6451] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6449] <... futex resumed>) = 0 [pid 6449] close(3) = 0 [pid 6449] close(4) = 0 [pid 6449] close(5) = -1 EBADF (Bad file descriptor) [pid 6449] close(6) = -1 EBADF (Bad file descriptor) [pid 6451] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] close(7) = -1 EBADF (Bad file descriptor) [pid 6449] close(8) = -1 EBADF (Bad file descriptor) [pid 6449] close(9) = -1 EBADF (Bad file descriptor) [pid 6449] close(10) = -1 EBADF (Bad file descriptor) [pid 6449] close(11) = -1 EBADF (Bad file descriptor) [pid 6449] close(12) = -1 EBADF (Bad file descriptor) [pid 6449] close(13) = -1 EBADF (Bad file descriptor) [pid 6449] close(14) = -1 EBADF (Bad file descriptor) [pid 6449] close(15) = -1 EBADF (Bad file descriptor) [pid 6449] close(16) = -1 EBADF (Bad file descriptor) [pid 6449] close(17) = -1 EBADF (Bad file descriptor) [pid 6449] close(18) = -1 EBADF (Bad file descriptor) [pid 6449] close(19) = -1 EBADF (Bad file descriptor) [pid 6449] close(20) = -1 EBADF (Bad file descriptor) [pid 6449] close(21) = -1 EBADF (Bad file descriptor) [pid 6449] close(22) = -1 EBADF (Bad file descriptor) [pid 6449] close(23) = -1 EBADF (Bad file descriptor) [pid 6449] close(24) = -1 EBADF (Bad file descriptor) [pid 6449] close(25) = -1 EBADF (Bad file descriptor) [pid 6449] close(26) = -1 EBADF (Bad file descriptor) [pid 6449] close(27) = -1 EBADF (Bad file descriptor) [pid 6449] close(28) = -1 EBADF (Bad file descriptor) [pid 6449] close(29) = -1 EBADF (Bad file descriptor) [pid 6449] exit_group(0 [pid 6451] <... futex resumed>) = ? [pid 6450] <... futex resumed>) = ? [pid 6449] <... exit_group resumed>) = ? [pid 6451] +++ exited with 0 +++ [pid 6450] +++ exited with 0 +++ [pid 6449] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1428, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./476", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./476/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./476/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./476") = 0 [pid 5019] mkdir("./477", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1431 ./strace-static-x86_64: Process 6452 attached [pid 6452] set_robust_list(0x555556a426a0, 24) = 0 [pid 6452] chdir("./477") = 0 [pid 6452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6452] setpgid(0, 0) = 0 [pid 6452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6452] write(3, "1000", 4) = 4 [pid 6452] close(3) = 0 [pid 6452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6452] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6452] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6452] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1432]}, 88) = 1432 [pid 6452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6452] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6452] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6453 attached [pid 6453] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6453] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6453] memfd_create("syzkaller", 0) = 3 [pid 6453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 78.621733][ T6450] loop0: detected capacity change from 0 to 1024 [pid 6453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6453] munmap(0x7f15b9a45000, 524288) = 0 [pid 6453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6453] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6453] close(3) = 0 [pid 6453] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6453] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6453] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6453] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6453] ioctl(4, LOOP_CLR_FD) = 0 [pid 6453] close(4) = 0 [pid 6453] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6452] <... futex resumed>) = 0 [pid 6452] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6452] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6452] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1433]}, 88) = 1433 [pid 6452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6452] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6452] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6453] <... futex resumed>) = 1 [pid 6453] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6454 attached [pid 6454] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6454] set_robust_list(0x7f15b9ac49a0, 24 [pid 6453] <... mknodat resumed>) = 0 [pid 6453] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] <... set_robust_list resumed>) = 0 [pid 6453] <... futex resumed>) = 0 [pid 6453] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6454] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6454] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6454] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6454] chdir(".") = 0 [pid 6454] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6452] <... futex resumed>) = 0 [pid 6452] close(3) = 0 [pid 6452] close(4) = 0 [pid 6454] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6452] close(5) = -1 EBADF (Bad file descriptor) [pid 6452] close(6) = -1 EBADF (Bad file descriptor) [pid 6452] close(7) = -1 EBADF (Bad file descriptor) [pid 6452] close(8) = -1 EBADF (Bad file descriptor) [pid 6452] close(9) = -1 EBADF (Bad file descriptor) [pid 6452] close(10) = -1 EBADF (Bad file descriptor) [pid 6452] close(11) = -1 EBADF (Bad file descriptor) [pid 6452] close(12) = -1 EBADF (Bad file descriptor) [pid 6452] close(13) = -1 EBADF (Bad file descriptor) [pid 6452] close(14) = -1 EBADF (Bad file descriptor) [pid 6452] close(15) = -1 EBADF (Bad file descriptor) [pid 6452] close(16) = -1 EBADF (Bad file descriptor) [pid 6452] close(17) = -1 EBADF (Bad file descriptor) [pid 6452] close(18) = -1 EBADF (Bad file descriptor) [pid 6452] close(19) = -1 EBADF (Bad file descriptor) [pid 6452] close(20) = -1 EBADF (Bad file descriptor) [pid 6452] close(21) = -1 EBADF (Bad file descriptor) [pid 6452] close(22) = -1 EBADF (Bad file descriptor) [pid 6452] close(23) = -1 EBADF (Bad file descriptor) [pid 6452] close(24) = -1 EBADF (Bad file descriptor) [pid 6452] close(25) = -1 EBADF (Bad file descriptor) [pid 6452] close(26) = -1 EBADF (Bad file descriptor) [pid 6452] close(27) = -1 EBADF (Bad file descriptor) [pid 6452] close(28) = -1 EBADF (Bad file descriptor) [pid 6452] close(29) = -1 EBADF (Bad file descriptor) [pid 6452] exit_group(0 [pid 6454] <... futex resumed>) = ? [pid 6452] <... exit_group resumed>) = ? [pid 6454] +++ exited with 0 +++ [pid 6453] <... futex resumed>) = ? [pid 6453] +++ exited with 0 +++ [pid 6452] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1431, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./477", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./477/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./477/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./477") = 0 [pid 5019] mkdir("./478", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 78.688123][ T6453] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6455 attached , child_tidptr=0x555556a42690) = 1434 [pid 6455] set_robust_list(0x555556a426a0, 24) = 0 [pid 6455] chdir("./478") = 0 [pid 6455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6455] setpgid(0, 0) = 0 [pid 6455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6455] write(3, "1000", 4) = 4 [pid 6455] close(3) = 0 [pid 6455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6455] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6455] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6455] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1435]}, 88) = 1435 [pid 6455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6455] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6455] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6456 attached [pid 6456] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6456] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6456] memfd_create("syzkaller", 0) = 3 [pid 6456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6456] munmap(0x7f15b9a45000, 524288) = 0 [pid 6456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6456] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6456] close(3) = 0 [pid 6456] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6456] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6456] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6456] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6456] ioctl(4, LOOP_CLR_FD) = 0 [pid 6456] close(4) = 0 [pid 6456] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... futex resumed>) = 0 [pid 6455] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6455] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6455] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6457 attached => {parent_tid=[1436]}, 88) = 1436 [pid 6455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6457] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6455] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6455] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6456] <... futex resumed>) = 1 [pid 6456] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6457] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6457] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6457] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6456] <... mknodat resumed>) = 0 [pid 6456] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6456] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] <... mount resumed>) = 0 [pid 6457] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6457] chdir(".") = 0 [pid 6457] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... futex resumed>) = 0 [pid 6455] close(3) = 0 [pid 6455] close(4) = 0 [pid 6455] close(5) = -1 EBADF (Bad file descriptor) [pid 6455] close(6) = -1 EBADF (Bad file descriptor) [pid 6455] close(7) = -1 EBADF (Bad file descriptor) [pid 6455] close(8) = -1 EBADF (Bad file descriptor) [pid 6455] close(9) = -1 EBADF (Bad file descriptor) [pid 6455] close(10) = -1 EBADF (Bad file descriptor) [pid 6455] close(11) = -1 EBADF (Bad file descriptor) [pid 6455] close(12) = -1 EBADF (Bad file descriptor) [pid 6455] close(13) = -1 EBADF (Bad file descriptor) [pid 6455] close(14) = -1 EBADF (Bad file descriptor) [pid 6455] close(15) = -1 EBADF (Bad file descriptor) [pid 6455] close(16) = -1 EBADF (Bad file descriptor) [pid 6455] close(17) = -1 EBADF (Bad file descriptor) [pid 6455] close(18) = -1 EBADF (Bad file descriptor) [pid 6455] close(19) = -1 EBADF (Bad file descriptor) [pid 6455] close(20) = -1 EBADF (Bad file descriptor) [pid 6455] close(21 [pid 6457] <... futex resumed>) = 1 [pid 6455] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6457] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6455] close(22) = -1 EBADF (Bad file descriptor) [pid 6455] close(23) = -1 EBADF (Bad file descriptor) [pid 6455] close(24) = -1 EBADF (Bad file descriptor) [pid 6455] close(25) = -1 EBADF (Bad file descriptor) [pid 6455] close(26) = -1 EBADF (Bad file descriptor) [pid 6455] close(27) = -1 EBADF (Bad file descriptor) [pid 6455] close(28) = -1 EBADF (Bad file descriptor) [pid 6455] close(29) = -1 EBADF (Bad file descriptor) [pid 6455] exit_group(0 [pid 6457] <... futex resumed>) = ? [pid 6456] <... futex resumed>) = ? [pid 6455] <... exit_group resumed>) = ? [pid 6456] +++ exited with 0 +++ [pid 6457] +++ exited with 0 +++ [pid 6455] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1434, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./478", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./478/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./478/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./478") = 0 [pid 5019] mkdir("./479", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 78.770522][ T6456] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1437 ./strace-static-x86_64: Process 6458 attached [pid 6458] set_robust_list(0x555556a426a0, 24) = 0 [pid 6458] chdir("./479") = 0 [pid 6458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6458] setpgid(0, 0) = 0 [pid 6458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6458] write(3, "1000", 4) = 4 [pid 6458] close(3) = 0 [pid 6458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6458] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6458] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6459 attached => {parent_tid=[1438]}, 88) = 1438 [pid 6458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6458] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6459] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6459] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6459] memfd_create("syzkaller", 0) = 3 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6459] munmap(0x7f15b9a45000, 524288) = 0 [pid 6459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6459] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6459] close(3) = 0 [pid 6459] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6459] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6459] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6459] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6459] ioctl(4, LOOP_CLR_FD) = 0 [pid 6459] close(4) = 0 [pid 6459] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6458] <... futex resumed>) = 0 [pid 6458] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6458] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6460 attached [pid 6460] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6460] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6460] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6458] <... clone3 resumed> => {parent_tid=[1439]}, 88) = 1439 [pid 6458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6458] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... futex resumed>) = 0 [pid 6458] <... futex resumed>) = 1 [pid 6458] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6460] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6460] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6459] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6460] <... mount resumed>) = 0 [pid 6460] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6460] chdir(".") = 0 [pid 6460] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] <... futex resumed>) = 0 [pid 6460] <... futex resumed>) = 1 [pid 6460] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6459] <... mknodat resumed>) = 0 [pid 6459] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] close(3) = 0 [pid 6458] close(4) = 0 [pid 6458] close(5) = -1 EBADF (Bad file descriptor) [pid 6458] close(6) = -1 EBADF (Bad file descriptor) [pid 6458] close(7) = -1 EBADF (Bad file descriptor) [pid 6458] close(8) = -1 EBADF (Bad file descriptor) [pid 6458] close(9) = -1 EBADF (Bad file descriptor) [pid 6458] close(10) = -1 EBADF (Bad file descriptor) [pid 6458] close(11) = -1 EBADF (Bad file descriptor) [pid 6458] close(12) = -1 EBADF (Bad file descriptor) [pid 6458] close(13) = -1 EBADF (Bad file descriptor) [pid 6458] close(14) = -1 EBADF (Bad file descriptor) [pid 6458] close(15) = -1 EBADF (Bad file descriptor) [pid 6458] close(16) = -1 EBADF (Bad file descriptor) [pid 6458] close(17) = -1 EBADF (Bad file descriptor) [pid 6458] close(18) = -1 EBADF (Bad file descriptor) [pid 6458] close(19) = -1 EBADF (Bad file descriptor) [pid 6458] close(20) = -1 EBADF (Bad file descriptor) [pid 6458] close(21) = -1 EBADF (Bad file descriptor) [pid 6458] close(22) = -1 EBADF (Bad file descriptor) [pid 6458] close(23) = -1 EBADF (Bad file descriptor) [pid 6458] close(24) = -1 EBADF (Bad file descriptor) [pid 6458] close(25) = -1 EBADF (Bad file descriptor) [pid 6458] close(26) = -1 EBADF (Bad file descriptor) [pid 6458] close(27) = -1 EBADF (Bad file descriptor) [pid 6458] close(28) = -1 EBADF (Bad file descriptor) [pid 6458] close(29) = -1 EBADF (Bad file descriptor) [pid 6458] exit_group(0 [pid 6460] <... futex resumed>) = ? [pid 6458] <... exit_group resumed>) = ? [pid 6460] +++ exited with 0 +++ [pid 6459] <... futex resumed>) = ? [pid 6459] +++ exited with 0 +++ [pid 6458] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1437, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./479", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./479/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./479/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./479") = 0 [pid 5019] mkdir("./480", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1440 ./strace-static-x86_64: Process 6461 attached [pid 6461] set_robust_list(0x555556a426a0, 24) = 0 [pid 6461] chdir("./480") = 0 [pid 6461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6461] setpgid(0, 0) = 0 [pid 6461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6461] write(3, "1000", 4) = 4 [pid 6461] close(3) = 0 [pid 6461] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6461] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6461] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6461] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6462 attached => {parent_tid=[1441]}, 88) = 1441 [pid 6462] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6462] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6462] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 78.855512][ T6459] loop0: detected capacity change from 0 to 1024 [pid 6461] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6462] <... futex resumed>) = 0 [pid 6461] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6462] memfd_create("syzkaller", 0) = 3 [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6462] munmap(0x7f15b9a45000, 524288) = 0 [pid 6462] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6462] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6462] close(3) = 0 [pid 6462] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6462] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6462] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6462] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6462] ioctl(4, LOOP_CLR_FD) = 0 [pid 6462] close(4) = 0 [pid 6462] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6461] <... futex resumed>) = 0 [pid 6461] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6461] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6462] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1442]}, 88) = 1442 [pid 6461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6461] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6463 attached [pid 6463] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6463] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6463] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6463] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6462] <... mknodat resumed>) = 0 [pid 6462] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6462] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6463] <... mount resumed>) = 0 [pid 6463] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6463] chdir(".") = 0 [pid 6463] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = 0 [pid 6461] close(3) = 0 [pid 6461] close(4) = 0 [pid 6461] close(5) = -1 EBADF (Bad file descriptor) [pid 6461] close(6) = -1 EBADF (Bad file descriptor) [pid 6461] close(7) = -1 EBADF (Bad file descriptor) [pid 6461] close(8) = -1 EBADF (Bad file descriptor) [pid 6461] close(9) = -1 EBADF (Bad file descriptor) [pid 6461] close(10) = -1 EBADF (Bad file descriptor) [pid 6461] close(11) = -1 EBADF (Bad file descriptor) [pid 6461] close(12) = -1 EBADF (Bad file descriptor) [pid 6461] close(13) = -1 EBADF (Bad file descriptor) [pid 6461] close(14) = -1 EBADF (Bad file descriptor) [pid 6461] close(15) = -1 EBADF (Bad file descriptor) [pid 6461] close(16) = -1 EBADF (Bad file descriptor) [pid 6461] close(17) = -1 EBADF (Bad file descriptor) [pid 6461] close(18) = -1 EBADF (Bad file descriptor) [pid 6461] close(19) = -1 EBADF (Bad file descriptor) [pid 6461] close(20) = -1 EBADF (Bad file descriptor) [pid 6461] close(21) = -1 EBADF (Bad file descriptor) [pid 6461] close(22) = -1 EBADF (Bad file descriptor) [pid 6461] close(23) = -1 EBADF (Bad file descriptor) [pid 6461] close(24) = -1 EBADF (Bad file descriptor) [pid 6461] close(25) = -1 EBADF (Bad file descriptor) [pid 6461] close(26) = -1 EBADF (Bad file descriptor) [pid 6461] close(27) = -1 EBADF (Bad file descriptor) [pid 6461] close(28) = -1 EBADF (Bad file descriptor) [pid 6461] close(29) = -1 EBADF (Bad file descriptor) [pid 6461] exit_group(0) = ? [pid 6463] <... futex resumed>) = ? [pid 6463] +++ exited with 0 +++ [pid 6462] <... futex resumed>) = ? [pid 6462] +++ exited with 0 +++ [pid 6461] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1440, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./480", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./480/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./480/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./480") = 0 [pid 5019] mkdir("./481", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6464 attached , child_tidptr=0x555556a42690) = 1443 [pid 6464] set_robust_list(0x555556a426a0, 24) = 0 [pid 6464] chdir("./481") = 0 [pid 6464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6464] setpgid(0, 0) = 0 [pid 6464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6464] write(3, "1000", 4) = 4 [pid 6464] close(3) = 0 [pid 6464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6464] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6464] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 78.923490][ T6462] loop0: detected capacity change from 0 to 1024 [pid 6464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6464] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1444]}, 88) = 1444 ./strace-static-x86_64: Process 6465 attached [pid 6464] rt_sigprocmask(SIG_SETMASK, [], [pid 6465] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6464] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6465] <... rseq resumed>) = 0 [pid 6465] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6465] memfd_create("syzkaller", 0) = 3 [pid 6465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6465] munmap(0x7f15b9a45000, 524288) = 0 [pid 6465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6465] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6465] close(3) = 0 [pid 6465] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6465] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6465] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6465] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6465] ioctl(4, LOOP_CLR_FD) = 0 [pid 6465] close(4) = 0 [pid 6465] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6464] <... futex resumed>) = 0 [pid 6464] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6464] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6464] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6466 attached => {parent_tid=[1445]}, 88) = 1445 [pid 6466] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6466] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6466] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6464] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6464] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6466] <... futex resumed>) = 0 [pid 6466] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6466] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6466] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6465] <... mknodat resumed>) = 0 [pid 6465] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6465] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6466] chdir(".") = 0 [pid 6466] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] <... futex resumed>) = 0 [pid 6464] close(3) = 0 [pid 6464] close(4) = 0 [pid 6464] close(5) = -1 EBADF (Bad file descriptor) [pid 6464] close(6) = -1 EBADF (Bad file descriptor) [pid 6464] close(7) = -1 EBADF (Bad file descriptor) [pid 6464] close(8) = -1 EBADF (Bad file descriptor) [pid 6464] close(9) = -1 EBADF (Bad file descriptor) [pid 6464] close(10) = -1 EBADF (Bad file descriptor) [pid 6464] close(11) = -1 EBADF (Bad file descriptor) [pid 6464] close(12) = -1 EBADF (Bad file descriptor) [pid 6464] close(13) = -1 EBADF (Bad file descriptor) [pid 6464] close(14 [pid 6466] <... futex resumed>) = 1 [pid 6464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6466] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6464] close(15) = -1 EBADF (Bad file descriptor) [pid 6464] close(16) = -1 EBADF (Bad file descriptor) [pid 6464] close(17) = -1 EBADF (Bad file descriptor) [pid 6464] close(18) = -1 EBADF (Bad file descriptor) [pid 6464] close(19) = -1 EBADF (Bad file descriptor) [pid 6464] close(20) = -1 EBADF (Bad file descriptor) [pid 6464] close(21) = -1 EBADF (Bad file descriptor) [pid 6464] close(22) = -1 EBADF (Bad file descriptor) [pid 6464] close(23) = -1 EBADF (Bad file descriptor) [pid 6464] close(24) = -1 EBADF (Bad file descriptor) [pid 6464] close(25) = -1 EBADF (Bad file descriptor) [pid 6464] close(26) = -1 EBADF (Bad file descriptor) [pid 6464] close(27) = -1 EBADF (Bad file descriptor) [pid 6464] close(28) = -1 EBADF (Bad file descriptor) [pid 6464] close(29) = -1 EBADF (Bad file descriptor) [pid 6464] exit_group(0 [pid 6466] <... futex resumed>) = ? [pid 6465] <... futex resumed>) = ? [pid 6464] <... exit_group resumed>) = ? [pid 6466] +++ exited with 0 +++ [pid 6465] +++ exited with 0 +++ [pid 6464] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1443, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./481", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./481/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./481/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./481") = 0 [pid 5019] mkdir("./482", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 78.992299][ T6465] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6467 attached [pid 6467] set_robust_list(0x555556a426a0, 24) = 0 [pid 6467] chdir("./482") = 0 [pid 6467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6467] setpgid(0, 0) = 0 [pid 6467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1446 [pid 6467] <... openat resumed>) = 3 [pid 6467] write(3, "1000", 4) = 4 [pid 6467] close(3) = 0 [pid 6467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6467] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6467] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6467] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6468 attached => {parent_tid=[1447]}, 88) = 1447 [pid 6468] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6467] rt_sigprocmask(SIG_SETMASK, [], [pid 6468] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6468] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6468] <... futex resumed>) = 0 [pid 6467] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6468] memfd_create("syzkaller", 0) = 3 [pid 6468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6468] munmap(0x7f15b9a45000, 524288) = 0 [pid 6468] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6468] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6468] close(3) = 0 [pid 6468] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6468] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6468] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6468] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6468] ioctl(4, LOOP_CLR_FD) = 0 [pid 6468] close(4) = 0 [pid 6468] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = 0 [pid 6467] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6467] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6467] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6468] <... futex resumed>) = 1 [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6468] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6467] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6468] <... mknodat resumed>) = 0 [pid 6467] <... clone3 resumed> => {parent_tid=[1448]}, 88) = 1448 [pid 6467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6468] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6469 attached [pid 6467] <... futex resumed>) = 0 [pid 6468] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6469] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6469] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6469] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6469] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6467] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6469] <... mount resumed>) = 0 [pid 6469] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6469] chdir(".") = 0 [pid 6469] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = 0 [pid 6467] close(3) = 0 [pid 6467] close(4) = 0 [pid 6467] close(5) = -1 EBADF (Bad file descriptor) [pid 6467] close(6) = -1 EBADF (Bad file descriptor) [pid 6467] close(7) = -1 EBADF (Bad file descriptor) [pid 6467] close(8) = -1 EBADF (Bad file descriptor) [pid 6467] close(9) = -1 EBADF (Bad file descriptor) [pid 6467] close(10) = -1 EBADF (Bad file descriptor) [pid 6467] close(11) = -1 EBADF (Bad file descriptor) [pid 6467] close(12) = -1 EBADF (Bad file descriptor) [pid 6467] close(13) = -1 EBADF (Bad file descriptor) [pid 6467] close(14) = -1 EBADF (Bad file descriptor) [pid 6467] close(15) = -1 EBADF (Bad file descriptor) [pid 6467] close(16) = -1 EBADF (Bad file descriptor) [pid 6467] close(17) = -1 EBADF (Bad file descriptor) [pid 6467] close(18) = -1 EBADF (Bad file descriptor) [pid 6467] close(19) = -1 EBADF (Bad file descriptor) [pid 6467] close(20) = -1 EBADF (Bad file descriptor) [pid 6467] close(21) = -1 EBADF (Bad file descriptor) [pid 6467] close(22) = -1 EBADF (Bad file descriptor) [pid 6467] close(23) = -1 EBADF (Bad file descriptor) [pid 6467] close(24) = -1 EBADF (Bad file descriptor) [pid 6467] close(25) = -1 EBADF (Bad file descriptor) [pid 6467] close(26) = -1 EBADF (Bad file descriptor) [pid 6467] close(27) = -1 EBADF (Bad file descriptor) [pid 6467] close(28) = -1 EBADF (Bad file descriptor) [pid 6467] close(29) = -1 EBADF (Bad file descriptor) [pid 6467] exit_group(0) = ? [pid 6468] <... futex resumed>) = ? [pid 6468] +++ exited with 0 +++ [pid 6469] <... futex resumed>) = ? [pid 6469] +++ exited with 0 +++ [pid 6467] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1446, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./482", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./482/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 79.084148][ T6468] loop0: detected capacity change from 0 to 1024 [pid 5019] unlink("./482/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./482") = 0 [pid 5019] mkdir("./483", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1449 ./strace-static-x86_64: Process 6470 attached [pid 6470] set_robust_list(0x555556a426a0, 24) = 0 [pid 6470] chdir("./483") = 0 [pid 6470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6470] setpgid(0, 0) = 0 [pid 6470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6470] write(3, "1000", 4) = 4 [pid 6470] close(3) = 0 [pid 6470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6470] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6470] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1450]}, 88) = 1450 [pid 6470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6470] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6471 attached [pid 6471] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6471] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6471] memfd_create("syzkaller", 0) = 3 [pid 6471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6471] munmap(0x7f15b9a45000, 524288) = 0 [pid 6471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6471] close(3) = 0 [pid 6471] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6471] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6471] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6471] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6471] ioctl(4, LOOP_CLR_FD) = 0 [pid 6471] close(4) = 0 [pid 6471] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... futex resumed>) = 0 [pid 6470] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6470] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1451]}, 88) = 1451 [pid 6470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6470] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6471] <... futex resumed>) = 1 [pid 6471] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6472 attached [pid 6472] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6472] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6472] rt_sigprocmask(SIG_SETMASK, [], [pid 6471] <... mknodat resumed>) = 0 [pid 6471] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6471] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6472] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6472] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6472] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6472] chdir(".") = 0 [pid 6472] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... futex resumed>) = 0 [pid 6470] close(3) = 0 [pid 6470] close(4) = 0 [pid 6470] close(5) = -1 EBADF (Bad file descriptor) [pid 6470] close(6) = -1 EBADF (Bad file descriptor) [pid 6470] close(7) = -1 EBADF (Bad file descriptor) [pid 6470] close(8 [pid 6472] <... futex resumed>) = 1 [pid 6470] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6472] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] close(9) = -1 EBADF (Bad file descriptor) [pid 6470] close(10) = -1 EBADF (Bad file descriptor) [pid 6470] close(11) = -1 EBADF (Bad file descriptor) [pid 6470] close(12) = -1 EBADF (Bad file descriptor) [pid 6470] close(13) = -1 EBADF (Bad file descriptor) [pid 6470] close(14) = -1 EBADF (Bad file descriptor) [pid 6470] close(15) = -1 EBADF (Bad file descriptor) [pid 6470] close(16) = -1 EBADF (Bad file descriptor) [pid 6470] close(17) = -1 EBADF (Bad file descriptor) [pid 6470] close(18) = -1 EBADF (Bad file descriptor) [pid 6470] close(19) = -1 EBADF (Bad file descriptor) [pid 6470] close(20) = -1 EBADF (Bad file descriptor) [pid 6470] close(21) = -1 EBADF (Bad file descriptor) [pid 6470] close(22) = -1 EBADF (Bad file descriptor) [pid 6470] close(23) = -1 EBADF (Bad file descriptor) [pid 6470] close(24) = -1 EBADF (Bad file descriptor) [pid 6470] close(25) = -1 EBADF (Bad file descriptor) [pid 6470] close(26) = -1 EBADF (Bad file descriptor) [pid 6470] close(27) = -1 EBADF (Bad file descriptor) [pid 6470] close(28) = -1 EBADF (Bad file descriptor) [pid 6470] close(29) = -1 EBADF (Bad file descriptor) [pid 6470] exit_group(0 [pid 6472] <... futex resumed>) = ? [pid 6471] <... futex resumed>) = ? [pid 6470] <... exit_group resumed>) = ? [pid 6472] +++ exited with 0 +++ [pid 6471] +++ exited with 0 +++ [pid 6470] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1449, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./483", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./483/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./483/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./483") = 0 [pid 5019] mkdir("./484", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1452 ./strace-static-x86_64: Process 6473 attached [pid 6473] set_robust_list(0x555556a426a0, 24) = 0 [pid 6473] chdir("./484") = 0 [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6473] setpgid(0, 0) = 0 [ 79.168891][ T6471] loop0: detected capacity change from 0 to 1024 [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6473] write(3, "1000", 4) = 4 [pid 6473] close(3) = 0 [pid 6473] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6473] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6473] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6473] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6473] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6474 attached => {parent_tid=[1453]}, 88) = 1453 [pid 6473] rt_sigprocmask(SIG_SETMASK, [], [pid 6474] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6473] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6474] <... rseq resumed>) = 0 [pid 6474] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6474] memfd_create("syzkaller", 0) = 3 [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6474] munmap(0x7f15b9a45000, 524288) = 0 [pid 6474] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6474] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6474] close(3) = 0 [pid 6474] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6474] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6474] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6474] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6474] ioctl(4, LOOP_CLR_FD) = 0 [pid 6474] close(4) = 0 [pid 6474] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6473] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6474] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6473] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6474] <... mknodat resumed>) = 0 [pid 6473] <... mprotect resumed>) = 0 [pid 6474] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6474] <... futex resumed>) = 0 [pid 6474] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6475 attached => {parent_tid=[1454]}, 88) = 1454 [pid 6475] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6473] rt_sigprocmask(SIG_SETMASK, [], [pid 6475] <... rseq resumed>) = 0 [pid 6473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6475] set_robust_list(0x7f15b9ac49a0, 24 [pid 6473] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] <... set_robust_list resumed>) = 0 [pid 6473] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6475] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6475] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6475] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6475] chdir(".") = 0 [pid 6475] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6473] close(3) = 0 [pid 6473] close(4) = 0 [pid 6473] close(5) = -1 EBADF (Bad file descriptor) [pid 6473] close(6) = -1 EBADF (Bad file descriptor) [pid 6473] close(7) = -1 EBADF (Bad file descriptor) [pid 6473] close(8) = -1 EBADF (Bad file descriptor) [pid 6473] close(9) = -1 EBADF (Bad file descriptor) [pid 6473] close(10) = -1 EBADF (Bad file descriptor) [pid 6473] close(11) = -1 EBADF (Bad file descriptor) [pid 6473] close(12) = -1 EBADF (Bad file descriptor) [pid 6473] close(13) = -1 EBADF (Bad file descriptor) [pid 6473] close(14) = -1 EBADF (Bad file descriptor) [pid 6473] close(15) = -1 EBADF (Bad file descriptor) [pid 6473] close(16) = -1 EBADF (Bad file descriptor) [pid 6473] close(17) = -1 EBADF (Bad file descriptor) [pid 6473] close(18) = -1 EBADF (Bad file descriptor) [pid 6473] close(19) = -1 EBADF (Bad file descriptor) [pid 6473] close(20) = -1 EBADF (Bad file descriptor) [pid 6473] close(21) = -1 EBADF (Bad file descriptor) [pid 6473] close(22) = -1 EBADF (Bad file descriptor) [pid 6473] close(23) = -1 EBADF (Bad file descriptor) [pid 6473] close(24) = -1 EBADF (Bad file descriptor) [pid 6473] close(25) = -1 EBADF (Bad file descriptor) [pid 6473] close(26) = -1 EBADF (Bad file descriptor) [pid 6473] close(27) = -1 EBADF (Bad file descriptor) [pid 6473] close(28) = -1 EBADF (Bad file descriptor) [pid 6473] close(29) = -1 EBADF (Bad file descriptor) [pid 6473] exit_group(0 [pid 6474] <... futex resumed>) = ? [pid 6473] <... exit_group resumed>) = ? [pid 6474] +++ exited with 0 +++ [pid 6475] +++ exited with 0 +++ [pid 6473] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1452, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./484", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./484/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./484/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./484") = 0 [pid 5019] mkdir("./485", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1455 ./strace-static-x86_64: Process 6476 attached [pid 6476] set_robust_list(0x555556a426a0, 24) = 0 [pid 6476] chdir("./485") = 0 [pid 6476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6476] setpgid(0, 0) = 0 [pid 6476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6476] write(3, "1000", 4) = 4 [pid 6476] close(3) = 0 [pid 6476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6476] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6476] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6477 attached => {parent_tid=[1456]}, 88) = 1456 [pid 6477] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6477] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6477] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6476] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6477] <... futex resumed>) = 0 [ 79.242999][ T6474] loop0: detected capacity change from 0 to 1024 [pid 6476] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6477] memfd_create("syzkaller", 0) = 3 [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6477] munmap(0x7f15b9a45000, 524288) = 0 [pid 6477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6477] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6477] close(3) = 0 [pid 6477] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6477] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6477] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6477] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6477] ioctl(4, LOOP_CLR_FD) = 0 [pid 6477] close(4) = 0 [pid 6477] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6476] <... futex resumed>) = 0 [pid 6476] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6476] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1457]}, 88) = 1457 [pid 6476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6476] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6478 attached [pid 6478] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6478] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6478] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6478] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6477] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6478] <... mount resumed>) = 0 [pid 6478] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6478] chdir(".") = 0 [pid 6478] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = 1 [pid 6478] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] <... mknodat resumed>) = 0 [pid 6477] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] close(3) = 0 [pid 6476] close(4) = 0 [pid 6476] close(5) = -1 EBADF (Bad file descriptor) [pid 6476] close(6) = -1 EBADF (Bad file descriptor) [pid 6476] close(7) = -1 EBADF (Bad file descriptor) [pid 6476] close(8) = -1 EBADF (Bad file descriptor) [pid 6476] close(9) = -1 EBADF (Bad file descriptor) [pid 6476] close(10) = -1 EBADF (Bad file descriptor) [pid 6476] close(11) = -1 EBADF (Bad file descriptor) [pid 6476] close(12) = -1 EBADF (Bad file descriptor) [pid 6476] close(13) = -1 EBADF (Bad file descriptor) [pid 6476] close(14) = -1 EBADF (Bad file descriptor) [pid 6476] close(15) = -1 EBADF (Bad file descriptor) [pid 6476] close(16) = -1 EBADF (Bad file descriptor) [pid 6476] close(17) = -1 EBADF (Bad file descriptor) [pid 6476] close(18) = -1 EBADF (Bad file descriptor) [pid 6476] close(19) = -1 EBADF (Bad file descriptor) [pid 6476] close(20) = -1 EBADF (Bad file descriptor) [pid 6476] close(21 [pid 6477] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6476] close(22) = -1 EBADF (Bad file descriptor) [pid 6476] close(23) = -1 EBADF (Bad file descriptor) [pid 6476] close(24) = -1 EBADF (Bad file descriptor) [pid 6476] close(25) = -1 EBADF (Bad file descriptor) [pid 6476] close(26) = -1 EBADF (Bad file descriptor) [pid 6476] close(27) = -1 EBADF (Bad file descriptor) [pid 6476] close(28) = -1 EBADF (Bad file descriptor) [pid 6476] close(29) = -1 EBADF (Bad file descriptor) [pid 6476] exit_group(0) = ? [pid 6477] <... futex resumed>) = ? [pid 6478] <... futex resumed>) = ? [pid 6478] +++ exited with 0 +++ [pid 6477] +++ exited with 0 +++ [pid 6476] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1455, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./485", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./485/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./485/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./485") = 0 [pid 5019] mkdir("./486", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1458 ./strace-static-x86_64: Process 6479 attached [pid 6479] set_robust_list(0x555556a426a0, 24) = 0 [pid 6479] chdir("./486") = 0 [pid 6479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6479] setpgid(0, 0) = 0 [pid 6479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6479] write(3, "1000", 4) = 4 [pid 6479] close(3) = 0 [pid 6479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6479] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6479] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1459]}, 88) = 1459 [pid 6479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6479] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6480 attached [pid 6480] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6480] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6480] memfd_create("syzkaller", 0) = 3 [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 79.310773][ T6477] loop0: detected capacity change from 0 to 1024 [pid 6480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6480] munmap(0x7f15b9a45000, 524288) = 0 [pid 6480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6480] close(3) = 0 [pid 6480] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6480] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6480] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6480] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6480] ioctl(4, LOOP_CLR_FD) = 0 [pid 6480] close(4) = 0 [pid 6480] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] <... futex resumed>) = 0 [pid 6479] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6480] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6479] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6479] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1460]}, 88) = 1460 [pid 6479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6479] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6481 attached [pid 6481] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6481] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6481] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6481] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6480] <... mknodat resumed>) = 0 [pid 6480] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6480] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6481] <... mount resumed>) = 0 [pid 6481] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6481] chdir(".") = 0 [pid 6481] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6479] <... futex resumed>) = 0 [pid 6481] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] close(3) = 0 [pid 6479] close(4) = 0 [pid 6479] close(5) = -1 EBADF (Bad file descriptor) [pid 6479] close(6) = -1 EBADF (Bad file descriptor) [pid 6479] close(7) = -1 EBADF (Bad file descriptor) [pid 6479] close(8) = -1 EBADF (Bad file descriptor) [pid 6479] close(9) = -1 EBADF (Bad file descriptor) [pid 6479] close(10) = -1 EBADF (Bad file descriptor) [pid 6479] close(11) = -1 EBADF (Bad file descriptor) [pid 6479] close(12) = -1 EBADF (Bad file descriptor) [pid 6479] close(13) = -1 EBADF (Bad file descriptor) [pid 6479] close(14) = -1 EBADF (Bad file descriptor) [pid 6479] close(15) = -1 EBADF (Bad file descriptor) [pid 6479] close(16) = -1 EBADF (Bad file descriptor) [pid 6479] close(17) = -1 EBADF (Bad file descriptor) [pid 6479] close(18) = -1 EBADF (Bad file descriptor) [pid 6479] close(19) = -1 EBADF (Bad file descriptor) [pid 6479] close(20) = -1 EBADF (Bad file descriptor) [pid 6479] close(21) = -1 EBADF (Bad file descriptor) [pid 6479] close(22) = -1 EBADF (Bad file descriptor) [pid 6479] close(23) = -1 EBADF (Bad file descriptor) [pid 6479] close(24) = -1 EBADF (Bad file descriptor) [pid 6479] close(25) = -1 EBADF (Bad file descriptor) [pid 6479] close(26) = -1 EBADF (Bad file descriptor) [pid 6479] close(27) = -1 EBADF (Bad file descriptor) [pid 6479] close(28) = -1 EBADF (Bad file descriptor) [pid 6479] close(29) = -1 EBADF (Bad file descriptor) [pid 6479] exit_group(0 [pid 6480] <... futex resumed>) = ? [pid 6479] <... exit_group resumed>) = ? [pid 6481] <... futex resumed>) = ? [pid 6480] +++ exited with 0 +++ [pid 6481] +++ exited with 0 +++ [pid 6479] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1458, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./486", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./486/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./486/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./486") = 0 [pid 5019] mkdir("./487", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 79.375262][ T6480] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1461 ./strace-static-x86_64: Process 6482 attached [pid 6482] set_robust_list(0x555556a426a0, 24) = 0 [pid 6482] chdir("./487") = 0 [pid 6482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6482] setpgid(0, 0) = 0 [pid 6482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6482] write(3, "1000", 4) = 4 [pid 6482] close(3) = 0 [pid 6482] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6482] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6482] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6482] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1462]}, 88) = 1462 [pid 6482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6482] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6482] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6483 attached [pid 6483] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6483] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6483] memfd_create("syzkaller", 0) = 3 [pid 6483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6483] munmap(0x7f15b9a45000, 524288) = 0 [pid 6483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6483] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6483] close(3) = 0 [pid 6483] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6483] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6483] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6483] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6483] ioctl(4, LOOP_CLR_FD) = 0 [pid 6483] close(4) = 0 [pid 6483] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... futex resumed>) = 0 [pid 6482] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6482] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6482] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6484 attached => {parent_tid=[1463]}, 88) = 1463 [pid 6484] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6484] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6484] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6482] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6484] <... futex resumed>) = 0 [pid 6482] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6484] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6484] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6483] <... futex resumed>) = 1 [pid 6483] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6484] <... mount resumed>) = 0 [pid 6484] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6484] chdir(".") = 0 [pid 6484] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6482] <... futex resumed>) = 0 [pid 6484] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6483] <... mknodat resumed>) = 0 [pid 6483] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] close(3) = 0 [pid 6482] close(4 [pid 6483] <... futex resumed>) = 0 [pid 6482] <... close resumed>) = 0 [pid 6482] close(5) = -1 EBADF (Bad file descriptor) [pid 6482] close(6) = -1 EBADF (Bad file descriptor) [pid 6482] close(7) = -1 EBADF (Bad file descriptor) [pid 6482] close(8) = -1 EBADF (Bad file descriptor) [pid 6482] close(9) = -1 EBADF (Bad file descriptor) [pid 6482] close(10) = -1 EBADF (Bad file descriptor) [pid 6482] close(11) = -1 EBADF (Bad file descriptor) [pid 6482] close(12) = -1 EBADF (Bad file descriptor) [pid 6482] close(13) = -1 EBADF (Bad file descriptor) [pid 6482] close(14) = -1 EBADF (Bad file descriptor) [pid 6482] close(15) = -1 EBADF (Bad file descriptor) [pid 6482] close(16) = -1 EBADF (Bad file descriptor) [pid 6482] close(17) = -1 EBADF (Bad file descriptor) [pid 6482] close(18) = -1 EBADF (Bad file descriptor) [pid 6482] close(19) = -1 EBADF (Bad file descriptor) [pid 6482] close(20) = -1 EBADF (Bad file descriptor) [pid 6482] close(21) = -1 EBADF (Bad file descriptor) [pid 6482] close(22) = -1 EBADF (Bad file descriptor) [pid 6482] close(23) = -1 EBADF (Bad file descriptor) [pid 6482] close(24 [pid 6483] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6482] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6482] close(25) = -1 EBADF (Bad file descriptor) [pid 6482] close(26) = -1 EBADF (Bad file descriptor) [pid 6482] close(27) = -1 EBADF (Bad file descriptor) [pid 6482] close(28) = -1 EBADF (Bad file descriptor) [pid 6482] close(29) = -1 EBADF (Bad file descriptor) [pid 6482] exit_group(0) = ? [pid 6484] <... futex resumed>) = ? [pid 6484] +++ exited with 0 +++ [pid 6483] <... futex resumed>) = ? [pid 6483] +++ exited with 0 +++ [pid 6482] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1461, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./487", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./487/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./487/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./487") = 0 [pid 5019] mkdir("./488", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 79.451767][ T6483] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1464 ./strace-static-x86_64: Process 6485 attached [pid 6485] set_robust_list(0x555556a426a0, 24) = 0 [pid 6485] chdir("./488") = 0 [pid 6485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6485] setpgid(0, 0) = 0 [pid 6485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6485] write(3, "1000", 4) = 4 [pid 6485] close(3) = 0 [pid 6485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6485] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6485] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6486 attached => {parent_tid=[1465]}, 88) = 1465 [pid 6485] rt_sigprocmask(SIG_SETMASK, [], [pid 6486] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6486] set_robust_list(0x7f15c1e659a0, 24 [pid 6485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] <... set_robust_list resumed>) = 0 [pid 6486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6486] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6485] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6485] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6486] <... futex resumed>) = 0 [pid 6486] memfd_create("syzkaller", 0) = 3 [pid 6486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6486] munmap(0x7f15b9a45000, 524288) = 0 [pid 6486] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6486] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6486] close(3) = 0 [pid 6486] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6486] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6486] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6486] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6486] ioctl(4, LOOP_CLR_FD) = 0 [pid 6486] close(4) = 0 [pid 6486] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6485] <... futex resumed>) = 0 [pid 6485] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6485] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1466]}, 88) = 1466 [pid 6485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6485] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6485] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6487 attached [pid 6487] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6487] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6487] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6487] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6486] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6487] <... mount resumed>) = 0 [pid 6487] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6487] chdir(".") = 0 [pid 6487] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... futex resumed>) = 0 [pid 6487] <... futex resumed>) = 1 [pid 6487] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6486] <... mknodat resumed>) = 0 [pid 6486] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] close(3 [pid 6486] <... futex resumed>) = 0 [pid 6485] <... close resumed>) = 0 [pid 6485] close(4) = 0 [pid 6485] close(5) = -1 EBADF (Bad file descriptor) [pid 6485] close(6) = -1 EBADF (Bad file descriptor) [pid 6485] close(7) = -1 EBADF (Bad file descriptor) [pid 6485] close(8) = -1 EBADF (Bad file descriptor) [pid 6485] close(9) = -1 EBADF (Bad file descriptor) [pid 6485] close(10) = -1 EBADF (Bad file descriptor) [pid 6485] close(11) = -1 EBADF (Bad file descriptor) [pid 6485] close(12) = -1 EBADF (Bad file descriptor) [pid 6485] close(13) = -1 EBADF (Bad file descriptor) [pid 6485] close(14) = -1 EBADF (Bad file descriptor) [pid 6485] close(15) = -1 EBADF (Bad file descriptor) [pid 6485] close(16) = -1 EBADF (Bad file descriptor) [pid 6485] close(17) = -1 EBADF (Bad file descriptor) [pid 6485] close(18) = -1 EBADF (Bad file descriptor) [pid 6485] close(19) = -1 EBADF (Bad file descriptor) [pid 6485] close(20) = -1 EBADF (Bad file descriptor) [pid 6485] close(21) = -1 EBADF (Bad file descriptor) [pid 6485] close(22) = -1 EBADF (Bad file descriptor) [pid 6485] close(23) = -1 EBADF (Bad file descriptor) [pid 6485] close(24) = -1 EBADF (Bad file descriptor) [pid 6485] close(25) = -1 EBADF (Bad file descriptor) [pid 6485] close(26) = -1 EBADF (Bad file descriptor) [pid 6485] close(27) = -1 EBADF (Bad file descriptor) [pid 6485] close(28) = -1 EBADF (Bad file descriptor) [pid 6485] close(29) = -1 EBADF (Bad file descriptor) [pid 6485] exit_group(0) = ? [pid 6487] <... futex resumed>) = ? [pid 6487] +++ exited with 0 +++ [pid 6486] +++ exited with 0 +++ [pid 6485] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1464, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./488", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./488/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./488/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./488") = 0 [pid 5019] mkdir("./489", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1467 ./strace-static-x86_64: Process 6488 attached [pid 6488] set_robust_list(0x555556a426a0, 24) = 0 [pid 6488] chdir("./489") = 0 [pid 6488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6488] setpgid(0, 0) = 0 [pid 6488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6488] write(3, "1000", 4) = 4 [pid 6488] close(3) = 0 [pid 6488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6488] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6488] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1468]}, 88) = 1468 [pid 6488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6488] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6489 attached [pid 6489] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6489] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6489] memfd_create("syzkaller", 0) = 3 [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 79.530653][ T6486] loop0: detected capacity change from 0 to 1024 [pid 6489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6489] munmap(0x7f15b9a45000, 524288) = 0 [pid 6489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6489] close(3) = 0 [pid 6489] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6489] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6489] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6489] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6489] ioctl(4, LOOP_CLR_FD) = 0 [pid 6489] close(4) = 0 [pid 6489] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = 0 [pid 6489] <... futex resumed>) = 1 [pid 6488] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6488] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6490 attached [pid 6490] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6490] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6490] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] <... clone3 resumed> => {parent_tid=[1469]}, 88) = 1469 [pid 6488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6488] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6488] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6490] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6490] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6489] <... mknodat resumed>) = 0 [pid 6489] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6489] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6490] <... mount resumed>) = 0 [pid 6490] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6490] chdir(".") = 0 [pid 6490] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6488] <... futex resumed>) = 0 [pid 6490] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] close(3) = 0 [pid 6488] close(4) = 0 [pid 6488] close(5) = -1 EBADF (Bad file descriptor) [pid 6488] close(6) = -1 EBADF (Bad file descriptor) [pid 6488] close(7) = -1 EBADF (Bad file descriptor) [pid 6488] close(8) = -1 EBADF (Bad file descriptor) [pid 6488] close(9) = -1 EBADF (Bad file descriptor) [pid 6488] close(10) = -1 EBADF (Bad file descriptor) [pid 6488] close(11) = -1 EBADF (Bad file descriptor) [pid 6488] close(12) = -1 EBADF (Bad file descriptor) [pid 6488] close(13) = -1 EBADF (Bad file descriptor) [pid 6488] close(14) = -1 EBADF (Bad file descriptor) [pid 6488] close(15) = -1 EBADF (Bad file descriptor) [pid 6488] close(16) = -1 EBADF (Bad file descriptor) [pid 6488] close(17) = -1 EBADF (Bad file descriptor) [pid 6488] close(18) = -1 EBADF (Bad file descriptor) [pid 6488] close(19) = -1 EBADF (Bad file descriptor) [pid 6488] close(20) = -1 EBADF (Bad file descriptor) [pid 6488] close(21) = -1 EBADF (Bad file descriptor) [pid 6488] close(22) = -1 EBADF (Bad file descriptor) [pid 6488] close(23) = -1 EBADF (Bad file descriptor) [pid 6488] close(24) = -1 EBADF (Bad file descriptor) [pid 6488] close(25) = -1 EBADF (Bad file descriptor) [pid 6488] close(26) = -1 EBADF (Bad file descriptor) [pid 6488] close(27) = -1 EBADF (Bad file descriptor) [pid 6488] close(28) = -1 EBADF (Bad file descriptor) [pid 6488] close(29) = -1 EBADF (Bad file descriptor) [pid 6488] exit_group(0 [pid 6489] <... futex resumed>) = ? [pid 6488] <... exit_group resumed>) = ? [pid 6489] +++ exited with 0 +++ [pid 6490] <... futex resumed>) = ? [pid 6490] +++ exited with 0 +++ [pid 6488] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1467, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./489", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./489/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./489/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./489") = 0 [pid 5019] mkdir("./490", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1470 ./strace-static-x86_64: Process 6491 attached [pid 6491] set_robust_list(0x555556a426a0, 24) = 0 [pid 6491] chdir("./490") = 0 [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6491] setpgid(0, 0) = 0 [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6491] write(3, "1000", 4) = 4 [pid 6491] close(3) = 0 [pid 6491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6491] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6491] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6491] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6492 attached => {parent_tid=[1471]}, 88) = 1471 [pid 6492] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6492] set_robust_list(0x7f15c1e659a0, 24) = 0 [ 79.594044][ T6489] loop0: detected capacity change from 0 to 1024 [pid 6492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6492] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6491] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6492] <... futex resumed>) = 0 [pid 6492] memfd_create("syzkaller", 0 [pid 6491] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6492] <... memfd_create resumed>) = 3 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6492] munmap(0x7f15b9a45000, 524288) = 0 [pid 6492] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6492] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6492] close(3) = 0 [pid 6492] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6492] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6492] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6492] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6492] ioctl(4, LOOP_CLR_FD) = 0 [pid 6492] close(4) = 0 [pid 6492] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6491] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6491] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1472]}, 88) = 1472 [pid 6491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6491] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6492] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6493 attached [pid 6493] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6493] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6493] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6492] <... mknodat resumed>) = 0 [pid 6492] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6492] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6493] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6493] chdir(".") = 0 [pid 6493] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6491] <... futex resumed>) = 0 [pid 6491] close(3) = 0 [pid 6493] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] close(4) = 0 [pid 6491] close(5) = -1 EBADF (Bad file descriptor) [pid 6491] close(6) = -1 EBADF (Bad file descriptor) [pid 6491] close(7) = -1 EBADF (Bad file descriptor) [pid 6491] close(8) = -1 EBADF (Bad file descriptor) [pid 6491] close(9) = -1 EBADF (Bad file descriptor) [pid 6491] close(10) = -1 EBADF (Bad file descriptor) [pid 6491] close(11) = -1 EBADF (Bad file descriptor) [pid 6491] close(12) = -1 EBADF (Bad file descriptor) [pid 6491] close(13) = -1 EBADF (Bad file descriptor) [pid 6491] close(14) = -1 EBADF (Bad file descriptor) [pid 6491] close(15) = -1 EBADF (Bad file descriptor) [pid 6491] close(16) = -1 EBADF (Bad file descriptor) [pid 6491] close(17) = -1 EBADF (Bad file descriptor) [pid 6491] close(18) = -1 EBADF (Bad file descriptor) [pid 6491] close(19) = -1 EBADF (Bad file descriptor) [pid 6491] close(20) = -1 EBADF (Bad file descriptor) [pid 6491] close(21) = -1 EBADF (Bad file descriptor) [pid 6491] close(22) = -1 EBADF (Bad file descriptor) [pid 6491] close(23) = -1 EBADF (Bad file descriptor) [pid 6491] close(24) = -1 EBADF (Bad file descriptor) [pid 6491] close(25) = -1 EBADF (Bad file descriptor) [pid 6491] close(26) = -1 EBADF (Bad file descriptor) [pid 6491] close(27) = -1 EBADF (Bad file descriptor) [pid 6491] close(28) = -1 EBADF (Bad file descriptor) [pid 6491] close(29) = -1 EBADF (Bad file descriptor) [pid 6491] exit_group(0 [pid 6493] <... futex resumed>) = ? [pid 6492] <... futex resumed>) = ? [pid 6491] <... exit_group resumed>) = ? [pid 6493] +++ exited with 0 +++ [pid 6492] +++ exited with 0 +++ [pid 6491] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1470, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./490", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./490/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./490/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./490") = 0 [pid 5019] mkdir("./491", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 79.663161][ T6492] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6494 attached [pid 6494] set_robust_list(0x555556a426a0, 24) = 0 [pid 6494] chdir("./491") = 0 [pid 6494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6494] setpgid(0, 0) = 0 [pid 6494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6494] write(3, "1000", 4) = 4 [pid 6494] close(3) = 0 [pid 6494] symlink("/dev/binderfs", "./binderfs" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1473 [pid 6494] <... symlink resumed>) = 0 [pid 6494] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6494] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6494] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6494] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6494] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1474]}, 88) = 1474 ./strace-static-x86_64: Process 6495 attached [pid 6494] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6494] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6494] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6495] <... rseq resumed>) = 0 [pid 6495] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6495] memfd_create("syzkaller", 0) = 3 [pid 6495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6495] munmap(0x7f15b9a45000, 524288) = 0 [pid 6495] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6495] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6495] close(3) = 0 [pid 6495] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6495] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6495] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6495] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6495] ioctl(4, LOOP_CLR_FD) = 0 [pid 6495] close(4) = 0 [pid 6495] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... futex resumed>) = 0 [pid 6494] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6494] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6494] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6494] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6495] <... futex resumed>) = 1 [pid 6495] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6494] <... clone3 resumed> => {parent_tid=[1475]}, 88) = 1475 ./strace-static-x86_64: Process 6496 attached [pid 6494] rt_sigprocmask(SIG_SETMASK, [], [pid 6496] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] <... mknodat resumed>) = 0 [pid 6494] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6494] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6496] <... rseq resumed>) = 0 [pid 6496] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6496] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6496] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6495] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6495] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] <... mount resumed>) = 0 [pid 6496] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6496] chdir(".") = 0 [pid 6496] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6494] <... futex resumed>) = 0 [pid 6494] close(3 [pid 6496] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6494] <... close resumed>) = 0 [pid 6494] close(4) = 0 [pid 6494] close(5) = -1 EBADF (Bad file descriptor) [pid 6494] close(6) = -1 EBADF (Bad file descriptor) [pid 6494] close(7) = -1 EBADF (Bad file descriptor) [pid 6494] close(8) = -1 EBADF (Bad file descriptor) [pid 6494] close(9) = -1 EBADF (Bad file descriptor) [pid 6494] close(10) = -1 EBADF (Bad file descriptor) [pid 6494] close(11) = -1 EBADF (Bad file descriptor) [pid 6494] close(12) = -1 EBADF (Bad file descriptor) [pid 6494] close(13) = -1 EBADF (Bad file descriptor) [pid 6494] close(14) = -1 EBADF (Bad file descriptor) [pid 6494] close(15) = -1 EBADF (Bad file descriptor) [pid 6494] close(16) = -1 EBADF (Bad file descriptor) [pid 6494] close(17) = -1 EBADF (Bad file descriptor) [pid 6494] close(18) = -1 EBADF (Bad file descriptor) [pid 6494] close(19) = -1 EBADF (Bad file descriptor) [pid 6494] close(20) = -1 EBADF (Bad file descriptor) [pid 6494] close(21) = -1 EBADF (Bad file descriptor) [pid 6494] close(22) = -1 EBADF (Bad file descriptor) [pid 6494] close(23) = -1 EBADF (Bad file descriptor) [pid 6494] close(24) = -1 EBADF (Bad file descriptor) [pid 6494] close(25) = -1 EBADF (Bad file descriptor) [pid 6494] close(26) = -1 EBADF (Bad file descriptor) [pid 6494] close(27) = -1 EBADF (Bad file descriptor) [pid 6494] close(28) = -1 EBADF (Bad file descriptor) [pid 6494] close(29) = -1 EBADF (Bad file descriptor) [pid 6494] exit_group(0 [pid 6496] <... futex resumed>) = ? [pid 6495] <... futex resumed>) = ? [pid 6494] <... exit_group resumed>) = ? [pid 6496] +++ exited with 0 +++ [pid 6495] +++ exited with 0 +++ [pid 6494] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1473, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./491", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./491/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./491/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./491") = 0 [pid 5019] mkdir("./492", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 79.740928][ T6495] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1476 ./strace-static-x86_64: Process 6497 attached [pid 6497] set_robust_list(0x555556a426a0, 24) = 0 [pid 6497] chdir("./492") = 0 [pid 6497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6497] setpgid(0, 0) = 0 [pid 6497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6497] write(3, "1000", 4) = 4 [pid 6497] close(3) = 0 [pid 6497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6497] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6497] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1477]}, 88) = 1477 [pid 6497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6497] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6498 attached [pid 6498] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6498] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6498] memfd_create("syzkaller", 0) = 3 [pid 6498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6498] munmap(0x7f15b9a45000, 524288) = 0 [pid 6498] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6498] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6498] close(3) = 0 [pid 6498] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6498] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6498] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6498] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6498] ioctl(4, LOOP_CLR_FD) = 0 [pid 6498] close(4) = 0 [pid 6498] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... futex resumed>) = 0 [pid 6497] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6497] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1478]}, 88) = 1478 ./strace-static-x86_64: Process 6499 attached [pid 6497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6497] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6498] <... futex resumed>) = 1 [pid 6498] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6499] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6499] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6498] <... mknodat resumed>) = 0 [pid 6499] mkdir(".", 0777 [pid 6498] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6498] <... futex resumed>) = 0 [pid 6498] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6499] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6499] chdir(".") = 0 [pid 6499] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... futex resumed>) = 0 [pid 6497] close(3) = 0 [pid 6497] close(4) = 0 [pid 6497] close(5) = -1 EBADF (Bad file descriptor) [pid 6497] close(6) = -1 EBADF (Bad file descriptor) [pid 6497] close(7) = -1 EBADF (Bad file descriptor) [pid 6497] close(8) = -1 EBADF (Bad file descriptor) [pid 6497] close(9) = -1 EBADF (Bad file descriptor) [pid 6497] close(10) = -1 EBADF (Bad file descriptor) [pid 6497] close(11) = -1 EBADF (Bad file descriptor) [pid 6497] close(12) = -1 EBADF (Bad file descriptor) [pid 6497] close(13) = -1 EBADF (Bad file descriptor) [pid 6497] close(14) = -1 EBADF (Bad file descriptor) [pid 6497] close(15) = -1 EBADF (Bad file descriptor) [pid 6497] close(16 [pid 6499] <... futex resumed>) = 1 [pid 6497] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6499] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] close(17) = -1 EBADF (Bad file descriptor) [pid 6497] close(18) = -1 EBADF (Bad file descriptor) [pid 6497] close(19) = -1 EBADF (Bad file descriptor) [pid 6497] close(20) = -1 EBADF (Bad file descriptor) [pid 6497] close(21) = -1 EBADF (Bad file descriptor) [pid 6497] close(22) = -1 EBADF (Bad file descriptor) [pid 6497] close(23) = -1 EBADF (Bad file descriptor) [pid 6497] close(24) = -1 EBADF (Bad file descriptor) [pid 6497] close(25) = -1 EBADF (Bad file descriptor) [pid 6497] close(26) = -1 EBADF (Bad file descriptor) [pid 6497] close(27) = -1 EBADF (Bad file descriptor) [pid 6497] close(28) = -1 EBADF (Bad file descriptor) [pid 6497] close(29) = -1 EBADF (Bad file descriptor) [pid 6497] exit_group(0 [pid 6499] <... futex resumed>) = ? [pid 6498] <... futex resumed>) = ? [pid 6497] <... exit_group resumed>) = ? [pid 6499] +++ exited with 0 +++ [pid 6498] +++ exited with 0 +++ [pid 6497] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1476, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./492", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./492/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./492/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./492") = 0 [pid 5019] mkdir("./493", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1479 [ 79.812786][ T6498] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6500 attached [pid 6500] set_robust_list(0x555556a426a0, 24) = 0 [pid 6500] chdir("./493") = 0 [pid 6500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6500] setpgid(0, 0) = 0 [pid 6500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6500] write(3, "1000", 4) = 4 [pid 6500] close(3) = 0 [pid 6500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6500] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6500] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6500] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6501 attached => {parent_tid=[1480]}, 88) = 1480 [pid 6501] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6501] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6500] rt_sigprocmask(SIG_SETMASK, [], [pid 6501] rt_sigprocmask(SIG_SETMASK, [], [pid 6500] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6501] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6500] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6501] <... futex resumed>) = 0 [pid 6501] memfd_create("syzkaller", 0) = 3 [pid 6501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6500] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6501] munmap(0x7f15b9a45000, 524288) = 0 [pid 6501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6501] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6501] close(3) = 0 [pid 6501] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6501] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6501] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6501] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6501] ioctl(4, LOOP_CLR_FD) = 0 [pid 6501] close(4) = 0 [pid 6501] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = 0 [pid 6500] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6500] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6500] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6501] <... futex resumed>) = 1 [pid 6500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1481]}, 88) = 1481 [pid 6500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6500] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6500] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6501] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6502 attached [pid 6502] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6501] <... mknodat resumed>) = 0 [pid 6501] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6501] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6502] <... rseq resumed>) = 0 [pid 6502] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6502] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6502] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6502] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6502] chdir(".") = 0 [pid 6502] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6500] <... futex resumed>) = 0 [pid 6500] close(3) = 0 [pid 6500] close(4) = 0 [pid 6500] close(5) = -1 EBADF (Bad file descriptor) [pid 6500] close(6) = -1 EBADF (Bad file descriptor) [pid 6500] close(7 [pid 6502] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6500] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6500] close(8) = -1 EBADF (Bad file descriptor) [pid 6500] close(9) = -1 EBADF (Bad file descriptor) [pid 6500] close(10) = -1 EBADF (Bad file descriptor) [pid 6500] close(11) = -1 EBADF (Bad file descriptor) [pid 6500] close(12) = -1 EBADF (Bad file descriptor) [pid 6500] close(13) = -1 EBADF (Bad file descriptor) [pid 6500] close(14) = -1 EBADF (Bad file descriptor) [pid 6500] close(15) = -1 EBADF (Bad file descriptor) [pid 6500] close(16) = -1 EBADF (Bad file descriptor) [pid 6500] close(17) = -1 EBADF (Bad file descriptor) [pid 6500] close(18) = -1 EBADF (Bad file descriptor) [pid 6500] close(19) = -1 EBADF (Bad file descriptor) [pid 6500] close(20) = -1 EBADF (Bad file descriptor) [pid 6500] close(21) = -1 EBADF (Bad file descriptor) [pid 6500] close(22) = -1 EBADF (Bad file descriptor) [pid 6500] close(23) = -1 EBADF (Bad file descriptor) [pid 6500] close(24) = -1 EBADF (Bad file descriptor) [pid 6500] close(25) = -1 EBADF (Bad file descriptor) [pid 6500] close(26) = -1 EBADF (Bad file descriptor) [pid 6500] close(27) = -1 EBADF (Bad file descriptor) [pid 6500] close(28) = -1 EBADF (Bad file descriptor) [pid 6500] close(29) = -1 EBADF (Bad file descriptor) [pid 6500] exit_group(0 [pid 6501] <... futex resumed>) = ? [pid 6500] <... exit_group resumed>) = ? [pid 6502] <... futex resumed>) = ? [pid 6501] +++ exited with 0 +++ [pid 6502] +++ exited with 0 +++ [pid 6500] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1479, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./493", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./493/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./493/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./493/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./493") = 0 [pid 5019] mkdir("./494", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 79.893605][ T6501] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1482 ./strace-static-x86_64: Process 6503 attached [pid 6503] set_robust_list(0x555556a426a0, 24) = 0 [pid 6503] chdir("./494") = 0 [pid 6503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6503] setpgid(0, 0) = 0 [pid 6503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6503] write(3, "1000", 4) = 4 [pid 6503] close(3) = 0 [pid 6503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6503] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6503] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6503] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6504 attached => {parent_tid=[1483]}, 88) = 1483 [pid 6504] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6504] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6504] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6503] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6503] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6504] memfd_create("syzkaller", 0) = 3 [pid 6504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6504] munmap(0x7f15b9a45000, 524288) = 0 [pid 6504] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6504] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6504] close(3) = 0 [pid 6504] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6504] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6504] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6504] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6504] ioctl(4, LOOP_CLR_FD) = 0 [pid 6504] close(4) = 0 [pid 6504] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... futex resumed>) = 0 [pid 6503] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6503] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1484]}, 88) = 1484 [pid 6503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6503] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6504] <... futex resumed>) = 1 [pid 6504] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6504] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6504] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6505 attached [pid 6505] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6505] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6505] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6505] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6505] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6505] chdir(".") = 0 [pid 6505] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6503] <... futex resumed>) = 0 [pid 6503] close(3) = 0 [pid 6503] close(4) = 0 [pid 6503] close(5) = -1 EBADF (Bad file descriptor) [pid 6503] close(6) = -1 EBADF (Bad file descriptor) [pid 6503] close(7) = -1 EBADF (Bad file descriptor) [pid 6503] close(8) = -1 EBADF (Bad file descriptor) [pid 6503] close(9) = -1 EBADF (Bad file descriptor) [pid 6503] close(10) = -1 EBADF (Bad file descriptor) [pid 6503] close(11) = -1 EBADF (Bad file descriptor) [pid 6503] close(12) = -1 EBADF (Bad file descriptor) [pid 6503] close(13) = -1 EBADF (Bad file descriptor) [pid 6503] close(14) = -1 EBADF (Bad file descriptor) [pid 6503] close(15) = -1 EBADF (Bad file descriptor) [pid 6503] close(16) = -1 EBADF (Bad file descriptor) [pid 6503] close(17) = -1 EBADF (Bad file descriptor) [pid 6503] close(18) = -1 EBADF (Bad file descriptor) [pid 6503] close(19) = -1 EBADF (Bad file descriptor) [pid 6503] close(20) = -1 EBADF (Bad file descriptor) [pid 6503] close(21) = -1 EBADF (Bad file descriptor) [pid 6503] close(22) = -1 EBADF (Bad file descriptor) [pid 6503] close(23) = -1 EBADF (Bad file descriptor) [pid 6503] close(24) = -1 EBADF (Bad file descriptor) [pid 6503] close(25) = -1 EBADF (Bad file descriptor) [pid 6503] close(26) = -1 EBADF (Bad file descriptor) [pid 6503] close(27) = -1 EBADF (Bad file descriptor) [pid 6503] close(28) = -1 EBADF (Bad file descriptor) [pid 6503] close(29) = -1 EBADF (Bad file descriptor) [pid 6503] exit_group(0 [pid 6504] <... futex resumed>) = ? [pid 6503] <... exit_group resumed>) = ? [pid 6504] +++ exited with 0 +++ [pid 6505] +++ exited with 0 +++ [pid 6503] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1482, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./494", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./494/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./494/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./494") = 0 [pid 5019] mkdir("./495", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1485 ./strace-static-x86_64: Process 6506 attached [pid 6506] set_robust_list(0x555556a426a0, 24) = 0 [pid 6506] chdir("./495") = 0 [pid 6506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6506] setpgid(0, 0) = 0 [pid 6506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6506] write(3, "1000", 4) = 4 [pid 6506] close(3) = 0 [pid 6506] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6506] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6506] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1486]}, 88) = 1486 [pid 6506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6506] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6507 attached [pid 6507] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6507] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6507] memfd_create("syzkaller", 0) = 3 [pid 6507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 79.972429][ T6504] loop0: detected capacity change from 0 to 1024 [pid 6507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6507] munmap(0x7f15b9a45000, 524288) = 0 [pid 6507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6507] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6507] close(3) = 0 [pid 6507] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6507] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6507] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6507] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6507] ioctl(4, LOOP_CLR_FD) = 0 [pid 6507] close(4) = 0 [pid 6507] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6506] <... futex resumed>) = 0 [pid 6507] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6506] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6507] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6506] <... futex resumed>) = 0 [pid 6506] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6506] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6508 attached [pid 6508] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6506] <... clone3 resumed> => {parent_tid=[1487]}, 88) = 1487 [pid 6507] <... mknodat resumed>) = 0 [pid 6507] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6507] <... futex resumed>) = 0 [pid 6506] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6507] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6508] <... rseq resumed>) = 0 [pid 6508] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6508] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6508] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6508] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6508] chdir(".") = 0 [pid 6508] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6506] <... futex resumed>) = 0 [pid 6506] close(3) = 0 [pid 6506] close(4) = 0 [pid 6508] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6506] close(5) = -1 EBADF (Bad file descriptor) [pid 6506] close(6) = -1 EBADF (Bad file descriptor) [pid 6506] close(7) = -1 EBADF (Bad file descriptor) [pid 6506] close(8) = -1 EBADF (Bad file descriptor) [pid 6506] close(9) = -1 EBADF (Bad file descriptor) [pid 6506] close(10) = -1 EBADF (Bad file descriptor) [pid 6506] close(11) = -1 EBADF (Bad file descriptor) [pid 6506] close(12) = -1 EBADF (Bad file descriptor) [pid 6506] close(13) = -1 EBADF (Bad file descriptor) [pid 6506] close(14) = -1 EBADF (Bad file descriptor) [pid 6506] close(15) = -1 EBADF (Bad file descriptor) [pid 6506] close(16) = -1 EBADF (Bad file descriptor) [pid 6506] close(17) = -1 EBADF (Bad file descriptor) [pid 6506] close(18) = -1 EBADF (Bad file descriptor) [pid 6506] close(19) = -1 EBADF (Bad file descriptor) [pid 6506] close(20) = -1 EBADF (Bad file descriptor) [pid 6506] close(21) = -1 EBADF (Bad file descriptor) [pid 6506] close(22) = -1 EBADF (Bad file descriptor) [pid 6506] close(23) = -1 EBADF (Bad file descriptor) [pid 6506] close(24) = -1 EBADF (Bad file descriptor) [pid 6506] close(25) = -1 EBADF (Bad file descriptor) [pid 6506] close(26) = -1 EBADF (Bad file descriptor) [pid 6506] close(27) = -1 EBADF (Bad file descriptor) [pid 6506] close(28) = -1 EBADF (Bad file descriptor) [pid 6506] close(29) = -1 EBADF (Bad file descriptor) [pid 6506] exit_group(0 [pid 6507] <... futex resumed>) = ? [pid 6506] <... exit_group resumed>) = ? [pid 6507] +++ exited with 0 +++ [pid 6508] <... futex resumed>) = ? [pid 6508] +++ exited with 0 +++ [pid 6506] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1485, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./495", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./495/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./495/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./495/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./495") = 0 [pid 5019] mkdir("./496", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1488 ./strace-static-x86_64: Process 6509 attached [pid 6509] set_robust_list(0x555556a426a0, 24) = 0 [pid 6509] chdir("./496") = 0 [pid 6509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6509] setpgid(0, 0) = 0 [pid 6509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6509] write(3, "1000", 4) = 4 [pid 6509] close(3) = 0 [pid 6509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6509] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6509] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1489]}, 88) = 1489 [pid 6509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6509] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6510 attached [pid 6510] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6510] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6510] memfd_create("syzkaller", 0) = 3 [pid 6510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 80.037666][ T6507] loop0: detected capacity change from 0 to 1024 [pid 6510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6510] munmap(0x7f15b9a45000, 524288) = 0 [pid 6510] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6510] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6510] close(3) = 0 [pid 6510] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6510] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6510] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6510] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6510] ioctl(4, LOOP_CLR_FD) = 0 [pid 6510] close(4) = 0 [pid 6510] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6509] <... futex resumed>) = 0 [pid 6510] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6509] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6509] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6509] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6510] <... futex resumed>) = 0 [pid 6509] <... mprotect resumed>) = 0 [pid 6509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6511 attached => {parent_tid=[1490]}, 88) = 1490 [pid 6511] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6509] rt_sigprocmask(SIG_SETMASK, [], [pid 6511] <... rseq resumed>) = 0 [pid 6509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6509] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6511] set_robust_list(0x7f15b9ac49a0, 24 [pid 6510] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6511] <... set_robust_list resumed>) = 0 [pid 6511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6511] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6511] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6510] <... mknodat resumed>) = 0 [pid 6510] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6510] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] <... mount resumed>) = 0 [pid 6511] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6511] chdir(".") = 0 [pid 6511] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6509] <... futex resumed>) = 0 [pid 6509] close(3) = 0 [pid 6509] close(4) = 0 [pid 6509] close(5) = -1 EBADF (Bad file descriptor) [pid 6509] close(6) = -1 EBADF (Bad file descriptor) [pid 6509] close(7) = -1 EBADF (Bad file descriptor) [pid 6509] close(8) = -1 EBADF (Bad file descriptor) [pid 6509] close(9) = -1 EBADF (Bad file descriptor) [pid 6509] close(10) = -1 EBADF (Bad file descriptor) [pid 6509] close(11) = -1 EBADF (Bad file descriptor) [pid 6509] close(12) = -1 EBADF (Bad file descriptor) [pid 6509] close(13) = -1 EBADF (Bad file descriptor) [pid 6509] close(14) = -1 EBADF (Bad file descriptor) [pid 6509] close(15) = -1 EBADF (Bad file descriptor) [pid 6509] close(16) = -1 EBADF (Bad file descriptor) [pid 6509] close(17) = -1 EBADF (Bad file descriptor) [pid 6509] close(18) = -1 EBADF (Bad file descriptor) [pid 6509] close(19) = -1 EBADF (Bad file descriptor) [pid 6509] close(20) = -1 EBADF (Bad file descriptor) [pid 6509] close(21) = -1 EBADF (Bad file descriptor) [pid 6509] close(22) = -1 EBADF (Bad file descriptor) [pid 6509] close(23) = -1 EBADF (Bad file descriptor) [pid 6509] close(24) = -1 EBADF (Bad file descriptor) [pid 6509] close(25) = -1 EBADF (Bad file descriptor) [pid 6511] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6509] close(26) = -1 EBADF (Bad file descriptor) [pid 6509] close(27) = -1 EBADF (Bad file descriptor) [pid 6509] close(28) = -1 EBADF (Bad file descriptor) [pid 6509] close(29) = -1 EBADF (Bad file descriptor) [pid 6509] exit_group(0 [pid 6510] <... futex resumed>) = ? [pid 6509] <... exit_group resumed>) = ? [pid 6511] <... futex resumed>) = ? [pid 6510] +++ exited with 0 +++ [pid 6511] +++ exited with 0 +++ [pid 6509] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1488, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./496", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./496/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./496/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./496") = 0 [pid 5019] mkdir("./497", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1491 ./strace-static-x86_64: Process 6512 attached [pid 6512] set_robust_list(0x555556a426a0, 24) = 0 [pid 6512] chdir("./497") = 0 [pid 6512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6512] setpgid(0, 0) = 0 [pid 6512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6512] write(3, "1000", 4) = 4 [pid 6512] close(3) = 0 [pid 6512] symlink("/dev/binderfs", "./binderfs") = 0 [ 80.104147][ T6510] loop0: detected capacity change from 0 to 1024 [pid 6512] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6512] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6512] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6513 attached => {parent_tid=[1492]}, 88) = 1492 [pid 6512] rt_sigprocmask(SIG_SETMASK, [], [pid 6513] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6513] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6513] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6513] <... futex resumed>) = 0 [pid 6512] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6513] memfd_create("syzkaller", 0) = 3 [pid 6513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6513] munmap(0x7f15b9a45000, 524288) = 0 [pid 6513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6513] close(3) = 0 [pid 6513] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6513] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6513] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6513] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6513] ioctl(4, LOOP_CLR_FD) = 0 [pid 6513] close(4) = 0 [pid 6513] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... futex resumed>) = 0 [pid 6513] <... futex resumed>) = 1 [pid 6512] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6512] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6512] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6514 attached => {parent_tid=[1493]}, 88) = 1493 [pid 6514] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6514] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6514] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6512] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6514] <... futex resumed>) = 0 [pid 6512] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6514] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6514] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6513] <... mknodat resumed>) = 0 [pid 6513] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6514] <... mount resumed>) = 0 [pid 6514] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6513] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6514] chdir(".") = 0 [pid 6514] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6514] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] <... futex resumed>) = 0 [pid 6512] close(3) = 0 [pid 6512] close(4) = 0 [pid 6512] close(5) = -1 EBADF (Bad file descriptor) [pid 6512] close(6) = -1 EBADF (Bad file descriptor) [pid 6512] close(7) = -1 EBADF (Bad file descriptor) [pid 6512] close(8) = -1 EBADF (Bad file descriptor) [pid 6512] close(9) = -1 EBADF (Bad file descriptor) [pid 6512] close(10) = -1 EBADF (Bad file descriptor) [pid 6512] close(11) = -1 EBADF (Bad file descriptor) [pid 6512] close(12) = -1 EBADF (Bad file descriptor) [pid 6512] close(13) = -1 EBADF (Bad file descriptor) [pid 6512] close(14) = -1 EBADF (Bad file descriptor) [pid 6512] close(15) = -1 EBADF (Bad file descriptor) [pid 6512] close(16) = -1 EBADF (Bad file descriptor) [pid 6512] close(17) = -1 EBADF (Bad file descriptor) [pid 6512] close(18) = -1 EBADF (Bad file descriptor) [pid 6512] close(19) = -1 EBADF (Bad file descriptor) [pid 6512] close(20) = -1 EBADF (Bad file descriptor) [pid 6512] close(21) = -1 EBADF (Bad file descriptor) [pid 6512] close(22) = -1 EBADF (Bad file descriptor) [pid 6512] close(23) = -1 EBADF (Bad file descriptor) [pid 6512] close(24) = -1 EBADF (Bad file descriptor) [pid 6512] close(25) = -1 EBADF (Bad file descriptor) [pid 6512] close(26) = -1 EBADF (Bad file descriptor) [pid 6512] close(27) = -1 EBADF (Bad file descriptor) [pid 6512] close(28) = -1 EBADF (Bad file descriptor) [pid 6512] close(29) = -1 EBADF (Bad file descriptor) [pid 6512] exit_group(0) = ? [pid 6514] <... futex resumed>) = ? [pid 6513] <... futex resumed>) = ? [pid 6514] +++ exited with 0 +++ [pid 6513] +++ exited with 0 +++ [pid 6512] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1491, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./497", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./497/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./497/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./497") = 0 [pid 5019] mkdir("./498", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1494 ./strace-static-x86_64: Process 6515 attached [pid 6515] set_robust_list(0x555556a426a0, 24) = 0 [pid 6515] chdir("./498") = 0 [pid 6515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6515] setpgid(0, 0) = 0 [pid 6515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6515] write(3, "1000", 4) = 4 [pid 6515] close(3) = 0 [pid 6515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6515] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 80.178285][ T6513] loop0: detected capacity change from 0 to 1024 [pid 6515] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6515] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6515] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6515] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6516 attached => {parent_tid=[1495]}, 88) = 1495 [pid 6516] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6516] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6516] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6515] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6515] <... futex resumed>) = 0 [pid 6515] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6516] memfd_create("syzkaller", 0) = 3 [pid 6516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6516] munmap(0x7f15b9a45000, 524288) = 0 [pid 6516] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6516] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6516] close(3) = 0 [pid 6516] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6516] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6516] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6516] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6516] ioctl(4, LOOP_CLR_FD) = 0 [pid 6516] close(4) = 0 [pid 6516] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6515] <... futex resumed>) = 0 [pid 6516] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6515] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6515] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6516] <... mknodat resumed>) = 0 [pid 6515] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6515] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6516] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6515] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6517 attached => {parent_tid=[1496]}, 88) = 1496 [pid 6517] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6515] rt_sigprocmask(SIG_SETMASK, [], [pid 6517] <... rseq resumed>) = 0 [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6517] set_robust_list(0x7f15b9ac49a0, 24 [pid 6515] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6515] <... futex resumed>) = 0 [pid 6515] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6517] <... set_robust_list resumed>) = 0 [pid 6517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6517] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6517] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6517] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6517] chdir(".") = 0 [pid 6517] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6515] <... futex resumed>) = 0 [pid 6515] close(3) = 0 [pid 6515] close(4) = 0 [pid 6515] close(5) = -1 EBADF (Bad file descriptor) [pid 6515] close(6) = -1 EBADF (Bad file descriptor) [pid 6515] close(7) = -1 EBADF (Bad file descriptor) [pid 6515] close(8) = -1 EBADF (Bad file descriptor) [pid 6515] close(9) = -1 EBADF (Bad file descriptor) [pid 6515] close(10) = -1 EBADF (Bad file descriptor) [pid 6515] close(11) = -1 EBADF (Bad file descriptor) [pid 6515] close(12) = -1 EBADF (Bad file descriptor) [pid 6515] close(13) = -1 EBADF (Bad file descriptor) [pid 6515] close(14) = -1 EBADF (Bad file descriptor) [pid 6517] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6515] close(15) = -1 EBADF (Bad file descriptor) [pid 6515] close(16) = -1 EBADF (Bad file descriptor) [pid 6515] close(17) = -1 EBADF (Bad file descriptor) [pid 6515] close(18) = -1 EBADF (Bad file descriptor) [pid 6515] close(19) = -1 EBADF (Bad file descriptor) [pid 6515] close(20) = -1 EBADF (Bad file descriptor) [pid 6515] close(21) = -1 EBADF (Bad file descriptor) [pid 6515] close(22) = -1 EBADF (Bad file descriptor) [pid 6515] close(23) = -1 EBADF (Bad file descriptor) [pid 6515] close(24) = -1 EBADF (Bad file descriptor) [pid 6515] close(25) = -1 EBADF (Bad file descriptor) [pid 6515] close(26) = -1 EBADF (Bad file descriptor) [pid 6515] close(27) = -1 EBADF (Bad file descriptor) [pid 6515] close(28) = -1 EBADF (Bad file descriptor) [pid 6515] close(29) = -1 EBADF (Bad file descriptor) [pid 6515] exit_group(0) = ? [pid 6517] <... futex resumed>) = ? [pid 6516] <... futex resumed>) = ? [pid 6517] +++ exited with 0 +++ [pid 6516] +++ exited with 0 +++ [pid 6515] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1494, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./498", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./498/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./498/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./498") = 0 [pid 5019] mkdir("./499", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 80.249277][ T6516] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6518 attached [pid 6518] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1497 [pid 6518] <... set_robust_list resumed>) = 0 [pid 6518] chdir("./499") = 0 [pid 6518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6518] setpgid(0, 0) = 0 [pid 6518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6518] write(3, "1000", 4) = 4 [pid 6518] close(3) = 0 [pid 6518] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6518] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6518] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6518] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6518] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6518] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6518] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6519 attached [pid 6519] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6518] <... clone3 resumed> => {parent_tid=[1498]}, 88) = 1498 [pid 6519] <... rseq resumed>) = 0 [pid 6519] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6519] rt_sigprocmask(SIG_SETMASK, [], [pid 6518] rt_sigprocmask(SIG_SETMASK, [], [pid 6519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6518] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6518] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6519] <... futex resumed>) = 0 [pid 6518] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6519] memfd_create("syzkaller", 0) = 3 [pid 6519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6519] munmap(0x7f15b9a45000, 524288) = 0 [pid 6519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6519] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6519] close(3) = 0 [pid 6519] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6519] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6519] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6519] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6519] ioctl(4, LOOP_CLR_FD) = 0 [pid 6519] close(4) = 0 [pid 6519] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6518] <... futex resumed>) = 0 [pid 6518] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6518] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6518] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6518] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6518] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6519] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6518] <... clone3 resumed> => {parent_tid=[1499]}, 88) = 1499 [pid 6518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6518] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6518] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6520 attached [pid 6520] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6520] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6520] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6520] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6520] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6520] chdir(".") = 0 [pid 6520] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 0 [pid 6520] <... futex resumed>) = 1 [pid 6520] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] <... mknodat resumed>) = 0 [pid 6519] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6519] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6518] close(3) = 0 [pid 6518] close(4) = 0 [pid 6518] close(5) = -1 EBADF (Bad file descriptor) [pid 6518] close(6) = -1 EBADF (Bad file descriptor) [pid 6518] close(7) = -1 EBADF (Bad file descriptor) [pid 6518] close(8) = -1 EBADF (Bad file descriptor) [pid 6518] close(9) = -1 EBADF (Bad file descriptor) [pid 6518] close(10) = -1 EBADF (Bad file descriptor) [pid 6518] close(11) = -1 EBADF (Bad file descriptor) [pid 6518] close(12) = -1 EBADF (Bad file descriptor) [pid 6518] close(13) = -1 EBADF (Bad file descriptor) [pid 6518] close(14) = -1 EBADF (Bad file descriptor) [pid 6518] close(15) = -1 EBADF (Bad file descriptor) [pid 6518] close(16) = -1 EBADF (Bad file descriptor) [pid 6518] close(17) = -1 EBADF (Bad file descriptor) [pid 6518] close(18) = -1 EBADF (Bad file descriptor) [pid 6518] close(19) = -1 EBADF (Bad file descriptor) [pid 6518] close(20) = -1 EBADF (Bad file descriptor) [pid 6518] close(21) = -1 EBADF (Bad file descriptor) [pid 6518] close(22) = -1 EBADF (Bad file descriptor) [pid 6518] close(23) = -1 EBADF (Bad file descriptor) [pid 6518] close(24) = -1 EBADF (Bad file descriptor) [pid 6518] close(25) = -1 EBADF (Bad file descriptor) [pid 6518] close(26) = -1 EBADF (Bad file descriptor) [pid 6518] close(27) = -1 EBADF (Bad file descriptor) [pid 6518] close(28) = -1 EBADF (Bad file descriptor) [pid 6518] close(29) = -1 EBADF (Bad file descriptor) [pid 6518] exit_group(0 [pid 6519] <... futex resumed>) = ? [pid 6518] <... exit_group resumed>) = ? [pid 6519] +++ exited with 0 +++ [pid 6520] <... futex resumed>) = ? [pid 6520] +++ exited with 0 +++ [pid 6518] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1497, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./499", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./499/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./499/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./499") = 0 [pid 5019] mkdir("./500", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 80.330473][ T6519] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1500 ./strace-static-x86_64: Process 6521 attached [pid 6521] set_robust_list(0x555556a426a0, 24) = 0 [pid 6521] chdir("./500") = 0 [pid 6521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6521] setpgid(0, 0) = 0 [pid 6521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6521] write(3, "1000", 4) = 4 [pid 6521] close(3) = 0 [pid 6521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6521] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6521] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6521] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1501]}, 88) = 1501 [pid 6521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6521] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6521] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6522 attached [pid 6522] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6522] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6522] memfd_create("syzkaller", 0) = 3 [pid 6522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6522] munmap(0x7f15b9a45000, 524288) = 0 [pid 6522] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6522] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6522] close(3) = 0 [pid 6522] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6522] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6522] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6522] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6522] ioctl(4, LOOP_CLR_FD) = 0 [pid 6522] close(4) = 0 [pid 6522] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6522] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] <... futex resumed>) = 0 [pid 6521] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6522] <... futex resumed>) = 0 [pid 6522] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6521] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6521] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1502]}, 88) = 1502 [pid 6521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6521] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6521] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6523 attached [pid 6523] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6523] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6523] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6522] <... mknodat resumed>) = 0 [pid 6523] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6522] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6522] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] <... mount resumed>) = 0 [pid 6523] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6523] chdir(".") = 0 [pid 6523] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = 0 [pid 6523] <... futex resumed>) = 1 [pid 6521] close(3) = 0 [pid 6521] close(4) = 0 [pid 6521] close(5) = -1 EBADF (Bad file descriptor) [pid 6521] close(6) = -1 EBADF (Bad file descriptor) [pid 6521] close(7) = -1 EBADF (Bad file descriptor) [pid 6521] close(8) = -1 EBADF (Bad file descriptor) [pid 6521] close(9) = -1 EBADF (Bad file descriptor) [pid 6521] close(10) = -1 EBADF (Bad file descriptor) [pid 6521] close(11) = -1 EBADF (Bad file descriptor) [pid 6521] close(12) = -1 EBADF (Bad file descriptor) [pid 6521] close(13) = -1 EBADF (Bad file descriptor) [pid 6521] close(14) = -1 EBADF (Bad file descriptor) [pid 6521] close(15) = -1 EBADF (Bad file descriptor) [pid 6521] close(16) = -1 EBADF (Bad file descriptor) [pid 6521] close(17) = -1 EBADF (Bad file descriptor) [pid 6521] close(18 [pid 6523] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6521] close(19) = -1 EBADF (Bad file descriptor) [pid 6521] close(20) = -1 EBADF (Bad file descriptor) [pid 6521] close(21) = -1 EBADF (Bad file descriptor) [pid 6521] close(22) = -1 EBADF (Bad file descriptor) [pid 6521] close(23) = -1 EBADF (Bad file descriptor) [pid 6521] close(24) = -1 EBADF (Bad file descriptor) [pid 6521] close(25) = -1 EBADF (Bad file descriptor) [pid 6521] close(26) = -1 EBADF (Bad file descriptor) [pid 6521] close(27) = -1 EBADF (Bad file descriptor) [pid 6521] close(28) = -1 EBADF (Bad file descriptor) [pid 6521] close(29) = -1 EBADF (Bad file descriptor) [pid 6521] exit_group(0 [pid 6523] <... futex resumed>) = ? [pid 6522] <... futex resumed>) = ? [pid 6521] <... exit_group resumed>) = ? [pid 6523] +++ exited with 0 +++ [pid 6522] +++ exited with 0 +++ [pid 6521] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1500, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./500", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./500/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./500/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./500") = 0 [pid 5019] mkdir("./501", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 80.408770][ T6522] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1503 ./strace-static-x86_64: Process 6524 attached [pid 6524] set_robust_list(0x555556a426a0, 24) = 0 [pid 6524] chdir("./501") = 0 [pid 6524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6524] setpgid(0, 0) = 0 [pid 6524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6524] write(3, "1000", 4) = 4 [pid 6524] close(3) = 0 [pid 6524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6524] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6524] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6524] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6524] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1504]}, 88) = 1504 ./strace-static-x86_64: Process 6525 attached [pid 6524] rt_sigprocmask(SIG_SETMASK, [], [pid 6525] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6525] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6525] rt_sigprocmask(SIG_SETMASK, [], [pid 6524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6524] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6525] memfd_create("syzkaller", 0 [pid 6524] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6525] <... memfd_create resumed>) = 3 [pid 6525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6525] munmap(0x7f15b9a45000, 524288) = 0 [pid 6525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6525] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6525] close(3) = 0 [pid 6525] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6525] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6525] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6525] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6525] ioctl(4, LOOP_CLR_FD) = 0 [pid 6525] close(4) = 0 [pid 6525] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = 0 [pid 6524] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6524] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6524] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6524] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1505]}, 88) = 1505 [pid 6524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6524] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6524] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6525] <... futex resumed>) = 1 [pid 6525] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6526 attached [pid 6526] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6526] set_robust_list(0x7f15b9ac49a0, 24 [pid 6525] <... mknodat resumed>) = 0 [pid 6526] <... set_robust_list resumed>) = 0 [pid 6526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6526] mkdir(".", 0777 [pid 6525] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6526] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6525] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6526] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6526] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6526] chdir(".") = 0 [pid 6526] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = 0 [pid 6524] close(3) = 0 [pid 6524] close(4) = 0 [pid 6524] close(5) = -1 EBADF (Bad file descriptor) [pid 6524] close(6) = -1 EBADF (Bad file descriptor) [pid 6524] close(7) = -1 EBADF (Bad file descriptor) [pid 6524] close(8) = -1 EBADF (Bad file descriptor) [pid 6524] close(9) = -1 EBADF (Bad file descriptor) [pid 6524] close(10) = -1 EBADF (Bad file descriptor) [pid 6524] close(11) = -1 EBADF (Bad file descriptor) [pid 6524] close(12) = -1 EBADF (Bad file descriptor) [pid 6524] close(13) = -1 EBADF (Bad file descriptor) [pid 6524] close(14) = -1 EBADF (Bad file descriptor) [pid 6524] close(15) = -1 EBADF (Bad file descriptor) [pid 6524] close(16) = -1 EBADF (Bad file descriptor) [pid 6524] close(17) = -1 EBADF (Bad file descriptor) [pid 6524] close(18) = -1 EBADF (Bad file descriptor) [pid 6524] close(19) = -1 EBADF (Bad file descriptor) [pid 6524] close(20) = -1 EBADF (Bad file descriptor) [pid 6524] close(21) = -1 EBADF (Bad file descriptor) [pid 6524] close(22) = -1 EBADF (Bad file descriptor) [pid 6524] close(23) = -1 EBADF (Bad file descriptor) [pid 6524] close(24) = -1 EBADF (Bad file descriptor) [pid 6524] close(25) = -1 EBADF (Bad file descriptor) [pid 6524] close(26) = -1 EBADF (Bad file descriptor) [pid 6524] close(27) = -1 EBADF (Bad file descriptor) [pid 6524] close(28) = -1 EBADF (Bad file descriptor) [pid 6524] close(29) = -1 EBADF (Bad file descriptor) [pid 6524] exit_group(0 [pid 6525] <... futex resumed>) = ? [pid 6524] <... exit_group resumed>) = ? [pid 6525] +++ exited with 0 +++ [pid 6526] <... futex resumed>) = ? [pid 6526] +++ exited with 0 +++ [pid 6524] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1503, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./501", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./501/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./501/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./501/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./501") = 0 [pid 5019] mkdir("./502", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1506 ./strace-static-x86_64: Process 6527 attached [pid 6527] set_robust_list(0x555556a426a0, 24) = 0 [pid 6527] chdir("./502") = 0 [pid 6527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6527] setpgid(0, 0) = 0 [pid 6527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 80.493762][ T6525] loop0: detected capacity change from 0 to 1024 [pid 6527] write(3, "1000", 4) = 4 [pid 6527] close(3) = 0 [pid 6527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6527] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6527] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6527] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6528 attached [pid 6528] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6528] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6528] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6527] <... clone3 resumed> => {parent_tid=[1507]}, 88) = 1507 [pid 6527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6527] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6528] <... futex resumed>) = 0 [pid 6528] memfd_create("syzkaller", 0 [pid 6527] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6528] <... memfd_create resumed>) = 3 [pid 6528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6528] munmap(0x7f15b9a45000, 524288) = 0 [pid 6528] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6528] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6528] close(3) = 0 [pid 6528] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6528] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6528] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6528] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6528] ioctl(4, LOOP_CLR_FD) = 0 [pid 6528] close(4) = 0 [pid 6528] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6528] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6527] <... futex resumed>) = 0 [pid 6527] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6527] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6527] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1508]}, 88) = 1508 [pid 6527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6527] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6529 attached [pid 6527] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6528] <... futex resumed>) = 0 [pid 6528] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6529] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6529] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6529] rt_sigprocmask(SIG_SETMASK, [], [pid 6528] <... mknodat resumed>) = 0 [pid 6529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6528] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6529] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6528] <... futex resumed>) = 0 [pid 6528] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] <... mount resumed>) = 0 [pid 6529] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6529] chdir(".") = 0 [pid 6529] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6527] <... futex resumed>) = 0 [pid 6527] close(3 [pid 6529] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6527] <... close resumed>) = 0 [pid 6527] close(4) = 0 [pid 6527] close(5) = -1 EBADF (Bad file descriptor) [pid 6527] close(6) = -1 EBADF (Bad file descriptor) [pid 6527] close(7) = -1 EBADF (Bad file descriptor) [pid 6527] close(8) = -1 EBADF (Bad file descriptor) [pid 6527] close(9) = -1 EBADF (Bad file descriptor) [pid 6527] close(10) = -1 EBADF (Bad file descriptor) [pid 6527] close(11) = -1 EBADF (Bad file descriptor) [pid 6527] close(12) = -1 EBADF (Bad file descriptor) [pid 6527] close(13) = -1 EBADF (Bad file descriptor) [pid 6527] close(14) = -1 EBADF (Bad file descriptor) [pid 6527] close(15) = -1 EBADF (Bad file descriptor) [pid 6527] close(16) = -1 EBADF (Bad file descriptor) [pid 6527] close(17) = -1 EBADF (Bad file descriptor) [pid 6527] close(18) = -1 EBADF (Bad file descriptor) [pid 6527] close(19) = -1 EBADF (Bad file descriptor) [pid 6527] close(20) = -1 EBADF (Bad file descriptor) [pid 6527] close(21) = -1 EBADF (Bad file descriptor) [pid 6527] close(22) = -1 EBADF (Bad file descriptor) [pid 6527] close(23) = -1 EBADF (Bad file descriptor) [pid 6527] close(24) = -1 EBADF (Bad file descriptor) [pid 6527] close(25) = -1 EBADF (Bad file descriptor) [pid 6527] close(26) = -1 EBADF (Bad file descriptor) [pid 6527] close(27) = -1 EBADF (Bad file descriptor) [pid 6527] close(28) = -1 EBADF (Bad file descriptor) [pid 6527] close(29) = -1 EBADF (Bad file descriptor) [pid 6527] exit_group(0 [pid 6529] <... futex resumed>) = ? [pid 6528] <... futex resumed>) = ? [pid 6527] <... exit_group resumed>) = ? [pid 6529] +++ exited with 0 +++ [pid 6528] +++ exited with 0 +++ [pid 6527] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1506, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./502", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./502/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./502/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./502") = 0 [pid 5019] mkdir("./503", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6530 attached [pid 6530] set_robust_list(0x555556a426a0, 24) = 0 [pid 6530] chdir("./503" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1509 [pid 6530] <... chdir resumed>) = 0 [ 80.568607][ T6528] loop0: detected capacity change from 0 to 1024 [pid 6530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6530] setpgid(0, 0) = 0 [pid 6530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6530] write(3, "1000", 4) = 4 [pid 6530] close(3) = 0 [pid 6530] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6530] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6530] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1510]}, 88) = 1510 [pid 6530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6530] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6531 attached [pid 6531] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6531] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6531] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6531] memfd_create("syzkaller", 0) = 3 [pid 6531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6531] munmap(0x7f15b9a45000, 524288) = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6531] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6531] close(3) = 0 [pid 6531] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6531] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6531] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6531] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6531] ioctl(4, LOOP_CLR_FD) = 0 [pid 6531] close(4) = 0 [pid 6531] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6530] <... futex resumed>) = 0 [pid 6531] <... futex resumed>) = 1 [pid 6531] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6530] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6530] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6532 attached [pid 6532] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6532] set_robust_list(0x7f15b9ac49a0, 24 [pid 6530] <... clone3 resumed> => {parent_tid=[1511]}, 88) = 1511 [pid 6530] rt_sigprocmask(SIG_SETMASK, [], [pid 6532] <... set_robust_list resumed>) = 0 [pid 6530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6532] rt_sigprocmask(SIG_SETMASK, [], [pid 6530] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] <... futex resumed>) = 0 [pid 6530] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6532] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6532] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6531] <... mknodat resumed>) = 0 [pid 6531] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6532] <... mount resumed>) = 0 [pid 6532] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6532] chdir(".") = 0 [pid 6532] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6530] <... futex resumed>) = 0 [pid 6530] close(3) = 0 [pid 6530] close(4) = 0 [pid 6530] close(5) = -1 EBADF (Bad file descriptor) [pid 6530] close(6) = -1 EBADF (Bad file descriptor) [pid 6530] close(7) = -1 EBADF (Bad file descriptor) [pid 6530] close(8) = -1 EBADF (Bad file descriptor) [pid 6530] close(9) = -1 EBADF (Bad file descriptor) [pid 6530] close(10) = -1 EBADF (Bad file descriptor) [pid 6530] close(11) = -1 EBADF (Bad file descriptor) [pid 6530] close(12) = -1 EBADF (Bad file descriptor) [pid 6530] close(13) = -1 EBADF (Bad file descriptor) [pid 6530] close(14) = -1 EBADF (Bad file descriptor) [pid 6530] close(15) = -1 EBADF (Bad file descriptor) [pid 6530] close(16 [pid 6532] <... futex resumed>) = 1 [pid 6530] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6532] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6530] close(17) = -1 EBADF (Bad file descriptor) [pid 6530] close(18) = -1 EBADF (Bad file descriptor) [pid 6530] close(19) = -1 EBADF (Bad file descriptor) [pid 6530] close(20) = -1 EBADF (Bad file descriptor) [pid 6530] close(21) = -1 EBADF (Bad file descriptor) [pid 6530] close(22) = -1 EBADF (Bad file descriptor) [pid 6530] close(23) = -1 EBADF (Bad file descriptor) [pid 6530] close(24) = -1 EBADF (Bad file descriptor) [pid 6530] close(25) = -1 EBADF (Bad file descriptor) [pid 6530] close(26) = -1 EBADF (Bad file descriptor) [pid 6530] close(27) = -1 EBADF (Bad file descriptor) [pid 6530] close(28) = -1 EBADF (Bad file descriptor) [pid 6530] close(29) = -1 EBADF (Bad file descriptor) [pid 6530] exit_group(0 [pid 6532] <... futex resumed>) = ? [pid 6531] <... futex resumed>) = ? [pid 6530] <... exit_group resumed>) = ? [pid 6532] +++ exited with 0 +++ [pid 6531] +++ exited with 0 +++ [pid 6530] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1509, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./503", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./503/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./503/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./503") = 0 [pid 5019] mkdir("./504", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1512 ./strace-static-x86_64: Process 6533 attached [pid 6533] set_robust_list(0x555556a426a0, 24) = 0 [pid 6533] chdir("./504") = 0 [pid 6533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6533] setpgid(0, 0) = 0 [pid 6533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6533] write(3, "1000", 4) = 4 [pid 6533] close(3) = 0 [pid 6533] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6533] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6533] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6533] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1513]}, 88) = 1513 [pid 6533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6533] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6534 attached [pid 6534] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6534] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6534] memfd_create("syzkaller", 0) = 3 [pid 6534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 80.642222][ T6531] loop0: detected capacity change from 0 to 1024 [pid 6534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6534] munmap(0x7f15b9a45000, 524288) = 0 [pid 6534] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6534] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6534] close(3) = 0 [pid 6534] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6534] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6534] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6534] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6534] ioctl(4, LOOP_CLR_FD) = 0 [pid 6534] close(4) = 0 [pid 6534] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6534] <... futex resumed>) = 1 [pid 6534] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6533] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6533] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6533] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1514]}, 88) = 1514 ./strace-static-x86_64: Process 6535 attached [pid 6535] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6534] <... mknodat resumed>) = 0 [pid 6533] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] <... futex resumed>) = 0 [pid 6534] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6533] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6535] <... rseq resumed>) = 0 [pid 6535] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6535] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6535] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6535] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6535] chdir(".") = 0 [pid 6535] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] close(3) = 0 [pid 6533] close(4) = 0 [pid 6533] close(5) = -1 EBADF (Bad file descriptor) [pid 6533] close(6) = -1 EBADF (Bad file descriptor) [pid 6533] close(7) = -1 EBADF (Bad file descriptor) [pid 6533] close(8) = -1 EBADF (Bad file descriptor) [pid 6533] close(9) = -1 EBADF (Bad file descriptor) [pid 6533] close(10) = -1 EBADF (Bad file descriptor) [pid 6533] close(11) = -1 EBADF (Bad file descriptor) [pid 6533] close(12) = -1 EBADF (Bad file descriptor) [pid 6533] close(13) = -1 EBADF (Bad file descriptor) [pid 6533] close(14) = -1 EBADF (Bad file descriptor) [pid 6533] close(15) = -1 EBADF (Bad file descriptor) [pid 6533] close(16) = -1 EBADF (Bad file descriptor) [pid 6533] close(17) = -1 EBADF (Bad file descriptor) [pid 6533] close(18) = -1 EBADF (Bad file descriptor) [pid 6533] close(19) = -1 EBADF (Bad file descriptor) [pid 6533] close(20) = -1 EBADF (Bad file descriptor) [pid 6533] close(21) = -1 EBADF (Bad file descriptor) [pid 6533] close(22) = -1 EBADF (Bad file descriptor) [pid 6533] close(23) = -1 EBADF (Bad file descriptor) [pid 6533] close(24) = -1 EBADF (Bad file descriptor) [pid 6533] close(25) = -1 EBADF (Bad file descriptor) [pid 6533] close(26) = -1 EBADF (Bad file descriptor) [pid 6533] close(27) = -1 EBADF (Bad file descriptor) [pid 6533] close(28) = -1 EBADF (Bad file descriptor) [pid 6533] close(29) = -1 EBADF (Bad file descriptor) [pid 6533] exit_group(0 [pid 6534] <... futex resumed>) = ? [pid 6533] <... exit_group resumed>) = ? [pid 6534] +++ exited with 0 +++ [pid 6535] <... futex resumed>) = ? [pid 6535] +++ exited with 0 +++ [pid 6533] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1512, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./504", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./504/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./504/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./504/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./504") = 0 [pid 5019] mkdir("./505", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1515 ./strace-static-x86_64: Process 6536 attached [pid 6536] set_robust_list(0x555556a426a0, 24) = 0 [pid 6536] chdir("./505") = 0 [pid 6536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6536] setpgid(0, 0) = 0 [pid 6536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6536] write(3, "1000", 4) = 4 [ 80.707542][ T6534] loop0: detected capacity change from 0 to 1024 [pid 6536] close(3) = 0 [pid 6536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6536] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6536] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6537 attached [pid 6537] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6537] set_robust_list(0x7f15c1e659a0, 24 [pid 6536] <... clone3 resumed> => {parent_tid=[1516]}, 88) = 1516 [pid 6536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6537] <... set_robust_list resumed>) = 0 [pid 6536] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] memfd_create("syzkaller", 0) = 3 [pid 6537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6537] munmap(0x7f15b9a45000, 524288) = 0 [pid 6537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6537] close(3) = 0 [pid 6537] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6537] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6537] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6537] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6537] ioctl(4, LOOP_CLR_FD) = 0 [pid 6537] close(4) = 0 [pid 6537] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6536] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1517]}, 88) = 1517 [pid 6536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6536] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6536] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6538 attached ) = 0 [pid 6538] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6538] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6538] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6538] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6537] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] <... mount resumed>) = 0 [pid 6538] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6538] chdir(".") = 0 [pid 6538] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = 0 [pid 6536] close(3) = 0 [pid 6536] close(4) = 0 [pid 6536] close(5) = -1 EBADF (Bad file descriptor) [pid 6536] close(6) = -1 EBADF (Bad file descriptor) [pid 6538] <... futex resumed>) = 1 [pid 6536] close(7 [pid 6538] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6536] close(8) = -1 EBADF (Bad file descriptor) [pid 6536] close(9) = -1 EBADF (Bad file descriptor) [pid 6536] close(10) = -1 EBADF (Bad file descriptor) [pid 6536] close(11) = -1 EBADF (Bad file descriptor) [pid 6536] close(12) = -1 EBADF (Bad file descriptor) [pid 6536] close(13) = -1 EBADF (Bad file descriptor) [pid 6536] close(14) = -1 EBADF (Bad file descriptor) [pid 6536] close(15) = -1 EBADF (Bad file descriptor) [pid 6536] close(16) = -1 EBADF (Bad file descriptor) [pid 6536] close(17) = -1 EBADF (Bad file descriptor) [pid 6536] close(18) = -1 EBADF (Bad file descriptor) [pid 6536] close(19) = -1 EBADF (Bad file descriptor) [pid 6536] close(20) = -1 EBADF (Bad file descriptor) [pid 6536] close(21) = -1 EBADF (Bad file descriptor) [pid 6536] close(22) = -1 EBADF (Bad file descriptor) [pid 6536] close(23) = -1 EBADF (Bad file descriptor) [pid 6536] close(24) = -1 EBADF (Bad file descriptor) [pid 6536] close(25) = -1 EBADF (Bad file descriptor) [pid 6536] close(26) = -1 EBADF (Bad file descriptor) [pid 6536] close(27) = -1 EBADF (Bad file descriptor) [pid 6536] close(28) = -1 EBADF (Bad file descriptor) [pid 6536] close(29) = -1 EBADF (Bad file descriptor) [pid 6536] exit_group(0 [pid 6538] <... futex resumed>) = ? [pid 6536] <... exit_group resumed>) = ? [pid 6538] +++ exited with 0 +++ [pid 6537] <... futex resumed>) = ? [pid 6537] +++ exited with 0 +++ [pid 6536] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1515, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./505", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./505/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./505/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./505") = 0 [pid 5019] mkdir("./506", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 80.781105][ T6537] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1518 ./strace-static-x86_64: Process 6539 attached [pid 6539] set_robust_list(0x555556a426a0, 24) = 0 [pid 6539] chdir("./506") = 0 [pid 6539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6539] setpgid(0, 0) = 0 [pid 6539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6539] write(3, "1000", 4) = 4 [pid 6539] close(3) = 0 [pid 6539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6539] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6539] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6539] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6540 attached => {parent_tid=[1519]}, 88) = 1519 [pid 6540] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6540] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6540] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6539] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] <... futex resumed>) = 0 [pid 6539] <... futex resumed>) = 1 [pid 6539] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6540] memfd_create("syzkaller", 0) = 3 [pid 6540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6540] munmap(0x7f15b9a45000, 524288) = 0 [pid 6540] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6540] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6540] close(3) = 0 [pid 6540] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6540] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6540] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6540] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6540] ioctl(4, LOOP_CLR_FD) = 0 [pid 6540] close(4) = 0 [pid 6540] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6539] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1520]}, 88) = 1520 [pid 6539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6539] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6541 attached [pid 6541] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6541] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6541] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6541] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6540] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6541] <... mount resumed>) = 0 [pid 6541] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6541] chdir(".") = 0 [pid 6541] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6541] <... futex resumed>) = 1 [pid 6541] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6540] <... mknodat resumed>) = 0 [pid 6540] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6540] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6539] close(3) = 0 [pid 6539] close(4) = 0 [pid 6539] close(5) = -1 EBADF (Bad file descriptor) [pid 6539] close(6) = -1 EBADF (Bad file descriptor) [pid 6539] close(7) = -1 EBADF (Bad file descriptor) [pid 6539] close(8) = -1 EBADF (Bad file descriptor) [pid 6539] close(9) = -1 EBADF (Bad file descriptor) [pid 6539] close(10) = -1 EBADF (Bad file descriptor) [pid 6539] close(11) = -1 EBADF (Bad file descriptor) [pid 6539] close(12) = -1 EBADF (Bad file descriptor) [pid 6539] close(13) = -1 EBADF (Bad file descriptor) [pid 6539] close(14) = -1 EBADF (Bad file descriptor) [pid 6539] close(15) = -1 EBADF (Bad file descriptor) [pid 6539] close(16) = -1 EBADF (Bad file descriptor) [pid 6539] close(17) = -1 EBADF (Bad file descriptor) [pid 6539] close(18) = -1 EBADF (Bad file descriptor) [pid 6539] close(19) = -1 EBADF (Bad file descriptor) [pid 6539] close(20) = -1 EBADF (Bad file descriptor) [pid 6539] close(21) = -1 EBADF (Bad file descriptor) [pid 6539] close(22) = -1 EBADF (Bad file descriptor) [pid 6539] close(23) = -1 EBADF (Bad file descriptor) [pid 6539] close(24) = -1 EBADF (Bad file descriptor) [pid 6539] close(25) = -1 EBADF (Bad file descriptor) [pid 6539] close(26) = -1 EBADF (Bad file descriptor) [pid 6539] close(27) = -1 EBADF (Bad file descriptor) [pid 6539] close(28) = -1 EBADF (Bad file descriptor) [pid 6539] close(29) = -1 EBADF (Bad file descriptor) [pid 6539] exit_group(0 [pid 6541] <... futex resumed>) = ? [pid 6540] <... futex resumed>) = ? [pid 6539] <... exit_group resumed>) = ? [pid 6541] +++ exited with 0 +++ [pid 6540] +++ exited with 0 +++ [pid 6539] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1518, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./506", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./506/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./506/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./506") = 0 [pid 5019] mkdir("./507", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1521 ./strace-static-x86_64: Process 6542 attached [pid 6542] set_robust_list(0x555556a426a0, 24) = 0 [pid 6542] chdir("./507") = 0 [pid 6542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6542] setpgid(0, 0) = 0 [pid 6542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6542] write(3, "1000", 4) = 4 [pid 6542] close(3) = 0 [pid 6542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6542] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6542] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6542] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1522]}, 88) = 1522 [pid 6542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6542] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6543 attached [pid 6543] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6543] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6543] memfd_create("syzkaller", 0) = 3 [pid 6543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 80.865460][ T6540] loop0: detected capacity change from 0 to 1024 [pid 6543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6543] munmap(0x7f15b9a45000, 524288) = 0 [pid 6543] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6543] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6543] close(3) = 0 [pid 6543] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6543] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6543] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6543] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6543] ioctl(4, LOOP_CLR_FD) = 0 [pid 6543] close(4) = 0 [pid 6543] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = 0 [pid 6543] <... futex resumed>) = 1 [pid 6542] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6542] <... futex resumed>) = 0 [pid 6542] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6542] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6543] <... mknodat resumed>) = 0 [pid 6542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6543] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... clone3 resumed> => {parent_tid=[1523]}, 88) = 1523 [pid 6543] <... futex resumed>) = 0 [pid 6542] rt_sigprocmask(SIG_SETMASK, [], [pid 6543] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6542] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6544 attached [pid 6542] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6544] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6544] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6544] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6544] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6544] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6544] chdir(".") = 0 [pid 6544] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6544] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] close(3) = 0 [pid 6542] close(4) = 0 [pid 6542] close(5) = -1 EBADF (Bad file descriptor) [pid 6542] close(6) = -1 EBADF (Bad file descriptor) [pid 6542] close(7) = -1 EBADF (Bad file descriptor) [pid 6542] close(8) = -1 EBADF (Bad file descriptor) [pid 6542] close(9) = -1 EBADF (Bad file descriptor) [pid 6542] close(10) = -1 EBADF (Bad file descriptor) [pid 6542] close(11) = -1 EBADF (Bad file descriptor) [pid 6542] close(12) = -1 EBADF (Bad file descriptor) [pid 6542] close(13) = -1 EBADF (Bad file descriptor) [pid 6542] close(14) = -1 EBADF (Bad file descriptor) [pid 6542] close(15) = -1 EBADF (Bad file descriptor) [pid 6542] close(16) = -1 EBADF (Bad file descriptor) [pid 6542] close(17) = -1 EBADF (Bad file descriptor) [pid 6542] close(18) = -1 EBADF (Bad file descriptor) [pid 6542] close(19) = -1 EBADF (Bad file descriptor) [pid 6542] close(20) = -1 EBADF (Bad file descriptor) [pid 6542] close(21) = -1 EBADF (Bad file descriptor) [pid 6542] close(22) = -1 EBADF (Bad file descriptor) [pid 6542] close(23) = -1 EBADF (Bad file descriptor) [pid 6542] close(24) = -1 EBADF (Bad file descriptor) [pid 6542] close(25) = -1 EBADF (Bad file descriptor) [pid 6542] close(26) = -1 EBADF (Bad file descriptor) [pid 6542] close(27) = -1 EBADF (Bad file descriptor) [pid 6542] close(28) = -1 EBADF (Bad file descriptor) [pid 6542] close(29) = -1 EBADF (Bad file descriptor) [pid 6542] exit_group(0 [pid 6544] <... futex resumed>) = ? [pid 6543] <... futex resumed>) = ? [pid 6542] <... exit_group resumed>) = ? [pid 6544] +++ exited with 0 +++ [pid 6543] +++ exited with 0 +++ [pid 6542] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1521, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./507", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./507/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./507/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./507/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./507") = 0 [pid 5019] mkdir("./508", 0777) = 0 [ 80.932399][ T6543] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1524 ./strace-static-x86_64: Process 6545 attached [pid 6545] set_robust_list(0x555556a426a0, 24) = 0 [pid 6545] chdir("./508") = 0 [pid 6545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6545] setpgid(0, 0) = 0 [pid 6545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6545] write(3, "1000", 4) = 4 [pid 6545] close(3) = 0 [pid 6545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6545] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6545] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6546 attached [pid 6546] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6546] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6545] <... clone3 resumed> => {parent_tid=[1525]}, 88) = 1525 [pid 6546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6546] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6545] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6546] <... futex resumed>) = 0 [pid 6545] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6546] memfd_create("syzkaller", 0) = 3 [pid 6546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6546] munmap(0x7f15b9a45000, 524288) = 0 [pid 6546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6546] close(3) = 0 [pid 6546] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6546] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6546] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6546] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6546] ioctl(4, LOOP_CLR_FD) = 0 [pid 6546] close(4) = 0 [pid 6546] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6546] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6546] <... futex resumed>) = 0 [pid 6546] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6545] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6545] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6546] <... mknodat resumed>) = 0 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6546] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6546] <... futex resumed>) = 0 [pid 6546] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1526]}, 88) = 1526 ./strace-static-x86_64: Process 6547 attached [pid 6545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6545] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6547] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6545] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6547] <... rseq resumed>) = 0 [pid 6547] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6547] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6547] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6547] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6547] chdir(".") = 0 [pid 6547] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6545] <... futex resumed>) = 0 [pid 6545] close(3) = 0 [pid 6545] close(4) = 0 [pid 6545] close(5) = -1 EBADF (Bad file descriptor) [pid 6545] close(6 [pid 6547] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6545] close(7) = -1 EBADF (Bad file descriptor) [pid 6545] close(8) = -1 EBADF (Bad file descriptor) [pid 6545] close(9) = -1 EBADF (Bad file descriptor) [pid 6545] close(10) = -1 EBADF (Bad file descriptor) [pid 6545] close(11) = -1 EBADF (Bad file descriptor) [pid 6545] close(12) = -1 EBADF (Bad file descriptor) [pid 6545] close(13) = -1 EBADF (Bad file descriptor) [pid 6545] close(14) = -1 EBADF (Bad file descriptor) [pid 6545] close(15) = -1 EBADF (Bad file descriptor) [pid 6545] close(16) = -1 EBADF (Bad file descriptor) [pid 6545] close(17) = -1 EBADF (Bad file descriptor) [pid 6545] close(18) = -1 EBADF (Bad file descriptor) [pid 6545] close(19) = -1 EBADF (Bad file descriptor) [pid 6545] close(20) = -1 EBADF (Bad file descriptor) [pid 6545] close(21) = -1 EBADF (Bad file descriptor) [pid 6545] close(22) = -1 EBADF (Bad file descriptor) [pid 6545] close(23) = -1 EBADF (Bad file descriptor) [pid 6545] close(24) = -1 EBADF (Bad file descriptor) [pid 6545] close(25) = -1 EBADF (Bad file descriptor) [pid 6545] close(26) = -1 EBADF (Bad file descriptor) [pid 6545] close(27) = -1 EBADF (Bad file descriptor) [pid 6545] close(28) = -1 EBADF (Bad file descriptor) [pid 6545] close(29) = -1 EBADF (Bad file descriptor) [pid 6545] exit_group(0 [pid 6546] <... futex resumed>) = ? [pid 6545] <... exit_group resumed>) = ? [pid 6547] <... futex resumed>) = ? [pid 6546] +++ exited with 0 +++ [pid 6547] +++ exited with 0 +++ [pid 6545] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1524, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./508", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./508/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./508/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./508/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./508") = 0 [pid 5019] mkdir("./509", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 81.019243][ T6546] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6548 attached [pid 6548] set_robust_list(0x555556a426a0, 24) = 0 [pid 6548] chdir("./509") = 0 [pid 6548] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6548] setpgid(0, 0) = 0 [pid 6548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1527 [pid 6548] <... openat resumed>) = 3 [pid 6548] write(3, "1000", 4) = 4 [pid 6548] close(3) = 0 [pid 6548] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6548] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6548] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6548] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6548] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6549 attached => {parent_tid=[1528]}, 88) = 1528 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6548] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6549] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6549] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6549] memfd_create("syzkaller", 0) = 3 [pid 6549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6549] munmap(0x7f15b9a45000, 524288) = 0 [pid 6549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6549] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6549] close(3) = 0 [pid 6549] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6549] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6549] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6549] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6549] ioctl(4, LOOP_CLR_FD) = 0 [pid 6549] close(4) = 0 [pid 6549] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6548] <... futex resumed>) = 0 [pid 6549] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6548] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6548] <... futex resumed>) = 0 [pid 6549] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6548] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6548] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6548] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1529]}, 88) = 1529 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6548] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6550 attached [pid 6549] <... mknodat resumed>) = 0 [pid 6550] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6550] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6550] mkdir(".", 0777 [pid 6549] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6550] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6549] <... futex resumed>) = 0 [pid 6549] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6550] <... mount resumed>) = 0 [pid 6550] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6550] chdir(".") = 0 [pid 6550] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] <... futex resumed>) = 0 [pid 6550] <... futex resumed>) = 1 [pid 6548] close(3 [pid 6550] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6548] <... close resumed>) = 0 [pid 6548] close(4) = 0 [pid 6548] close(5) = -1 EBADF (Bad file descriptor) [pid 6548] close(6) = -1 EBADF (Bad file descriptor) [pid 6548] close(7) = -1 EBADF (Bad file descriptor) [pid 6548] close(8) = -1 EBADF (Bad file descriptor) [pid 6548] close(9) = -1 EBADF (Bad file descriptor) [pid 6548] close(10) = -1 EBADF (Bad file descriptor) [pid 6548] close(11) = -1 EBADF (Bad file descriptor) [pid 6548] close(12) = -1 EBADF (Bad file descriptor) [pid 6548] close(13) = -1 EBADF (Bad file descriptor) [pid 6548] close(14) = -1 EBADF (Bad file descriptor) [pid 6548] close(15) = -1 EBADF (Bad file descriptor) [pid 6548] close(16) = -1 EBADF (Bad file descriptor) [pid 6548] close(17) = -1 EBADF (Bad file descriptor) [pid 6548] close(18) = -1 EBADF (Bad file descriptor) [pid 6548] close(19) = -1 EBADF (Bad file descriptor) [pid 6548] close(20) = -1 EBADF (Bad file descriptor) [pid 6548] close(21) = -1 EBADF (Bad file descriptor) [pid 6548] close(22) = -1 EBADF (Bad file descriptor) [pid 6548] close(23) = -1 EBADF (Bad file descriptor) [pid 6548] close(24) = -1 EBADF (Bad file descriptor) [pid 6548] close(25) = -1 EBADF (Bad file descriptor) [pid 6548] close(26) = -1 EBADF (Bad file descriptor) [pid 6548] close(27) = -1 EBADF (Bad file descriptor) [pid 6548] close(28) = -1 EBADF (Bad file descriptor) [pid 6548] close(29) = -1 EBADF (Bad file descriptor) [pid 6548] exit_group(0 [pid 6550] <... futex resumed>) = ? [pid 6549] <... futex resumed>) = ? [pid 6548] <... exit_group resumed>) = ? [pid 6549] +++ exited with 0 +++ [pid 6550] +++ exited with 0 +++ [pid 6548] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1527, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./509", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./509/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./509/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./509") = 0 [pid 5019] mkdir("./510", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 81.099885][ T6549] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1530 ./strace-static-x86_64: Process 6551 attached [pid 6551] set_robust_list(0x555556a426a0, 24) = 0 [pid 6551] chdir("./510") = 0 [pid 6551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6551] setpgid(0, 0) = 0 [pid 6551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6551] write(3, "1000", 4) = 4 [pid 6551] close(3) = 0 [pid 6551] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6551] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6551] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6551] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6551] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6551] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6551] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6552 attached => {parent_tid=[1531]}, 88) = 1531 [pid 6552] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6551] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6551] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6552] <... rseq resumed>) = 0 [pid 6552] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6552] memfd_create("syzkaller", 0) = 3 [pid 6552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6552] munmap(0x7f15b9a45000, 524288) = 0 [pid 6552] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6552] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6552] close(3) = 0 [pid 6552] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6552] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6552] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6552] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6552] ioctl(4, LOOP_CLR_FD) = 0 [pid 6552] close(4) = 0 [pid 6552] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6551] <... futex resumed>) = 0 [pid 6551] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6551] <... futex resumed>) = 0 [pid 6551] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6552] <... mknodat resumed>) = 0 [pid 6551] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6551] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6552] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6552] <... futex resumed>) = 0 [pid 6552] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6551] <... clone3 resumed> => {parent_tid=[1532]}, 88) = 1532 ./strace-static-x86_64: Process 6553 attached [pid 6551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6551] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6551] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6553] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6553] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6553] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6553] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6553] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6553] chdir(".") = 0 [pid 6553] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6551] <... futex resumed>) = 0 [pid 6551] close(3) = 0 [pid 6551] close(4) = 0 [pid 6551] close(5 [pid 6553] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6551] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6551] close(6) = -1 EBADF (Bad file descriptor) [pid 6551] close(7) = -1 EBADF (Bad file descriptor) [pid 6551] close(8) = -1 EBADF (Bad file descriptor) [pid 6551] close(9) = -1 EBADF (Bad file descriptor) [pid 6551] close(10) = -1 EBADF (Bad file descriptor) [pid 6551] close(11) = -1 EBADF (Bad file descriptor) [pid 6551] close(12) = -1 EBADF (Bad file descriptor) [pid 6551] close(13) = -1 EBADF (Bad file descriptor) [pid 6551] close(14) = -1 EBADF (Bad file descriptor) [pid 6551] close(15) = -1 EBADF (Bad file descriptor) [pid 6551] close(16) = -1 EBADF (Bad file descriptor) [pid 6551] close(17) = -1 EBADF (Bad file descriptor) [pid 6551] close(18) = -1 EBADF (Bad file descriptor) [pid 6551] close(19) = -1 EBADF (Bad file descriptor) [pid 6551] close(20) = -1 EBADF (Bad file descriptor) [pid 6551] close(21) = -1 EBADF (Bad file descriptor) [pid 6551] close(22) = -1 EBADF (Bad file descriptor) [pid 6551] close(23) = -1 EBADF (Bad file descriptor) [pid 6551] close(24) = -1 EBADF (Bad file descriptor) [pid 6551] close(25) = -1 EBADF (Bad file descriptor) [pid 6551] close(26) = -1 EBADF (Bad file descriptor) [pid 6551] close(27) = -1 EBADF (Bad file descriptor) [pid 6551] close(28) = -1 EBADF (Bad file descriptor) [pid 6551] close(29) = -1 EBADF (Bad file descriptor) [pid 6551] exit_group(0 [pid 6553] <... futex resumed>) = ? [pid 6552] <... futex resumed>) = ? [pid 6551] <... exit_group resumed>) = ? [pid 6553] +++ exited with 0 +++ [pid 6552] +++ exited with 0 +++ [pid 6551] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1530, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./510", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./510/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./510/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./510") = 0 [pid 5019] mkdir("./511", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 81.183724][ T6552] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1533 ./strace-static-x86_64: Process 6554 attached [pid 6554] set_robust_list(0x555556a426a0, 24) = 0 [pid 6554] chdir("./511") = 0 [pid 6554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6554] setpgid(0, 0) = 0 [pid 6554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6554] write(3, "1000", 4) = 4 [pid 6554] close(3) = 0 [pid 6554] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6554] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6554] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6554] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6554] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6555 attached [pid 6555] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6555] set_robust_list(0x7f15c1e659a0, 24 [pid 6554] <... clone3 resumed> => {parent_tid=[1534]}, 88) = 1534 [pid 6555] <... set_robust_list resumed>) = 0 [pid 6555] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6555] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6554] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = 0 [pid 6554] <... futex resumed>) = 1 [pid 6554] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6555] memfd_create("syzkaller", 0) = 3 [pid 6555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6555] munmap(0x7f15b9a45000, 524288) = 0 [pid 6555] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6555] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6555] close(3) = 0 [pid 6555] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6555] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6555] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6555] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6555] ioctl(4, LOOP_CLR_FD) = 0 [pid 6555] close(4) = 0 [pid 6555] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6555] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... futex resumed>) = 0 [pid 6554] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6554] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6554] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6554] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6556 attached [pid 6555] <... futex resumed>) = 0 [pid 6556] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6555] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6556] <... rseq resumed>) = 0 [pid 6556] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6556] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] <... clone3 resumed> => {parent_tid=[1535]}, 88) = 1535 [pid 6554] rt_sigprocmask(SIG_SETMASK, [], [pid 6555] <... mknodat resumed>) = 0 [pid 6554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6555] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = 0 [pid 6554] <... futex resumed>) = 1 [pid 6556] <... futex resumed>) = 0 [pid 6556] mkdir(".", 0777 [pid 6554] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6556] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6556] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6555] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6556] <... mount resumed>) = 0 [pid 6556] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6556] chdir(".") = 0 [pid 6556] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 0 [pid 6554] close(3) = 0 [pid 6554] close(4) = 0 [pid 6554] close(5) = -1 EBADF (Bad file descriptor) [pid 6554] close(6) = -1 EBADF (Bad file descriptor) [pid 6554] close(7) = -1 EBADF (Bad file descriptor) [pid 6554] close(8) = -1 EBADF (Bad file descriptor) [pid 6554] close(9 [pid 6556] <... futex resumed>) = 1 [pid 6554] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6556] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6554] close(10) = -1 EBADF (Bad file descriptor) [pid 6554] close(11) = -1 EBADF (Bad file descriptor) [pid 6554] close(12) = -1 EBADF (Bad file descriptor) [pid 6554] close(13) = -1 EBADF (Bad file descriptor) [pid 6554] close(14) = -1 EBADF (Bad file descriptor) [pid 6554] close(15) = -1 EBADF (Bad file descriptor) [pid 6554] close(16) = -1 EBADF (Bad file descriptor) [pid 6554] close(17) = -1 EBADF (Bad file descriptor) [pid 6554] close(18) = -1 EBADF (Bad file descriptor) [pid 6554] close(19) = -1 EBADF (Bad file descriptor) [pid 6554] close(20) = -1 EBADF (Bad file descriptor) [pid 6554] close(21) = -1 EBADF (Bad file descriptor) [pid 6554] close(22) = -1 EBADF (Bad file descriptor) [pid 6554] close(23) = -1 EBADF (Bad file descriptor) [pid 6554] close(24) = -1 EBADF (Bad file descriptor) [pid 6554] close(25) = -1 EBADF (Bad file descriptor) [pid 6554] close(26) = -1 EBADF (Bad file descriptor) [pid 6554] close(27) = -1 EBADF (Bad file descriptor) [pid 6554] close(28) = -1 EBADF (Bad file descriptor) [pid 6554] close(29) = -1 EBADF (Bad file descriptor) [pid 6554] exit_group(0 [pid 6556] <... futex resumed>) = ? [pid 6555] <... futex resumed>) = ? [pid 6554] <... exit_group resumed>) = ? [pid 6556] +++ exited with 0 +++ [pid 6555] +++ exited with 0 +++ [pid 6554] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1533, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./511", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./511/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./511/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./511") = 0 [pid 5019] mkdir("./512", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1536 ./strace-static-x86_64: Process 6557 attached [pid 6557] set_robust_list(0x555556a426a0, 24) = 0 [pid 6557] chdir("./512") = 0 [pid 6557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6557] setpgid(0, 0) = 0 [pid 6557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6557] write(3, "1000", 4) = 4 [pid 6557] close(3) = 0 [pid 6557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6557] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 81.267634][ T6555] loop0: detected capacity change from 0 to 1024 [pid 6557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6557] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1537]}, 88) = 1537 [pid 6557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6557] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6558 attached [pid 6558] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6558] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6558] memfd_create("syzkaller", 0) = 3 [pid 6558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6558] munmap(0x7f15b9a45000, 524288) = 0 [pid 6558] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6558] close(3) = 0 [pid 6558] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6558] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6558] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6558] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6558] ioctl(4, LOOP_CLR_FD) = 0 [pid 6558] close(4) = 0 [pid 6558] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6557] <... futex resumed>) = 0 [pid 6557] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6557] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1538]}, 88) = 1538 [pid 6557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6557] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6558] <... futex resumed>) = 1 [pid 6558] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6559 attached [pid 6559] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6559] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6558] <... mknodat resumed>) = 0 [pid 6559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6559] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6559] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6558] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6558] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6559] <... mount resumed>) = 0 [pid 6559] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6559] chdir(".") = 0 [pid 6559] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6557] <... futex resumed>) = 0 [pid 6557] close(3) = 0 [pid 6557] close(4) = 0 [pid 6559] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6557] close(5) = -1 EBADF (Bad file descriptor) [pid 6557] close(6) = -1 EBADF (Bad file descriptor) [pid 6557] close(7) = -1 EBADF (Bad file descriptor) [pid 6557] close(8) = -1 EBADF (Bad file descriptor) [pid 6557] close(9) = -1 EBADF (Bad file descriptor) [pid 6557] close(10) = -1 EBADF (Bad file descriptor) [pid 6557] close(11) = -1 EBADF (Bad file descriptor) [pid 6557] close(12) = -1 EBADF (Bad file descriptor) [pid 6557] close(13) = -1 EBADF (Bad file descriptor) [pid 6557] close(14) = -1 EBADF (Bad file descriptor) [pid 6557] close(15) = -1 EBADF (Bad file descriptor) [pid 6557] close(16) = -1 EBADF (Bad file descriptor) [pid 6557] close(17) = -1 EBADF (Bad file descriptor) [pid 6557] close(18) = -1 EBADF (Bad file descriptor) [pid 6557] close(19) = -1 EBADF (Bad file descriptor) [pid 6557] close(20) = -1 EBADF (Bad file descriptor) [pid 6557] close(21) = -1 EBADF (Bad file descriptor) [pid 6557] close(22) = -1 EBADF (Bad file descriptor) [pid 6557] close(23) = -1 EBADF (Bad file descriptor) [pid 6557] close(24) = -1 EBADF (Bad file descriptor) [pid 6557] close(25) = -1 EBADF (Bad file descriptor) [pid 6557] close(26) = -1 EBADF (Bad file descriptor) [pid 6557] close(27) = -1 EBADF (Bad file descriptor) [pid 6557] close(28) = -1 EBADF (Bad file descriptor) [pid 6557] close(29) = -1 EBADF (Bad file descriptor) [pid 6557] exit_group(0 [pid 6558] <... futex resumed>) = ? [pid 6559] <... futex resumed>) = ? [pid 6557] <... exit_group resumed>) = ? [pid 6559] +++ exited with 0 +++ [pid 6558] +++ exited with 0 +++ [pid 6557] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1536, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./512", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./512/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./512/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./512") = 0 [pid 5019] mkdir("./513", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1539 ./strace-static-x86_64: Process 6560 attached [pid 6560] set_robust_list(0x555556a426a0, 24) = 0 [pid 6560] chdir("./513") = 0 [pid 6560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6560] setpgid(0, 0) = 0 [pid 6560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6560] write(3, "1000", 4) = 4 [pid 6560] close(3) = 0 [pid 6560] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6560] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6560] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6560] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6560] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6561 attached => {parent_tid=[1540]}, 88) = 1540 [pid 6561] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6560] rt_sigprocmask(SIG_SETMASK, [], [pid 6561] <... rseq resumed>) = 0 [pid 6560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6560] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] set_robust_list(0x7f15c1e659a0, 24 [pid 6560] <... futex resumed>) = 0 [pid 6561] <... set_robust_list resumed>) = 0 [pid 6561] rt_sigprocmask(SIG_SETMASK, [], [pid 6560] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6561] memfd_create("syzkaller", 0) = 3 [ 81.339810][ T6558] loop0: detected capacity change from 0 to 1024 [pid 6561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6561] munmap(0x7f15b9a45000, 524288) = 0 [pid 6561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6561] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6561] close(3) = 0 [pid 6561] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6561] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6561] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6561] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6561] ioctl(4, LOOP_CLR_FD) = 0 [pid 6561] close(4) = 0 [pid 6561] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = 1 [pid 6561] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6560] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6560] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6560] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6560] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6562 attached [pid 6562] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6560] <... clone3 resumed> => {parent_tid=[1541]}, 88) = 1541 [pid 6560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6560] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] set_robust_list(0x7f15b9ac49a0, 24 [pid 6560] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6562] <... set_robust_list resumed>) = 0 [pid 6562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6562] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6562] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6561] <... mknodat resumed>) = 0 [pid 6561] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6561] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] <... mount resumed>) = 0 [pid 6562] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6562] chdir(".") = 0 [pid 6562] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] <... futex resumed>) = 0 [pid 6560] close(3) = 0 [pid 6560] close(4) = 0 [pid 6560] close(5) = -1 EBADF (Bad file descriptor) [pid 6560] close(6) = -1 EBADF (Bad file descriptor) [pid 6560] close(7) = -1 EBADF (Bad file descriptor) [pid 6560] close(8) = -1 EBADF (Bad file descriptor) [pid 6560] close(9) = -1 EBADF (Bad file descriptor) [pid 6562] <... futex resumed>) = 1 [pid 6560] close(10 [pid 6562] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6560] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6560] close(11) = -1 EBADF (Bad file descriptor) [pid 6560] close(12) = -1 EBADF (Bad file descriptor) [pid 6560] close(13) = -1 EBADF (Bad file descriptor) [pid 6560] close(14) = -1 EBADF (Bad file descriptor) [pid 6560] close(15) = -1 EBADF (Bad file descriptor) [pid 6560] close(16) = -1 EBADF (Bad file descriptor) [pid 6560] close(17) = -1 EBADF (Bad file descriptor) [pid 6560] close(18) = -1 EBADF (Bad file descriptor) [pid 6560] close(19) = -1 EBADF (Bad file descriptor) [pid 6560] close(20) = -1 EBADF (Bad file descriptor) [pid 6560] close(21) = -1 EBADF (Bad file descriptor) [pid 6560] close(22) = -1 EBADF (Bad file descriptor) [pid 6560] close(23) = -1 EBADF (Bad file descriptor) [pid 6560] close(24) = -1 EBADF (Bad file descriptor) [pid 6560] close(25) = -1 EBADF (Bad file descriptor) [pid 6560] close(26) = -1 EBADF (Bad file descriptor) [pid 6560] close(27) = -1 EBADF (Bad file descriptor) [pid 6560] close(28) = -1 EBADF (Bad file descriptor) [pid 6560] close(29) = -1 EBADF (Bad file descriptor) [pid 6560] exit_group(0 [pid 6562] <... futex resumed>) = ? [pid 6561] <... futex resumed>) = ? [pid 6560] <... exit_group resumed>) = ? [pid 6562] +++ exited with 0 +++ [pid 6561] +++ exited with 0 +++ [pid 6560] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1539, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./513", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./513/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./513/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./513") = 0 [pid 5019] mkdir("./514", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1542 ./strace-static-x86_64: Process 6563 attached [pid 6563] set_robust_list(0x555556a426a0, 24) = 0 [pid 6563] chdir("./514") = 0 [pid 6563] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6563] setpgid(0, 0) = 0 [pid 6563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6563] write(3, "1000", 4) = 4 [pid 6563] close(3) = 0 [pid 6563] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6563] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6563] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6563] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6563] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1543]}, 88) = 1543 [pid 6563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6563] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6564 attached [pid 6564] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6564] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6564] memfd_create("syzkaller", 0) = 3 [pid 6564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 81.406721][ T6561] loop0: detected capacity change from 0 to 1024 [pid 6564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6564] munmap(0x7f15b9a45000, 524288) = 0 [pid 6564] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6564] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6564] close(3) = 0 [pid 6564] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6564] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6564] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6564] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6564] ioctl(4, LOOP_CLR_FD) = 0 [pid 6564] close(4) = 0 [pid 6564] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6563] <... futex resumed>) = 0 [pid 6563] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6563] <... futex resumed>) = 0 [pid 6563] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6563] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6563] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1544]}, 88) = 1544 [pid 6563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6563] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6564] <... mknodat resumed>) = 0 [pid 6564] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6565 attached [pid 6565] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6565] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6565] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6565] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6565] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6565] chdir(".") = 0 [pid 6565] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6563] <... futex resumed>) = 0 [pid 6563] close(3 [pid 6565] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6563] <... close resumed>) = 0 [pid 6563] close(4) = 0 [pid 6563] close(5) = -1 EBADF (Bad file descriptor) [pid 6563] close(6) = -1 EBADF (Bad file descriptor) [pid 6563] close(7) = -1 EBADF (Bad file descriptor) [pid 6563] close(8) = -1 EBADF (Bad file descriptor) [pid 6563] close(9) = -1 EBADF (Bad file descriptor) [pid 6563] close(10) = -1 EBADF (Bad file descriptor) [pid 6563] close(11) = -1 EBADF (Bad file descriptor) [pid 6563] close(12) = -1 EBADF (Bad file descriptor) [pid 6563] close(13) = -1 EBADF (Bad file descriptor) [pid 6563] close(14) = -1 EBADF (Bad file descriptor) [pid 6563] close(15) = -1 EBADF (Bad file descriptor) [pid 6563] close(16) = -1 EBADF (Bad file descriptor) [pid 6563] close(17) = -1 EBADF (Bad file descriptor) [pid 6563] close(18) = -1 EBADF (Bad file descriptor) [pid 6563] close(19) = -1 EBADF (Bad file descriptor) [pid 6563] close(20) = -1 EBADF (Bad file descriptor) [pid 6563] close(21) = -1 EBADF (Bad file descriptor) [pid 6563] close(22) = -1 EBADF (Bad file descriptor) [pid 6563] close(23) = -1 EBADF (Bad file descriptor) [pid 6563] close(24) = -1 EBADF (Bad file descriptor) [pid 6563] close(25) = -1 EBADF (Bad file descriptor) [pid 6563] close(26) = -1 EBADF (Bad file descriptor) [pid 6563] close(27) = -1 EBADF (Bad file descriptor) [pid 6563] close(28) = -1 EBADF (Bad file descriptor) [pid 6563] close(29) = -1 EBADF (Bad file descriptor) [pid 6563] exit_group(0) = ? [pid 6564] <... futex resumed>) = ? [pid 6565] <... futex resumed>) = ? [pid 6565] +++ exited with 0 +++ [pid 6564] +++ exited with 0 +++ [pid 6563] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1542, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./514", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./514/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./514/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./514") = 0 [pid 5019] mkdir("./515", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1545 ./strace-static-x86_64: Process 6566 attached [pid 6566] set_robust_list(0x555556a426a0, 24) = 0 [pid 6566] chdir("./515") = 0 [pid 6566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6566] setpgid(0, 0) = 0 [pid 6566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6566] write(3, "1000", 4) = 4 [pid 6566] close(3) = 0 [pid 6566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6566] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6566] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 81.471934][ T6564] loop0: detected capacity change from 0 to 1024 [pid 6566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6567 attached => {parent_tid=[1546]}, 88) = 1546 [pid 6567] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6566] rt_sigprocmask(SIG_SETMASK, [], [pid 6567] set_robust_list(0x7f15c1e659a0, 24 [pid 6566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6567] <... set_robust_list resumed>) = 0 [pid 6567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6567] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6567] <... futex resumed>) = 0 [pid 6566] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6567] memfd_create("syzkaller", 0) = 3 [pid 6567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6567] munmap(0x7f15b9a45000, 524288) = 0 [pid 6567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6567] close(3) = 0 [pid 6567] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6567] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6567] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6567] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6567] ioctl(4, LOOP_CLR_FD) = 0 [pid 6567] close(4) = 0 [pid 6567] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6567] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] <... futex resumed>) = 0 [pid 6566] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6567] <... futex resumed>) = 0 [pid 6567] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6566] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6566] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6568 attached => {parent_tid=[1547]}, 88) = 1547 [pid 6566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6566] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6568] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6568] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6568] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6568] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6567] <... mknodat resumed>) = 0 [pid 6567] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6567] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6568] <... mount resumed>) = 0 [pid 6568] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6568] chdir(".") = 0 [pid 6568] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6568] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] close(3) = 0 [pid 6566] close(4) = 0 [pid 6566] close(5) = -1 EBADF (Bad file descriptor) [pid 6566] close(6) = -1 EBADF (Bad file descriptor) [pid 6566] close(7) = -1 EBADF (Bad file descriptor) [pid 6566] close(8) = -1 EBADF (Bad file descriptor) [pid 6566] close(9) = -1 EBADF (Bad file descriptor) [pid 6566] close(10) = -1 EBADF (Bad file descriptor) [pid 6566] close(11) = -1 EBADF (Bad file descriptor) [pid 6566] close(12) = -1 EBADF (Bad file descriptor) [pid 6566] close(13) = -1 EBADF (Bad file descriptor) [pid 6566] close(14) = -1 EBADF (Bad file descriptor) [pid 6566] close(15) = -1 EBADF (Bad file descriptor) [pid 6566] close(16) = -1 EBADF (Bad file descriptor) [pid 6566] close(17) = -1 EBADF (Bad file descriptor) [pid 6566] close(18) = -1 EBADF (Bad file descriptor) [pid 6566] close(19) = -1 EBADF (Bad file descriptor) [pid 6566] close(20) = -1 EBADF (Bad file descriptor) [pid 6566] close(21) = -1 EBADF (Bad file descriptor) [pid 6566] close(22) = -1 EBADF (Bad file descriptor) [pid 6566] close(23) = -1 EBADF (Bad file descriptor) [pid 6566] close(24) = -1 EBADF (Bad file descriptor) [pid 6566] close(25) = -1 EBADF (Bad file descriptor) [pid 6566] close(26) = -1 EBADF (Bad file descriptor) [pid 6566] close(27) = -1 EBADF (Bad file descriptor) [pid 6566] close(28) = -1 EBADF (Bad file descriptor) [pid 6566] close(29) = -1 EBADF (Bad file descriptor) [pid 6566] exit_group(0 [pid 6568] <... futex resumed>) = ? [pid 6567] <... futex resumed>) = ? [pid 6566] <... exit_group resumed>) = ? [pid 6568] +++ exited with 0 +++ [pid 6567] +++ exited with 0 +++ [pid 6566] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1545, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./515", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./515/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./515/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./515") = 0 [pid 5019] mkdir("./516", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 81.553014][ T6567] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6569 attached [pid 6569] set_robust_list(0x555556a426a0, 24) = 0 [pid 6569] chdir("./516") = 0 [pid 6569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6569] setpgid(0, 0) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1548 [pid 6569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6569] write(3, "1000", 4) = 4 [pid 6569] close(3) = 0 [pid 6569] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6569] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6569] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1549]}, 88) = 1549 [pid 6569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6569] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6570 attached [pid 6570] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6570] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6570] memfd_create("syzkaller", 0) = 3 [pid 6570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6570] munmap(0x7f15b9a45000, 524288) = 0 [pid 6570] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6570] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6570] close(3) = 0 [pid 6570] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6570] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6570] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6570] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6570] ioctl(4, LOOP_CLR_FD) = 0 [pid 6570] close(4) = 0 [pid 6570] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... futex resumed>) = 0 [pid 6569] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6569] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1550]}, 88) = 1550 [pid 6569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6569] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6569] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6570] <... futex resumed>) = 1 [pid 6570] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6570] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6570] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6571 attached [pid 6571] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6571] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6571] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6571] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6571] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6571] chdir(".") = 0 [pid 6571] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... futex resumed>) = 0 [pid 6569] close(3) = 0 [pid 6569] close(4) = 0 [pid 6569] close(5) = -1 EBADF (Bad file descriptor) [pid 6569] close(6) = -1 EBADF (Bad file descriptor) [pid 6569] close(7) = -1 EBADF (Bad file descriptor) [pid 6569] close(8) = -1 EBADF (Bad file descriptor) [pid 6569] close(9) = -1 EBADF (Bad file descriptor) [pid 6569] close(10) = -1 EBADF (Bad file descriptor) [pid 6569] close(11) = -1 EBADF (Bad file descriptor) [pid 6569] close(12) = -1 EBADF (Bad file descriptor) [pid 6569] close(13) = -1 EBADF (Bad file descriptor) [pid 6569] close(14) = -1 EBADF (Bad file descriptor) [pid 6569] close(15) = -1 EBADF (Bad file descriptor) [pid 6569] close(16) = -1 EBADF (Bad file descriptor) [pid 6569] close(17) = -1 EBADF (Bad file descriptor) [pid 6569] close(18) = -1 EBADF (Bad file descriptor) [pid 6569] close(19) = -1 EBADF (Bad file descriptor) [pid 6569] close(20) = -1 EBADF (Bad file descriptor) [pid 6569] close(21) = -1 EBADF (Bad file descriptor) [pid 6569] close(22) = -1 EBADF (Bad file descriptor) [pid 6569] close(23) = -1 EBADF (Bad file descriptor) [pid 6569] close(24) = -1 EBADF (Bad file descriptor) [pid 6569] close(25) = -1 EBADF (Bad file descriptor) [pid 6571] <... futex resumed>) = 1 [pid 6569] close(26 [pid 6571] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6569] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6569] close(27) = -1 EBADF (Bad file descriptor) [pid 6569] close(28) = -1 EBADF (Bad file descriptor) [pid 6569] close(29) = -1 EBADF (Bad file descriptor) [pid 6569] exit_group(0 [pid 6571] <... futex resumed>) = ? [pid 6570] <... futex resumed>) = ? [pid 6569] <... exit_group resumed>) = ? [pid 6570] +++ exited with 0 +++ [pid 6571] +++ exited with 0 +++ [pid 6569] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1548, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./516", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [ 81.628930][ T6570] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./516/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./516/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./516") = 0 [pid 5019] mkdir("./517", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1551 ./strace-static-x86_64: Process 6572 attached [pid 6572] set_robust_list(0x555556a426a0, 24) = 0 [pid 6572] chdir("./517") = 0 [pid 6572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6572] setpgid(0, 0) = 0 [pid 6572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6572] write(3, "1000", 4) = 4 [pid 6572] close(3) = 0 [pid 6572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6572] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6572] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6572] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6572] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6573 attached => {parent_tid=[1552]}, 88) = 1552 [pid 6572] rt_sigprocmask(SIG_SETMASK, [], [pid 6573] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6573] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6573] rt_sigprocmask(SIG_SETMASK, [], [pid 6572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6572] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6572] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6573] memfd_create("syzkaller", 0) = 3 [pid 6573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6573] munmap(0x7f15b9a45000, 524288) = 0 [pid 6573] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6573] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6573] close(3) = 0 [pid 6573] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6573] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6573] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6573] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6573] ioctl(4, LOOP_CLR_FD) = 0 [pid 6573] close(4) = 0 [pid 6573] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... futex resumed>) = 0 [pid 6572] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6572] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6573] <... futex resumed>) = 1 [pid 6572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6573] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6572] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6572] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1553]}, 88) = 1553 [pid 6572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6572] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6572] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6573] <... mknodat resumed>) = 0 [pid 6573] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6573] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6574 attached [pid 6574] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6574] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6574] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6574] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6574] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6574] chdir(".") = 0 [pid 6574] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6572] <... futex resumed>) = 0 [pid 6572] close(3) = 0 [pid 6572] close(4) = 0 [pid 6572] close(5) = -1 EBADF (Bad file descriptor) [pid 6572] close(6) = -1 EBADF (Bad file descriptor) [pid 6572] close(7) = -1 EBADF (Bad file descriptor) [pid 6572] close(8) = -1 EBADF (Bad file descriptor) [pid 6572] close(9) = -1 EBADF (Bad file descriptor) [pid 6572] close(10) = -1 EBADF (Bad file descriptor) [pid 6572] close(11) = -1 EBADF (Bad file descriptor) [pid 6572] close(12) = -1 EBADF (Bad file descriptor) [pid 6572] close(13) = -1 EBADF (Bad file descriptor) [pid 6572] close(14) = -1 EBADF (Bad file descriptor) [pid 6572] close(15) = -1 EBADF (Bad file descriptor) [pid 6572] close(16) = -1 EBADF (Bad file descriptor) [pid 6572] close(17) = -1 EBADF (Bad file descriptor) [pid 6572] close(18) = -1 EBADF (Bad file descriptor) [pid 6572] close(19) = -1 EBADF (Bad file descriptor) [pid 6572] close(20) = -1 EBADF (Bad file descriptor) [pid 6572] close(21) = -1 EBADF (Bad file descriptor) [pid 6572] close(22) = -1 EBADF (Bad file descriptor) [pid 6572] close(23) = -1 EBADF (Bad file descriptor) [pid 6572] close(24) = -1 EBADF (Bad file descriptor) [pid 6572] close(25) = -1 EBADF (Bad file descriptor) [pid 6572] close(26) = -1 EBADF (Bad file descriptor) [pid 6572] close(27 [pid 6574] <... futex resumed>) = 1 [pid 6572] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6574] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6572] close(28) = -1 EBADF (Bad file descriptor) [pid 6572] close(29) = -1 EBADF (Bad file descriptor) [pid 6572] exit_group(0 [pid 6574] <... futex resumed>) = ? [pid 6573] <... futex resumed>) = ? [pid 6572] <... exit_group resumed>) = ? [pid 6574] +++ exited with 0 +++ [pid 6573] +++ exited with 0 +++ [pid 6572] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1551, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./517", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./517/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./517/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./517") = 0 [pid 5019] mkdir("./518", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 81.727949][ T6573] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6575 attached [pid 6575] set_robust_list(0x555556a426a0, 24) = 0 [pid 6575] chdir("./518" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1554 [pid 6575] <... chdir resumed>) = 0 [pid 6575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6575] setpgid(0, 0) = 0 [pid 6575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6575] write(3, "1000", 4) = 4 [pid 6575] close(3) = 0 [pid 6575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6575] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6575] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6575] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6576 attached [pid 6576] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6575] <... clone3 resumed> => {parent_tid=[1555]}, 88) = 1555 [pid 6576] <... rseq resumed>) = 0 [pid 6575] rt_sigprocmask(SIG_SETMASK, [], [pid 6576] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6576] rt_sigprocmask(SIG_SETMASK, [], [pid 6575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6576] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6575] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6575] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6576] <... futex resumed>) = 0 [pid 6576] memfd_create("syzkaller", 0) = 3 [pid 6576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6576] munmap(0x7f15b9a45000, 524288) = 0 [pid 6576] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6576] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6576] close(3) = 0 [pid 6576] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6576] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6576] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6576] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6576] ioctl(4, LOOP_CLR_FD) = 0 [pid 6576] close(4) = 0 [pid 6576] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6575] <... futex resumed>) = 0 [pid 6575] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] <... futex resumed>) = 1 [pid 6575] <... futex resumed>) = 0 [pid 6575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6575] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6576] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6575] <... mprotect resumed>) = 0 [pid 6575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1556]}, 88) = 1556 [pid 6575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6575] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6575] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6577 attached [pid 6577] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6577] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6577] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6577] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6576] <... mknodat resumed>) = 0 [pid 6576] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6576] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] <... mount resumed>) = 0 [pid 6577] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6577] chdir(".") = 0 [pid 6577] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6575] <... futex resumed>) = 0 [pid 6575] close(3) = 0 [pid 6575] close(4) = 0 [pid 6575] close(5) = -1 EBADF (Bad file descriptor) [pid 6575] close(6 [pid 6577] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6575] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6575] close(7) = -1 EBADF (Bad file descriptor) [pid 6575] close(8) = -1 EBADF (Bad file descriptor) [pid 6575] close(9) = -1 EBADF (Bad file descriptor) [pid 6575] close(10) = -1 EBADF (Bad file descriptor) [pid 6575] close(11) = -1 EBADF (Bad file descriptor) [pid 6575] close(12) = -1 EBADF (Bad file descriptor) [pid 6575] close(13) = -1 EBADF (Bad file descriptor) [pid 6575] close(14) = -1 EBADF (Bad file descriptor) [pid 6575] close(15) = -1 EBADF (Bad file descriptor) [pid 6575] close(16) = -1 EBADF (Bad file descriptor) [pid 6575] close(17) = -1 EBADF (Bad file descriptor) [pid 6575] close(18) = -1 EBADF (Bad file descriptor) [pid 6575] close(19) = -1 EBADF (Bad file descriptor) [pid 6575] close(20) = -1 EBADF (Bad file descriptor) [pid 6575] close(21) = -1 EBADF (Bad file descriptor) [pid 6575] close(22) = -1 EBADF (Bad file descriptor) [pid 6575] close(23) = -1 EBADF (Bad file descriptor) [pid 6575] close(24) = -1 EBADF (Bad file descriptor) [pid 6575] close(25) = -1 EBADF (Bad file descriptor) [pid 6575] close(26) = -1 EBADF (Bad file descriptor) [pid 6575] close(27) = -1 EBADF (Bad file descriptor) [pid 6575] close(28) = -1 EBADF (Bad file descriptor) [pid 6575] close(29) = -1 EBADF (Bad file descriptor) [pid 6575] exit_group(0 [pid 6577] <... futex resumed>) = ? [pid 6576] <... futex resumed>) = ? [pid 6575] <... exit_group resumed>) = ? [pid 6577] +++ exited with 0 +++ [pid 6576] +++ exited with 0 +++ [pid 6575] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1554, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./518", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./518/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./518/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./518/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./518/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./518/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./518/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./518/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./518/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./518") = 0 [pid 5019] mkdir("./519", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1557 ./strace-static-x86_64: Process 6578 attached [pid 6578] set_robust_list(0x555556a426a0, 24) = 0 [pid 6578] chdir("./519") = 0 [pid 6578] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6578] setpgid(0, 0) = 0 [pid 6578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6578] write(3, "1000", 4) = 4 [pid 6578] close(3) = 0 [ 81.803229][ T6576] loop0: detected capacity change from 0 to 1024 [pid 6578] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6578] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6578] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6578] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6578] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6578] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6578] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1558]}, 88) = 1558 ./strace-static-x86_64: Process 6579 attached [pid 6578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6579] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6578] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6578] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6579] <... rseq resumed>) = 0 [pid 6579] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6579] memfd_create("syzkaller", 0) = 3 [pid 6579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6579] munmap(0x7f15b9a45000, 524288) = 0 [pid 6579] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6579] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6579] close(3) = 0 [pid 6579] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6579] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6579] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6579] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6579] ioctl(4, LOOP_CLR_FD) = 0 [pid 6579] close(4) = 0 [pid 6579] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... futex resumed>) = 0 [pid 6578] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6578] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6578] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6578] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6579] <... futex resumed>) = 1 [pid 6578] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6579] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6578] <... clone3 resumed> => {parent_tid=[1559]}, 88) = 1559 [pid 6578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6578] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6578] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6579] <... mknodat resumed>) = 0 [pid 6579] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6580 attached [pid 6580] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6580] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6580] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6580] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6580] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6580] chdir(".") = 0 [pid 6580] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6578] <... futex resumed>) = 0 [pid 6580] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6578] close(3) = 0 [pid 6578] close(4) = 0 [pid 6578] close(5) = -1 EBADF (Bad file descriptor) [pid 6578] close(6) = -1 EBADF (Bad file descriptor) [pid 6578] close(7) = -1 EBADF (Bad file descriptor) [pid 6578] close(8) = -1 EBADF (Bad file descriptor) [pid 6578] close(9) = -1 EBADF (Bad file descriptor) [pid 6578] close(10) = -1 EBADF (Bad file descriptor) [pid 6578] close(11) = -1 EBADF (Bad file descriptor) [pid 6578] close(12) = -1 EBADF (Bad file descriptor) [pid 6578] close(13) = -1 EBADF (Bad file descriptor) [pid 6578] close(14) = -1 EBADF (Bad file descriptor) [pid 6578] close(15) = -1 EBADF (Bad file descriptor) [pid 6578] close(16) = -1 EBADF (Bad file descriptor) [pid 6578] close(17) = -1 EBADF (Bad file descriptor) [pid 6578] close(18) = -1 EBADF (Bad file descriptor) [pid 6578] close(19) = -1 EBADF (Bad file descriptor) [pid 6578] close(20) = -1 EBADF (Bad file descriptor) [pid 6578] close(21) = -1 EBADF (Bad file descriptor) [pid 6578] close(22) = -1 EBADF (Bad file descriptor) [pid 6578] close(23) = -1 EBADF (Bad file descriptor) [pid 6578] close(24) = -1 EBADF (Bad file descriptor) [pid 6578] close(25) = -1 EBADF (Bad file descriptor) [pid 6578] close(26) = -1 EBADF (Bad file descriptor) [pid 6578] close(27) = -1 EBADF (Bad file descriptor) [pid 6578] close(28) = -1 EBADF (Bad file descriptor) [pid 6578] close(29) = -1 EBADF (Bad file descriptor) [pid 6578] exit_group(0 [pid 6580] <... futex resumed>) = ? [pid 6579] <... futex resumed>) = ? [pid 6578] <... exit_group resumed>) = ? [pid 6580] +++ exited with 0 +++ [pid 6579] +++ exited with 0 +++ [pid 6578] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1557, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./519", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./519/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./519/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./519/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./519") = 0 [pid 5019] mkdir("./520", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 81.876572][ T6579] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1560 ./strace-static-x86_64: Process 6581 attached [pid 6581] set_robust_list(0x555556a426a0, 24) = 0 [pid 6581] chdir("./520") = 0 [pid 6581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6581] setpgid(0, 0) = 0 [pid 6581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6581] write(3, "1000", 4) = 4 [pid 6581] close(3) = 0 [pid 6581] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6581] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6581] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6581] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6582 attached [pid 6582] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6582] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6582] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] <... clone3 resumed> => {parent_tid=[1561]}, 88) = 1561 [pid 6581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6581] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6582] <... futex resumed>) = 0 [pid 6581] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6582] memfd_create("syzkaller", 0) = 3 [pid 6582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6582] munmap(0x7f15b9a45000, 524288) = 0 [pid 6582] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6582] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6582] close(3) = 0 [pid 6582] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6582] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6582] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6582] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6582] ioctl(4, LOOP_CLR_FD) = 0 [pid 6582] close(4) = 0 [pid 6582] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6581] <... futex resumed>) = 0 [pid 6582] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6581] <... futex resumed>) = 0 [pid 6581] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6581] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1562]}, 88) = 1562 [pid 6581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6581] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6581] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6582] <... mknodat resumed>) = 0 [pid 6582] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6582] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6583 attached [pid 6583] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6583] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6583] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6583] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6583] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6583] chdir(".") = 0 [pid 6583] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6581] <... futex resumed>) = 0 [pid 6583] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] close(3) = 0 [pid 6581] close(4) = 0 [pid 6581] close(5) = -1 EBADF (Bad file descriptor) [pid 6581] close(6) = -1 EBADF (Bad file descriptor) [pid 6581] close(7) = -1 EBADF (Bad file descriptor) [pid 6581] close(8) = -1 EBADF (Bad file descriptor) [pid 6581] close(9) = -1 EBADF (Bad file descriptor) [pid 6581] close(10) = -1 EBADF (Bad file descriptor) [pid 6581] close(11) = -1 EBADF (Bad file descriptor) [pid 6581] close(12) = -1 EBADF (Bad file descriptor) [pid 6581] close(13) = -1 EBADF (Bad file descriptor) [pid 6581] close(14) = -1 EBADF (Bad file descriptor) [pid 6581] close(15) = -1 EBADF (Bad file descriptor) [pid 6581] close(16) = -1 EBADF (Bad file descriptor) [pid 6581] close(17) = -1 EBADF (Bad file descriptor) [pid 6581] close(18) = -1 EBADF (Bad file descriptor) [pid 6581] close(19) = -1 EBADF (Bad file descriptor) [pid 6581] close(20) = -1 EBADF (Bad file descriptor) [pid 6581] close(21) = -1 EBADF (Bad file descriptor) [pid 6581] close(22) = -1 EBADF (Bad file descriptor) [pid 6581] close(23) = -1 EBADF (Bad file descriptor) [pid 6581] close(24) = -1 EBADF (Bad file descriptor) [pid 6581] close(25) = -1 EBADF (Bad file descriptor) [pid 6581] close(26) = -1 EBADF (Bad file descriptor) [pid 6581] close(27) = -1 EBADF (Bad file descriptor) [pid 6581] close(28) = -1 EBADF (Bad file descriptor) [pid 6581] close(29) = -1 EBADF (Bad file descriptor) [pid 6581] exit_group(0 [pid 6582] <... futex resumed>) = ? [pid 6581] <... exit_group resumed>) = ? [pid 6583] <... futex resumed>) = ? [pid 6582] +++ exited with 0 +++ [pid 6583] +++ exited with 0 +++ [pid 6581] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1560, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./520", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [ 81.958152][ T6582] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./520/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./520/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./520") = 0 [pid 5019] mkdir("./521", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6584 attached [pid 6584] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1563 [pid 6584] chdir("./521") = 0 [pid 6584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6584] setpgid(0, 0) = 0 [pid 6584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6584] write(3, "1000", 4) = 4 [pid 6584] close(3) = 0 [pid 6584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6584] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6584] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6584] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6584] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1564]}, 88) = 1564 [pid 6584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6584] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6585 attached [pid 6585] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6585] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6585] memfd_create("syzkaller", 0) = 3 [pid 6585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6585] munmap(0x7f15b9a45000, 524288) = 0 [pid 6585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6585] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6585] close(3) = 0 [pid 6585] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6585] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6585] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6585] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6585] ioctl(4, LOOP_CLR_FD) = 0 [pid 6585] close(4) = 0 [pid 6585] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] <... futex resumed>) = 0 [pid 6585] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6585] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6584] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6584] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6585] <... mknodat resumed>) = 0 [pid 6585] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6585] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] <... mprotect resumed>) = 0 [pid 6584] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6587 attached => {parent_tid=[1565]}, 88) = 1565 [pid 6584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6584] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6584] <... futex resumed>) = 0 [pid 6587] <... rseq resumed>) = 0 [pid 6587] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6587] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6587] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6584] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6587] <... mount resumed>) = 0 [pid 6587] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6587] chdir(".") = 0 [pid 6587] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] <... futex resumed>) = 0 [pid 6587] <... futex resumed>) = 1 [pid 6584] close(3) = 0 [pid 6584] close(4) = 0 [pid 6584] close(5) = -1 EBADF (Bad file descriptor) [pid 6584] close(6) = -1 EBADF (Bad file descriptor) [pid 6584] close(7) = -1 EBADF (Bad file descriptor) [pid 6584] close(8) = -1 EBADF (Bad file descriptor) [pid 6584] close(9) = -1 EBADF (Bad file descriptor) [pid 6584] close(10) = -1 EBADF (Bad file descriptor) [pid 6584] close(11) = -1 EBADF (Bad file descriptor) [pid 6584] close(12) = -1 EBADF (Bad file descriptor) [pid 6584] close(13) = -1 EBADF (Bad file descriptor) [pid 6584] close(14) = -1 EBADF (Bad file descriptor) [pid 6584] close(15) = -1 EBADF (Bad file descriptor) [pid 6584] close(16) = -1 EBADF (Bad file descriptor) [pid 6584] close(17) = -1 EBADF (Bad file descriptor) [pid 6584] close(18) = -1 EBADF (Bad file descriptor) [pid 6584] close(19) = -1 EBADF (Bad file descriptor) [pid 6584] close(20) = -1 EBADF (Bad file descriptor) [pid 6584] close(21 [pid 6587] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6584] close(22) = -1 EBADF (Bad file descriptor) [pid 6584] close(23) = -1 EBADF (Bad file descriptor) [pid 6584] close(24) = -1 EBADF (Bad file descriptor) [pid 6584] close(25) = -1 EBADF (Bad file descriptor) [pid 6584] close(26) = -1 EBADF (Bad file descriptor) [pid 6584] close(27) = -1 EBADF (Bad file descriptor) [pid 6584] close(28) = -1 EBADF (Bad file descriptor) [pid 6584] close(29) = -1 EBADF (Bad file descriptor) [pid 6584] exit_group(0 [pid 6585] <... futex resumed>) = ? [pid 6584] <... exit_group resumed>) = ? [pid 6585] +++ exited with 0 +++ [pid 6587] <... futex resumed>) = ? [pid 6587] +++ exited with 0 +++ [pid 6584] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1563, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./521", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./521/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./521/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./521/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./521/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./521/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [ 82.052667][ T6585] loop0: detected capacity change from 0 to 1024 [pid 5019] rmdir("./521/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./521/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./521/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./521") = 0 [pid 5019] mkdir("./522", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1566 ./strace-static-x86_64: Process 6588 attached [pid 6588] set_robust_list(0x555556a426a0, 24) = 0 [pid 6588] chdir("./522") = 0 [pid 6588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6588] setpgid(0, 0) = 0 [pid 6588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6588] write(3, "1000", 4) = 4 [pid 6588] close(3) = 0 [pid 6588] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6588] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6588] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6588] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6588] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6589 attached [pid 6589] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6588] <... clone3 resumed> => {parent_tid=[1567]}, 88) = 1567 [pid 6588] rt_sigprocmask(SIG_SETMASK, [], [pid 6589] set_robust_list(0x7f15c1e659a0, 24 [pid 6588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] <... set_robust_list resumed>) = 0 [pid 6588] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6588] <... futex resumed>) = 0 [pid 6588] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6589] memfd_create("syzkaller", 0) = 3 [pid 6589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6589] munmap(0x7f15b9a45000, 524288) = 0 [pid 6589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6589] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6589] close(3) = 0 [pid 6589] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6589] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6589] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6589] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6589] ioctl(4, LOOP_CLR_FD) = 0 [pid 6589] close(4) = 0 [pid 6589] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6588] <... futex resumed>) = 0 [pid 6589] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6588] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6588] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6588] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1568]}, 88) = 1568 [pid 6588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6588] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6588] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6590 attached [pid 6590] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6589] <... mknodat resumed>) = 0 [pid 6589] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6589] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6590] <... rseq resumed>) = 0 [pid 6590] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6590] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6590] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6590] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6590] chdir(".") = 0 [pid 6590] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6588] <... futex resumed>) = 0 [pid 6588] close(3) = 0 [pid 6588] close(4) = 0 [pid 6588] close(5) = -1 EBADF (Bad file descriptor) [pid 6588] close(6) = -1 EBADF (Bad file descriptor) [pid 6588] close(7 [pid 6590] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6588] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6588] close(8) = -1 EBADF (Bad file descriptor) [pid 6588] close(9) = -1 EBADF (Bad file descriptor) [pid 6588] close(10) = -1 EBADF (Bad file descriptor) [pid 6588] close(11) = -1 EBADF (Bad file descriptor) [pid 6588] close(12) = -1 EBADF (Bad file descriptor) [pid 6588] close(13) = -1 EBADF (Bad file descriptor) [pid 6588] close(14) = -1 EBADF (Bad file descriptor) [pid 6588] close(15) = -1 EBADF (Bad file descriptor) [pid 6588] close(16) = -1 EBADF (Bad file descriptor) [pid 6588] close(17) = -1 EBADF (Bad file descriptor) [pid 6588] close(18) = -1 EBADF (Bad file descriptor) [pid 6588] close(19) = -1 EBADF (Bad file descriptor) [pid 6588] close(20) = -1 EBADF (Bad file descriptor) [pid 6588] close(21) = -1 EBADF (Bad file descriptor) [pid 6588] close(22) = -1 EBADF (Bad file descriptor) [pid 6588] close(23) = -1 EBADF (Bad file descriptor) [pid 6588] close(24) = -1 EBADF (Bad file descriptor) [pid 6588] close(25) = -1 EBADF (Bad file descriptor) [pid 6588] close(26) = -1 EBADF (Bad file descriptor) [pid 6588] close(27) = -1 EBADF (Bad file descriptor) [pid 6588] close(28) = -1 EBADF (Bad file descriptor) [pid 6588] close(29) = -1 EBADF (Bad file descriptor) [pid 6588] exit_group(0 [pid 6590] <... futex resumed>) = ? [pid 6589] <... futex resumed>) = ? [pid 6588] <... exit_group resumed>) = ? [pid 6590] +++ exited with 0 +++ [pid 6589] +++ exited with 0 +++ [pid 6588] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1566, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./522", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./522/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./522/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./522/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./522") = 0 [pid 5019] mkdir("./523", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 82.142086][ T6589] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6591 attached [pid 6591] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1569 [pid 6591] <... set_robust_list resumed>) = 0 [pid 6591] chdir("./523") = 0 [pid 6591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6591] setpgid(0, 0) = 0 [pid 6591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6591] write(3, "1000", 4) = 4 [pid 6591] close(3) = 0 [pid 6591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6591] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6591] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6591] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6591] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6591] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6592 attached [pid 6592] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6592] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6592] rt_sigprocmask(SIG_SETMASK, [], [pid 6591] <... clone3 resumed> => {parent_tid=[1570]}, 88) = 1570 [pid 6592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6592] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6591] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6592] <... futex resumed>) = 0 [pid 6591] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6592] memfd_create("syzkaller", 0) = 3 [pid 6592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6592] munmap(0x7f15b9a45000, 524288) = 0 [pid 6592] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6592] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6592] close(3) = 0 [pid 6592] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6592] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6592] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6592] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6592] ioctl(4, LOOP_CLR_FD) = 0 [pid 6592] close(4) = 0 [pid 6592] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6591] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6591] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6591] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6592] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6591] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1571]}, 88) = 1571 [pid 6591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6591] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6591] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6593 attached [pid 6593] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6593] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6593] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6593] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6592] <... mknodat resumed>) = 0 [pid 6592] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6593] <... mount resumed>) = 0 [pid 6593] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6592] <... futex resumed>) = 0 [pid 6593] chdir(".") = 0 [pid 6593] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] <... futex resumed>) = 0 [pid 6591] close(3) = 0 [pid 6591] close(4) = 0 [pid 6591] close(5) = -1 EBADF (Bad file descriptor) [pid 6591] close(6) = -1 EBADF (Bad file descriptor) [pid 6591] close(7) = -1 EBADF (Bad file descriptor) [pid 6591] close(8) = -1 EBADF (Bad file descriptor) [pid 6591] close(9) = -1 EBADF (Bad file descriptor) [pid 6591] close(10) = -1 EBADF (Bad file descriptor) [pid 6591] close(11) = -1 EBADF (Bad file descriptor) [pid 6591] close(12) = -1 EBADF (Bad file descriptor) [pid 6591] close(13) = -1 EBADF (Bad file descriptor) [pid 6591] close(14) = -1 EBADF (Bad file descriptor) [pid 6591] close(15) = -1 EBADF (Bad file descriptor) [pid 6591] close(16) = -1 EBADF (Bad file descriptor) [pid 6591] close(17) = -1 EBADF (Bad file descriptor) [pid 6591] close(18) = -1 EBADF (Bad file descriptor) [pid 6591] close(19) = -1 EBADF (Bad file descriptor) [pid 6591] close(20) = -1 EBADF (Bad file descriptor) [pid 6591] close(21) = -1 EBADF (Bad file descriptor) [pid 6591] close(22) = -1 EBADF (Bad file descriptor) [pid 6591] close(23) = -1 EBADF (Bad file descriptor) [pid 6591] close(24) = -1 EBADF (Bad file descriptor) [pid 6591] close(25) = -1 EBADF (Bad file descriptor) [pid 6591] close(26) = -1 EBADF (Bad file descriptor) [pid 6591] close(27) = -1 EBADF (Bad file descriptor) [pid 6591] close(28) = -1 EBADF (Bad file descriptor) [pid 6591] close(29) = -1 EBADF (Bad file descriptor) [pid 6591] exit_group(0) = ? [pid 6593] <... futex resumed>) = ? [pid 6593] +++ exited with 0 +++ [pid 6592] <... futex resumed>) = ? [pid 6592] +++ exited with 0 +++ [pid 6591] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1569, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./523", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./523/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./523/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./523") = 0 [pid 5019] mkdir("./524", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 82.222438][ T6592] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1572 ./strace-static-x86_64: Process 6594 attached [pid 6594] set_robust_list(0x555556a426a0, 24) = 0 [pid 6594] chdir("./524") = 0 [pid 6594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6594] setpgid(0, 0) = 0 [pid 6594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6594] write(3, "1000", 4) = 4 [pid 6594] close(3) = 0 [pid 6594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6594] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6594] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6594] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6594] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6595 attached [pid 6595] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6595] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6595] rt_sigprocmask(SIG_SETMASK, [], [pid 6594] <... clone3 resumed> => {parent_tid=[1573]}, 88) = 1573 [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6594] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6595] <... futex resumed>) = 0 [pid 6594] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6595] memfd_create("syzkaller", 0) = 3 [pid 6595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6595] munmap(0x7f15b9a45000, 524288) = 0 [pid 6595] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6595] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6595] close(3) = 0 [pid 6595] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6595] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6595] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6595] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6595] ioctl(4, LOOP_CLR_FD) = 0 [pid 6595] close(4) = 0 [pid 6595] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6594] <... futex resumed>) = 0 [pid 6594] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6594] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6594] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1574]}, 88) = 1574 [pid 6594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6594] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6594] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6596 attached [pid 6596] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6596] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6596] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6596] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6595] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6596] <... mount resumed>) = 0 [pid 6596] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6596] chdir(".") = 0 [pid 6596] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 [pid 6596] <... futex resumed>) = 1 [pid 6596] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6595] <... mknodat resumed>) = 0 [pid 6595] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6595] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6594] close(3) = 0 [pid 6594] close(4) = 0 [pid 6594] close(5) = -1 EBADF (Bad file descriptor) [pid 6594] close(6) = -1 EBADF (Bad file descriptor) [pid 6594] close(7) = -1 EBADF (Bad file descriptor) [pid 6594] close(8) = -1 EBADF (Bad file descriptor) [pid 6594] close(9) = -1 EBADF (Bad file descriptor) [pid 6594] close(10) = -1 EBADF (Bad file descriptor) [pid 6594] close(11) = -1 EBADF (Bad file descriptor) [pid 6594] close(12) = -1 EBADF (Bad file descriptor) [pid 6594] close(13) = -1 EBADF (Bad file descriptor) [pid 6594] close(14) = -1 EBADF (Bad file descriptor) [pid 6594] close(15) = -1 EBADF (Bad file descriptor) [pid 6594] close(16) = -1 EBADF (Bad file descriptor) [pid 6594] close(17) = -1 EBADF (Bad file descriptor) [pid 6594] close(18) = -1 EBADF (Bad file descriptor) [pid 6594] close(19) = -1 EBADF (Bad file descriptor) [pid 6594] close(20) = -1 EBADF (Bad file descriptor) [pid 6594] close(21) = -1 EBADF (Bad file descriptor) [pid 6594] close(22) = -1 EBADF (Bad file descriptor) [pid 6594] close(23) = -1 EBADF (Bad file descriptor) [pid 6594] close(24) = -1 EBADF (Bad file descriptor) [pid 6594] close(25) = -1 EBADF (Bad file descriptor) [pid 6594] close(26) = -1 EBADF (Bad file descriptor) [pid 6594] close(27) = -1 EBADF (Bad file descriptor) [pid 6594] close(28) = -1 EBADF (Bad file descriptor) [pid 6594] close(29) = -1 EBADF (Bad file descriptor) [pid 6594] exit_group(0) = ? [pid 6596] <... futex resumed>) = ? [pid 6596] +++ exited with 0 +++ [pid 6595] <... futex resumed>) = ? [pid 6595] +++ exited with 0 +++ [pid 6594] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1572, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./524", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./524/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./524/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./524") = 0 [pid 5019] mkdir("./525", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1575 ./strace-static-x86_64: Process 6597 attached [pid 6597] set_robust_list(0x555556a426a0, 24) = 0 [pid 6597] chdir("./525") = 0 [pid 6597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6597] setpgid(0, 0) = 0 [pid 6597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6597] write(3, "1000", 4) = 4 [pid 6597] close(3) = 0 [pid 6597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6597] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6597] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1576]}, 88) = 1576 [pid 6597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6597] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6598 attached [pid 6598] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6598] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6598] memfd_create("syzkaller", 0) = 3 [pid 6598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 82.300688][ T6595] loop0: detected capacity change from 0 to 1024 [pid 6598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6598] munmap(0x7f15b9a45000, 524288) = 0 [pid 6598] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6598] close(3) = 0 [pid 6598] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6598] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6598] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6598] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6598] ioctl(4, LOOP_CLR_FD) = 0 [pid 6598] close(4) = 0 [pid 6598] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6597] <... futex resumed>) = 0 [pid 6597] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6598] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6597] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6597] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1577]}, 88) = 1577 [pid 6597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6597] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6599 attached [pid 6599] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6599] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6599] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6599] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6598] <... mknodat resumed>) = 0 [pid 6598] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] <... mount resumed>) = 0 [pid 6599] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6599] chdir(".") = 0 [pid 6599] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6597] <... futex resumed>) = 0 [pid 6599] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6597] close(3) = 0 [pid 6597] close(4) = 0 [pid 6597] close(5) = -1 EBADF (Bad file descriptor) [pid 6597] close(6) = -1 EBADF (Bad file descriptor) [pid 6597] close(7) = -1 EBADF (Bad file descriptor) [pid 6597] close(8) = -1 EBADF (Bad file descriptor) [pid 6597] close(9) = -1 EBADF (Bad file descriptor) [pid 6597] close(10) = -1 EBADF (Bad file descriptor) [pid 6597] close(11) = -1 EBADF (Bad file descriptor) [pid 6597] close(12) = -1 EBADF (Bad file descriptor) [pid 6597] close(13) = -1 EBADF (Bad file descriptor) [pid 6597] close(14) = -1 EBADF (Bad file descriptor) [pid 6597] close(15) = -1 EBADF (Bad file descriptor) [pid 6597] close(16) = -1 EBADF (Bad file descriptor) [pid 6597] close(17) = -1 EBADF (Bad file descriptor) [pid 6597] close(18) = -1 EBADF (Bad file descriptor) [pid 6597] close(19) = -1 EBADF (Bad file descriptor) [pid 6597] close(20) = -1 EBADF (Bad file descriptor) [pid 6597] close(21) = -1 EBADF (Bad file descriptor) [pid 6597] close(22) = -1 EBADF (Bad file descriptor) [pid 6597] close(23) = -1 EBADF (Bad file descriptor) [pid 6597] close(24) = -1 EBADF (Bad file descriptor) [pid 6597] close(25) = -1 EBADF (Bad file descriptor) [pid 6597] close(26) = -1 EBADF (Bad file descriptor) [pid 6597] close(27) = -1 EBADF (Bad file descriptor) [pid 6597] close(28) = -1 EBADF (Bad file descriptor) [pid 6597] close(29) = -1 EBADF (Bad file descriptor) [pid 6597] exit_group(0 [pid 6598] <... futex resumed>) = ? [pid 6597] <... exit_group resumed>) = ? [pid 6598] +++ exited with 0 +++ [pid 6599] <... futex resumed>) = ? [pid 6599] +++ exited with 0 +++ [pid 6597] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1575, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./525", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./525/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./525/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./525") = 0 [pid 5019] mkdir("./526", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 82.365631][ T6598] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1578 ./strace-static-x86_64: Process 6600 attached [pid 6600] set_robust_list(0x555556a426a0, 24) = 0 [pid 6600] chdir("./526") = 0 [pid 6600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6600] setpgid(0, 0) = 0 [pid 6600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6600] write(3, "1000", 4) = 4 [pid 6600] close(3) = 0 [pid 6600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6600] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6600] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6600] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6601 attached => {parent_tid=[1579]}, 88) = 1579 [pid 6601] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6600] rt_sigprocmask(SIG_SETMASK, [], [pid 6601] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6601] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6600] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6601] <... futex resumed>) = 0 [pid 6600] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6601] memfd_create("syzkaller", 0) = 3 [pid 6601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6601] munmap(0x7f15b9a45000, 524288) = 0 [pid 6601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6601] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6601] close(3) = 0 [pid 6601] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6601] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6601] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6601] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6601] ioctl(4, LOOP_CLR_FD) = 0 [pid 6601] close(4) = 0 [pid 6601] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... futex resumed>) = 0 [pid 6600] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6600] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6600] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1580]}, 88) = 1580 [pid 6600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6600] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6600] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6601] <... futex resumed>) = 1 [pid 6601] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6601] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6601] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6602 attached [pid 6602] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6602] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6602] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6602] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6602] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6602] chdir(".") = 0 [pid 6602] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6600] close(3) = 0 [pid 6600] close(4) = 0 [pid 6600] close(5) = -1 EBADF (Bad file descriptor) [pid 6600] close(6) = -1 EBADF (Bad file descriptor) [pid 6600] close(7) = -1 EBADF (Bad file descriptor) [pid 6600] close(8) = -1 EBADF (Bad file descriptor) [pid 6600] close(9) = -1 EBADF (Bad file descriptor) [pid 6600] close(10) = -1 EBADF (Bad file descriptor) [pid 6600] close(11) = -1 EBADF (Bad file descriptor) [pid 6600] close(12) = -1 EBADF (Bad file descriptor) [pid 6600] close(13) = -1 EBADF (Bad file descriptor) [pid 6600] close(14) = -1 EBADF (Bad file descriptor) [pid 6600] close(15) = -1 EBADF (Bad file descriptor) [pid 6600] close(16) = -1 EBADF (Bad file descriptor) [pid 6600] close(17) = -1 EBADF (Bad file descriptor) [pid 6600] close(18) = -1 EBADF (Bad file descriptor) [pid 6600] close(19) = -1 EBADF (Bad file descriptor) [pid 6600] close(20) = -1 EBADF (Bad file descriptor) [pid 6600] close(21) = -1 EBADF (Bad file descriptor) [pid 6600] close(22) = -1 EBADF (Bad file descriptor) [pid 6600] close(23) = -1 EBADF (Bad file descriptor) [pid 6600] close(24) = -1 EBADF (Bad file descriptor) [pid 6600] close(25) = -1 EBADF (Bad file descriptor) [pid 6600] close(26) = -1 EBADF (Bad file descriptor) [pid 6600] close(27) = -1 EBADF (Bad file descriptor) [pid 6600] close(28) = -1 EBADF (Bad file descriptor) [pid 6600] close(29) = -1 EBADF (Bad file descriptor) [pid 6600] exit_group(0 [pid 6601] <... futex resumed>) = ? [pid 6600] <... exit_group resumed>) = ? [pid 6601] +++ exited with 0 +++ [pid 6602] +++ exited with 0 +++ [pid 6600] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1578, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./526", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./526/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./526/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./526") = 0 [pid 5019] mkdir("./527", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1581 ./strace-static-x86_64: Process 6603 attached [pid 6603] set_robust_list(0x555556a426a0, 24) = 0 [pid 6603] chdir("./527") = 0 [pid 6603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6603] setpgid(0, 0) = 0 [pid 6603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6603] write(3, "1000", 4) = 4 [pid 6603] close(3) = 0 [pid 6603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6603] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6603] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6603] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 82.446842][ T6601] loop0: detected capacity change from 0 to 1024 [pid 6603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6603] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6604 attached => {parent_tid=[1582]}, 88) = 1582 [pid 6604] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6604] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6604] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6603] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6604] <... futex resumed>) = 0 [pid 6603] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6604] memfd_create("syzkaller", 0) = 3 [pid 6604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6604] munmap(0x7f15b9a45000, 524288) = 0 [pid 6604] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6604] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6604] close(3) = 0 [pid 6604] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6604] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6604] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6604] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6604] ioctl(4, LOOP_CLR_FD) = 0 [pid 6604] close(4) = 0 [pid 6604] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6604] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6603] <... futex resumed>) = 0 [pid 6603] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6603] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6603] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1583]}, 88) = 1583 [pid 6603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6603] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6605 attached ) = 0 [pid 6603] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6604] <... futex resumed>) = 0 [pid 6604] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6605] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6605] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6604] <... mknodat resumed>) = 0 [pid 6604] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6604] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6605] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6605] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6605] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6605] chdir(".") = 0 [pid 6605] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6603] <... futex resumed>) = 0 [pid 6605] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6603] close(3) = 0 [pid 6603] close(4) = 0 [pid 6603] close(5) = -1 EBADF (Bad file descriptor) [pid 6603] close(6) = -1 EBADF (Bad file descriptor) [pid 6603] close(7) = -1 EBADF (Bad file descriptor) [pid 6603] close(8) = -1 EBADF (Bad file descriptor) [pid 6603] close(9) = -1 EBADF (Bad file descriptor) [pid 6603] close(10) = -1 EBADF (Bad file descriptor) [pid 6603] close(11) = -1 EBADF (Bad file descriptor) [pid 6603] close(12) = -1 EBADF (Bad file descriptor) [pid 6603] close(13) = -1 EBADF (Bad file descriptor) [pid 6603] close(14) = -1 EBADF (Bad file descriptor) [pid 6603] close(15) = -1 EBADF (Bad file descriptor) [pid 6603] close(16) = -1 EBADF (Bad file descriptor) [pid 6603] close(17) = -1 EBADF (Bad file descriptor) [pid 6603] close(18) = -1 EBADF (Bad file descriptor) [pid 6603] close(19) = -1 EBADF (Bad file descriptor) [pid 6603] close(20) = -1 EBADF (Bad file descriptor) [pid 6603] close(21) = -1 EBADF (Bad file descriptor) [pid 6603] close(22) = -1 EBADF (Bad file descriptor) [pid 6603] close(23) = -1 EBADF (Bad file descriptor) [pid 6603] close(24) = -1 EBADF (Bad file descriptor) [pid 6603] close(25) = -1 EBADF (Bad file descriptor) [pid 6603] close(26) = -1 EBADF (Bad file descriptor) [pid 6603] close(27) = -1 EBADF (Bad file descriptor) [pid 6603] close(28) = -1 EBADF (Bad file descriptor) [pid 6603] close(29) = -1 EBADF (Bad file descriptor) [pid 6603] exit_group(0) = ? [pid 6604] <... futex resumed>) = ? [pid 6605] <... futex resumed>) = ? [pid 6604] +++ exited with 0 +++ [pid 6605] +++ exited with 0 +++ [pid 6603] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1581, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./527", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./527/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./527/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./527") = 0 [pid 5019] mkdir("./528", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 82.518426][ T6604] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6606 attached [pid 6606] set_robust_list(0x555556a426a0, 24) = 0 [pid 6606] chdir("./528") = 0 [pid 6606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6606] setpgid(0, 0) = 0 [pid 6606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6606] write(3, "1000", 4) = 4 [pid 6606] close(3) = 0 [pid 6606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6606] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1584 [pid 6606] <... futex resumed>) = 0 [pid 6606] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6606] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1585]}, 88) = 1585 [pid 6606] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6607 attached [pid 6607] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6607] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6607] rt_sigprocmask(SIG_SETMASK, [], [pid 6606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6607] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6606] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6607] <... futex resumed>) = 0 [pid 6606] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6607] memfd_create("syzkaller", 0) = 3 [pid 6607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6607] munmap(0x7f15b9a45000, 524288) = 0 [pid 6607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6607] close(3) = 0 [pid 6607] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6607] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6607] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6607] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6607] ioctl(4, LOOP_CLR_FD) = 0 [pid 6607] close(4) = 0 [pid 6607] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6606] <... futex resumed>) = 0 [pid 6606] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6606] <... futex resumed>) = 0 [pid 6606] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6606] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6606] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6607] <... mknodat resumed>) = 0 [pid 6606] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6609 attached => {parent_tid=[1586]}, 88) = 1586 [pid 6609] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6606] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6606] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6609] <... rseq resumed>) = 0 [pid 6609] set_robust_list(0x7f15b9ac49a0, 24 [pid 6607] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6607] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6609] <... set_robust_list resumed>) = 0 [pid 6609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6609] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6609] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6609] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6609] chdir(".") = 0 [pid 6609] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6606] <... futex resumed>) = 0 [pid 6606] close(3) = 0 [pid 6606] close(4) = 0 [pid 6606] close(5) = -1 EBADF (Bad file descriptor) [pid 6606] close(6) = -1 EBADF (Bad file descriptor) [pid 6606] close(7) = -1 EBADF (Bad file descriptor) [pid 6606] close(8) = -1 EBADF (Bad file descriptor) [pid 6606] close(9) = -1 EBADF (Bad file descriptor) [pid 6606] close(10) = -1 EBADF (Bad file descriptor) [pid 6606] close(11) = -1 EBADF (Bad file descriptor) [pid 6606] close(12) = -1 EBADF (Bad file descriptor) [pid 6606] close(13) = -1 EBADF (Bad file descriptor) [pid 6606] close(14) = -1 EBADF (Bad file descriptor) [pid 6606] close(15) = -1 EBADF (Bad file descriptor) [pid 6609] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6606] close(16) = -1 EBADF (Bad file descriptor) [pid 6606] close(17) = -1 EBADF (Bad file descriptor) [pid 6606] close(18) = -1 EBADF (Bad file descriptor) [pid 6606] close(19) = -1 EBADF (Bad file descriptor) [pid 6606] close(20) = -1 EBADF (Bad file descriptor) [pid 6606] close(21) = -1 EBADF (Bad file descriptor) [pid 6606] close(22) = -1 EBADF (Bad file descriptor) [pid 6606] close(23) = -1 EBADF (Bad file descriptor) [pid 6606] close(24) = -1 EBADF (Bad file descriptor) [pid 6606] close(25) = -1 EBADF (Bad file descriptor) [pid 6606] close(26) = -1 EBADF (Bad file descriptor) [pid 6606] close(27) = -1 EBADF (Bad file descriptor) [pid 6606] close(28) = -1 EBADF (Bad file descriptor) [pid 6606] close(29) = -1 EBADF (Bad file descriptor) [pid 6606] exit_group(0 [pid 6607] <... futex resumed>) = ? [pid 6606] <... exit_group resumed>) = ? [pid 6609] <... futex resumed>) = ? [pid 6607] +++ exited with 0 +++ [pid 6609] +++ exited with 0 +++ [pid 6606] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1584, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./528", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./528/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./528/binderfs") = 0 [ 82.595628][ T6607] loop0: detected capacity change from 0 to 1024 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./528") = 0 [pid 5019] mkdir("./529", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1587 ./strace-static-x86_64: Process 6610 attached [pid 6610] set_robust_list(0x555556a426a0, 24) = 0 [pid 6610] chdir("./529") = 0 [pid 6610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6610] setpgid(0, 0) = 0 [pid 6610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6610] write(3, "1000", 4) = 4 [pid 6610] close(3) = 0 [pid 6610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6610] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6610] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1588]}, 88) = 1588 [pid 6610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6610] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6611 attached [pid 6611] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6611] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6611] memfd_create("syzkaller", 0) = 3 [pid 6611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6611] munmap(0x7f15b9a45000, 524288) = 0 [pid 6611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6611] close(3) = 0 [pid 6611] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6611] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6611] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6611] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6611] ioctl(4, LOOP_CLR_FD) = 0 [pid 6611] close(4) = 0 [pid 6611] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6610] <... futex resumed>) = 0 [pid 6610] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6610] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1589]}, 88) = 1589 [pid 6610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6610] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6612 attached [pid 6612] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6612] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6612] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6612] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6611] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6612] <... mount resumed>) = 0 [pid 6612] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6612] chdir(".") = 0 [pid 6612] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] <... futex resumed>) = 0 [pid 6612] <... futex resumed>) = 1 [pid 6612] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] <... mknodat resumed>) = 0 [pid 6611] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] close(3 [pid 6611] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6610] <... close resumed>) = 0 [pid 6610] close(4) = 0 [pid 6610] close(5) = -1 EBADF (Bad file descriptor) [pid 6610] close(6) = -1 EBADF (Bad file descriptor) [pid 6610] close(7) = -1 EBADF (Bad file descriptor) [pid 6610] close(8) = -1 EBADF (Bad file descriptor) [pid 6610] close(9) = -1 EBADF (Bad file descriptor) [pid 6610] close(10) = -1 EBADF (Bad file descriptor) [pid 6610] close(11) = -1 EBADF (Bad file descriptor) [pid 6610] close(12) = -1 EBADF (Bad file descriptor) [pid 6610] close(13) = -1 EBADF (Bad file descriptor) [pid 6610] close(14) = -1 EBADF (Bad file descriptor) [pid 6610] close(15) = -1 EBADF (Bad file descriptor) [pid 6610] close(16) = -1 EBADF (Bad file descriptor) [pid 6610] close(17) = -1 EBADF (Bad file descriptor) [pid 6610] close(18) = -1 EBADF (Bad file descriptor) [pid 6610] close(19) = -1 EBADF (Bad file descriptor) [pid 6610] close(20) = -1 EBADF (Bad file descriptor) [pid 6610] close(21) = -1 EBADF (Bad file descriptor) [pid 6610] close(22) = -1 EBADF (Bad file descriptor) [pid 6610] close(23) = -1 EBADF (Bad file descriptor) [pid 6610] close(24) = -1 EBADF (Bad file descriptor) [pid 6610] close(25) = -1 EBADF (Bad file descriptor) [pid 6610] close(26) = -1 EBADF (Bad file descriptor) [pid 6610] close(27) = -1 EBADF (Bad file descriptor) [pid 6610] close(28) = -1 EBADF (Bad file descriptor) [pid 6610] close(29) = -1 EBADF (Bad file descriptor) [pid 6610] exit_group(0) = ? [pid 6612] <... futex resumed>) = ? [pid 6611] <... futex resumed>) = ? [pid 6612] +++ exited with 0 +++ [pid 6611] +++ exited with 0 +++ [pid 6610] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1587, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./529", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./529/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./529/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./529") = 0 [pid 5019] mkdir("./530", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1590 ./strace-static-x86_64: Process 6613 attached [pid 6613] set_robust_list(0x555556a426a0, 24) = 0 [pid 6613] chdir("./530") = 0 [pid 6613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6613] setpgid(0, 0) = 0 [pid 6613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6613] write(3, "1000", 4) = 4 [pid 6613] close(3) = 0 [pid 6613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6613] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6613] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1591]}, 88) = 1591 [pid 6613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6613] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6614 attached [pid 6614] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6614] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6614] memfd_create("syzkaller", 0) = 3 [pid 6614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 82.677747][ T6611] loop0: detected capacity change from 0 to 1024 [pid 6614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6614] munmap(0x7f15b9a45000, 524288) = 0 [pid 6614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6614] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6614] close(3) = 0 [pid 6614] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6614] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6614] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6614] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6614] ioctl(4, LOOP_CLR_FD) = 0 [pid 6614] close(4) = 0 [pid 6614] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = 0 [pid 6614] <... futex resumed>) = 1 [pid 6613] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6613] <... futex resumed>) = 0 [pid 6613] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6613] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6615 attached => {parent_tid=[1592]}, 88) = 1592 [pid 6613] rt_sigprocmask(SIG_SETMASK, [], [pid 6615] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6615] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6615] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6613] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6613] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6615] <... futex resumed>) = 0 [pid 6615] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6615] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6614] <... mknodat resumed>) = 0 [pid 6614] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] <... mount resumed>) = 0 [pid 6615] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6615] chdir(".") = 0 [pid 6615] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = 0 [pid 6613] close(3) = 0 [pid 6613] close(4) = 0 [pid 6613] close(5) = -1 EBADF (Bad file descriptor) [pid 6613] close(6) = -1 EBADF (Bad file descriptor) [pid 6613] close(7) = -1 EBADF (Bad file descriptor) [pid 6613] close(8) = -1 EBADF (Bad file descriptor) [pid 6613] close(9) = -1 EBADF (Bad file descriptor) [pid 6613] close(10) = -1 EBADF (Bad file descriptor) [pid 6613] close(11) = -1 EBADF (Bad file descriptor) [pid 6613] close(12) = -1 EBADF (Bad file descriptor) [pid 6613] close(13) = -1 EBADF (Bad file descriptor) [pid 6613] close(14) = -1 EBADF (Bad file descriptor) [pid 6613] close(15) = -1 EBADF (Bad file descriptor) [pid 6613] close(16) = -1 EBADF (Bad file descriptor) [pid 6613] close(17) = -1 EBADF (Bad file descriptor) [pid 6613] close(18) = -1 EBADF (Bad file descriptor) [pid 6613] close(19) = -1 EBADF (Bad file descriptor) [pid 6613] close(20) = -1 EBADF (Bad file descriptor) [pid 6613] close(21) = -1 EBADF (Bad file descriptor) [pid 6613] close(22) = -1 EBADF (Bad file descriptor) [pid 6613] close(23) = -1 EBADF (Bad file descriptor) [pid 6613] close(24) = -1 EBADF (Bad file descriptor) [pid 6613] close(25) = -1 EBADF (Bad file descriptor) [pid 6613] close(26) = -1 EBADF (Bad file descriptor) [pid 6613] close(27) = -1 EBADF (Bad file descriptor) [pid 6613] close(28) = -1 EBADF (Bad file descriptor) [pid 6613] close(29) = -1 EBADF (Bad file descriptor) [pid 6613] exit_group(0) = ? [pid 6614] <... futex resumed>) = ? [pid 6614] +++ exited with 0 +++ [pid 6615] <... futex resumed>) = ? [pid 6615] +++ exited with 0 +++ [pid 6613] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1590, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./530", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./530/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./530/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./530/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./530") = 0 [pid 5019] mkdir("./531", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1593 ./strace-static-x86_64: Process 6616 attached [pid 6616] set_robust_list(0x555556a426a0, 24) = 0 [pid 6616] chdir("./531") = 0 [pid 6616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6616] setpgid(0, 0) = 0 [ 82.744056][ T6614] loop0: detected capacity change from 0 to 1024 [pid 6616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6616] write(3, "1000", 4) = 4 [pid 6616] close(3) = 0 [pid 6616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6616] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6616] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6616] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1594]}, 88) = 1594 ./strace-static-x86_64: Process 6617 attached [pid 6617] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6617] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6617] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6616] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6616] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6617] memfd_create("syzkaller", 0) = 3 [pid 6617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6617] munmap(0x7f15b9a45000, 524288) = 0 [pid 6617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6617] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6617] close(3) = 0 [pid 6617] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6617] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6617] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6617] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6617] ioctl(4, LOOP_CLR_FD) = 0 [pid 6617] close(4) = 0 [pid 6617] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6616] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6616] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1595]}, 88) = 1595 [pid 6616] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6618 attached NULL, 8) = 0 [pid 6618] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6616] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] set_robust_list(0x7f15b9ac49a0, 24 [pid 6616] <... futex resumed>) = 0 [pid 6618] <... set_robust_list resumed>) = 0 [pid 6618] rt_sigprocmask(SIG_SETMASK, [], [pid 6616] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6618] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6618] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6617] <... futex resumed>) = 1 [pid 6618] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 6617] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6618] <... openat resumed>) = 4 [pid 6618] chdir(".") = 0 [pid 6617] <... mknodat resumed>) = 0 [pid 6618] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6618] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6616] close(3 [pid 6618] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6617] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6616] <... close resumed>) = 0 [pid 6616] close(4) = 0 [pid 6616] close(5) = -1 EBADF (Bad file descriptor) [pid 6616] close(6) = -1 EBADF (Bad file descriptor) [pid 6616] close(7) = -1 EBADF (Bad file descriptor) [pid 6616] close(8) = -1 EBADF (Bad file descriptor) [pid 6616] close(9) = -1 EBADF (Bad file descriptor) [pid 6616] close(10) = -1 EBADF (Bad file descriptor) [pid 6616] close(11) = -1 EBADF (Bad file descriptor) [pid 6616] close(12) = -1 EBADF (Bad file descriptor) [pid 6616] close(13) = -1 EBADF (Bad file descriptor) [pid 6616] close(14) = -1 EBADF (Bad file descriptor) [pid 6616] close(15) = -1 EBADF (Bad file descriptor) [pid 6616] close(16) = -1 EBADF (Bad file descriptor) [pid 6616] close(17) = -1 EBADF (Bad file descriptor) [pid 6616] close(18) = -1 EBADF (Bad file descriptor) [pid 6616] close(19) = -1 EBADF (Bad file descriptor) [pid 6616] close(20) = -1 EBADF (Bad file descriptor) [pid 6616] close(21) = -1 EBADF (Bad file descriptor) [pid 6616] close(22) = -1 EBADF (Bad file descriptor) [pid 6616] close(23) = -1 EBADF (Bad file descriptor) [pid 6616] close(24) = -1 EBADF (Bad file descriptor) [pid 6616] close(25) = -1 EBADF (Bad file descriptor) [pid 6616] close(26) = -1 EBADF (Bad file descriptor) [pid 6616] close(27) = -1 EBADF (Bad file descriptor) [pid 6616] close(28) = -1 EBADF (Bad file descriptor) [pid 6616] close(29) = -1 EBADF (Bad file descriptor) [pid 6616] exit_group(0 [pid 6618] <... futex resumed>) = ? [pid 6617] <... futex resumed>) = ? [pid 6616] <... exit_group resumed>) = ? [pid 6618] +++ exited with 0 +++ [pid 6617] +++ exited with 0 +++ [pid 6616] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1593, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./531", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./531/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./531/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./531") = 0 [pid 5019] mkdir("./532", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6619 attached [pid 6619] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1596 [pid 6619] <... set_robust_list resumed>) = 0 [pid 6619] chdir("./532") = 0 [pid 6619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6619] setpgid(0, 0) = 0 [pid 6619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6619] write(3, "1000", 4) = 4 [pid 6619] close(3) = 0 [pid 6619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6619] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6619] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6620 attached => {parent_tid=[1597]}, 88) = 1597 [pid 6620] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6619] rt_sigprocmask(SIG_SETMASK, [], [ 82.823272][ T6617] loop0: detected capacity change from 0 to 1024 [pid 6620] set_robust_list(0x7f15c1e659a0, 24 [pid 6619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6620] <... set_robust_list resumed>) = 0 [pid 6619] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6620] memfd_create("syzkaller", 0 [pid 6619] <... futex resumed>) = 0 [pid 6620] <... memfd_create resumed>) = 3 [pid 6619] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6620] munmap(0x7f15b9a45000, 524288) = 0 [pid 6620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6620] close(3) = 0 [pid 6620] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6620] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6620] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6620] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6620] ioctl(4, LOOP_CLR_FD) = 0 [pid 6620] close(4) = 0 [pid 6620] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6619] <... futex resumed>) = 0 [pid 6619] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6619] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6620] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6619] <... mprotect resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1598]}, 88) = 1598 [pid 6619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6619] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6619] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6621 attached [pid 6621] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6621] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6621] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6621] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6621] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6621] chdir(".") = 0 [pid 6621] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... futex resumed>) = 0 [pid 6621] <... futex resumed>) = 1 [pid 6621] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] <... mknodat resumed>) = 0 [pid 6620] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6620] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] close(3) = 0 [pid 6619] close(4) = 0 [pid 6619] close(5) = -1 EBADF (Bad file descriptor) [pid 6619] close(6) = -1 EBADF (Bad file descriptor) [pid 6619] close(7) = -1 EBADF (Bad file descriptor) [pid 6619] close(8) = -1 EBADF (Bad file descriptor) [pid 6619] close(9) = -1 EBADF (Bad file descriptor) [pid 6619] close(10) = -1 EBADF (Bad file descriptor) [pid 6619] close(11) = -1 EBADF (Bad file descriptor) [pid 6619] close(12) = -1 EBADF (Bad file descriptor) [pid 6619] close(13) = -1 EBADF (Bad file descriptor) [pid 6619] close(14) = -1 EBADF (Bad file descriptor) [pid 6619] close(15) = -1 EBADF (Bad file descriptor) [pid 6619] close(16) = -1 EBADF (Bad file descriptor) [pid 6619] close(17) = -1 EBADF (Bad file descriptor) [pid 6619] close(18) = -1 EBADF (Bad file descriptor) [pid 6619] close(19) = -1 EBADF (Bad file descriptor) [pid 6619] close(20) = -1 EBADF (Bad file descriptor) [pid 6619] close(21) = -1 EBADF (Bad file descriptor) [pid 6619] close(22) = -1 EBADF (Bad file descriptor) [pid 6619] close(23) = -1 EBADF (Bad file descriptor) [pid 6619] close(24) = -1 EBADF (Bad file descriptor) [pid 6619] close(25) = -1 EBADF (Bad file descriptor) [pid 6619] close(26) = -1 EBADF (Bad file descriptor) [pid 6619] close(27) = -1 EBADF (Bad file descriptor) [pid 6619] close(28) = -1 EBADF (Bad file descriptor) [pid 6619] close(29) = -1 EBADF (Bad file descriptor) [pid 6619] exit_group(0) = ? [pid 6620] <... futex resumed>) = ? [pid 6621] <... futex resumed>) = ? [pid 6620] +++ exited with 0 +++ [pid 6621] +++ exited with 0 +++ [pid 6619] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1596, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./532", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./532/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./532/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./532") = 0 [pid 5019] mkdir("./533", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 82.890979][ T6620] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1599 ./strace-static-x86_64: Process 6622 attached [pid 6622] set_robust_list(0x555556a426a0, 24) = 0 [pid 6622] chdir("./533") = 0 [pid 6622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6622] setpgid(0, 0) = 0 [pid 6622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6622] write(3, "1000", 4) = 4 [pid 6622] close(3) = 0 [pid 6622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6622] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6622] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6623 attached [pid 6623] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6623] set_robust_list(0x7f15c1e659a0, 24 [pid 6622] <... clone3 resumed> => {parent_tid=[1600]}, 88) = 1600 [pid 6623] <... set_robust_list resumed>) = 0 [pid 6622] rt_sigprocmask(SIG_SETMASK, [], [pid 6623] rt_sigprocmask(SIG_SETMASK, [], [pid 6622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6622] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6623] memfd_create("syzkaller", 0 [pid 6622] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6623] <... memfd_create resumed>) = 3 [pid 6623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6623] munmap(0x7f15b9a45000, 524288) = 0 [pid 6623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6623] close(3) = 0 [pid 6623] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6623] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6623] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6623] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6623] ioctl(4, LOOP_CLR_FD) = 0 [pid 6623] close(4) = 0 [pid 6623] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6622] <... futex resumed>) = 0 [pid 6622] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6622] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6624 attached => {parent_tid=[1601]}, 88) = 1601 [pid 6622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6622] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6622] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6624] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6623] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6624] <... rseq resumed>) = 0 [pid 6624] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6624] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6624] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6623] <... mknodat resumed>) = 0 [pid 6623] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6623] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] <... mount resumed>) = 0 [pid 6624] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6624] chdir(".") = 0 [pid 6624] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... futex resumed>) = 0 [pid 6622] close(3) = 0 [pid 6622] close(4) = 0 [pid 6622] close(5) = -1 EBADF (Bad file descriptor) [pid 6622] close(6) = -1 EBADF (Bad file descriptor) [pid 6622] close(7) = -1 EBADF (Bad file descriptor) [pid 6624] <... futex resumed>) = 1 [pid 6622] close(8 [pid 6624] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6622] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6622] close(9) = -1 EBADF (Bad file descriptor) [pid 6622] close(10) = -1 EBADF (Bad file descriptor) [pid 6622] close(11) = -1 EBADF (Bad file descriptor) [pid 6622] close(12) = -1 EBADF (Bad file descriptor) [pid 6622] close(13) = -1 EBADF (Bad file descriptor) [pid 6622] close(14) = -1 EBADF (Bad file descriptor) [pid 6622] close(15) = -1 EBADF (Bad file descriptor) [pid 6622] close(16) = -1 EBADF (Bad file descriptor) [pid 6622] close(17) = -1 EBADF (Bad file descriptor) [pid 6622] close(18) = -1 EBADF (Bad file descriptor) [pid 6622] close(19) = -1 EBADF (Bad file descriptor) [pid 6622] close(20) = -1 EBADF (Bad file descriptor) [pid 6622] close(21) = -1 EBADF (Bad file descriptor) [pid 6622] close(22) = -1 EBADF (Bad file descriptor) [pid 6622] close(23) = -1 EBADF (Bad file descriptor) [pid 6622] close(24) = -1 EBADF (Bad file descriptor) [pid 6622] close(25) = -1 EBADF (Bad file descriptor) [pid 6622] close(26) = -1 EBADF (Bad file descriptor) [pid 6622] close(27) = -1 EBADF (Bad file descriptor) [pid 6622] close(28) = -1 EBADF (Bad file descriptor) [pid 6622] close(29) = -1 EBADF (Bad file descriptor) [pid 6622] exit_group(0 [pid 6624] <... futex resumed>) = ? [pid 6623] <... futex resumed>) = ? [pid 6622] <... exit_group resumed>) = ? [pid 6624] +++ exited with 0 +++ [pid 6623] +++ exited with 0 +++ [pid 6622] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1599, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./533", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./533/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./533/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./533/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./533") = 0 [pid 5019] mkdir("./534", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 82.971268][ T6623] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6625 attached [pid 6625] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1602 [pid 6625] <... set_robust_list resumed>) = 0 [pid 6625] chdir("./534") = 0 [pid 6625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6625] setpgid(0, 0) = 0 [pid 6625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6625] write(3, "1000", 4) = 4 [pid 6625] close(3) = 0 [pid 6625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6625] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6625] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1603]}, 88) = 1603 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6626 attached [pid 6626] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6626] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6626] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6625] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6626] <... futex resumed>) = 0 [pid 6625] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6626] memfd_create("syzkaller", 0) = 3 [pid 6626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6626] munmap(0x7f15b9a45000, 524288) = 0 [pid 6626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6626] close(3) = 0 [pid 6626] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6626] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6626] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6626] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6626] ioctl(4, LOOP_CLR_FD) = 0 [pid 6626] close(4) = 0 [pid 6626] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6626] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6626] <... futex resumed>) = 0 [pid 6625] <... futex resumed>) = 1 [pid 6625] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6626] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6625] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6625] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6625] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6626] <... mknodat resumed>) = 0 [pid 6625] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1604]}, 88) = 1604 [pid 6626] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6625] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6627 attached [pid 6627] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6627] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6626] <... futex resumed>) = 0 [pid 6627] mkdir(".", 0777 [pid 6626] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6627] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6627] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6627] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6627] chdir(".") = 0 [pid 6627] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6625] <... futex resumed>) = 0 [pid 6625] close(3) = 0 [pid 6625] close(4) = 0 [pid 6625] close(5) = -1 EBADF (Bad file descriptor) [pid 6625] close(6) = -1 EBADF (Bad file descriptor) [pid 6627] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6625] close(7) = -1 EBADF (Bad file descriptor) [pid 6625] close(8) = -1 EBADF (Bad file descriptor) [pid 6625] close(9) = -1 EBADF (Bad file descriptor) [pid 6625] close(10) = -1 EBADF (Bad file descriptor) [pid 6625] close(11) = -1 EBADF (Bad file descriptor) [pid 6625] close(12) = -1 EBADF (Bad file descriptor) [pid 6625] close(13) = -1 EBADF (Bad file descriptor) [pid 6625] close(14) = -1 EBADF (Bad file descriptor) [pid 6625] close(15) = -1 EBADF (Bad file descriptor) [pid 6625] close(16) = -1 EBADF (Bad file descriptor) [pid 6625] close(17) = -1 EBADF (Bad file descriptor) [pid 6625] close(18) = -1 EBADF (Bad file descriptor) [pid 6625] close(19) = -1 EBADF (Bad file descriptor) [pid 6625] close(20) = -1 EBADF (Bad file descriptor) [pid 6625] close(21) = -1 EBADF (Bad file descriptor) [pid 6625] close(22) = -1 EBADF (Bad file descriptor) [pid 6625] close(23) = -1 EBADF (Bad file descriptor) [pid 6625] close(24) = -1 EBADF (Bad file descriptor) [pid 6625] close(25) = -1 EBADF (Bad file descriptor) [pid 6625] close(26) = -1 EBADF (Bad file descriptor) [pid 6625] close(27) = -1 EBADF (Bad file descriptor) [pid 6625] close(28) = -1 EBADF (Bad file descriptor) [pid 6625] close(29) = -1 EBADF (Bad file descriptor) [pid 6625] exit_group(0 [pid 6626] <... futex resumed>) = ? [pid 6627] <... futex resumed>) = ? [pid 6625] <... exit_group resumed>) = ? [pid 6626] +++ exited with 0 +++ [pid 6627] +++ exited with 0 +++ [pid 6625] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1602, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./534", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./534/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./534/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./534") = 0 [pid 5019] mkdir("./535", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1605 ./strace-static-x86_64: Process 6628 attached [pid 6628] set_robust_list(0x555556a426a0, 24) = 0 [pid 6628] chdir("./535") = 0 [pid 6628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6628] setpgid(0, 0) = 0 [ 83.048590][ T6626] loop0: detected capacity change from 0 to 1024 [pid 6628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6628] write(3, "1000", 4) = 4 [pid 6628] close(3) = 0 [pid 6628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6628] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6628] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6628] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6628] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6628] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6629 attached [pid 6629] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6629] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6629] rt_sigprocmask(SIG_SETMASK, [], [pid 6628] <... clone3 resumed> => {parent_tid=[1606]}, 88) = 1606 [pid 6628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6628] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] memfd_create("syzkaller", 0 [pid 6628] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6629] <... memfd_create resumed>) = 3 [pid 6629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6629] munmap(0x7f15b9a45000, 524288) = 0 [pid 6629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6629] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6629] close(3) = 0 [pid 6629] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6629] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6629] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6629] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6629] ioctl(4, LOOP_CLR_FD) = 0 [pid 6629] close(4) = 0 [pid 6629] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... futex resumed>) = 0 [pid 6628] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6628] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6628] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6628] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6630 attached => {parent_tid=[1607]}, 88) = 1607 [pid 6628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6628] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6628] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6629] <... futex resumed>) = 1 [pid 6629] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6630] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6630] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6630] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6630] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6629] <... mknodat resumed>) = 0 [pid 6629] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6629] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6630] <... mount resumed>) = 0 [pid 6630] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6630] chdir(".") = 0 [pid 6630] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6628] close(3) = 0 [pid 6628] close(4) = 0 [pid 6630] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] close(5) = -1 EBADF (Bad file descriptor) [pid 6628] close(6) = -1 EBADF (Bad file descriptor) [pid 6628] close(7) = -1 EBADF (Bad file descriptor) [pid 6628] close(8) = -1 EBADF (Bad file descriptor) [pid 6628] close(9) = -1 EBADF (Bad file descriptor) [pid 6628] close(10) = -1 EBADF (Bad file descriptor) [pid 6628] close(11) = -1 EBADF (Bad file descriptor) [pid 6628] close(12) = -1 EBADF (Bad file descriptor) [pid 6628] close(13) = -1 EBADF (Bad file descriptor) [pid 6628] close(14) = -1 EBADF (Bad file descriptor) [pid 6628] close(15) = -1 EBADF (Bad file descriptor) [pid 6628] close(16) = -1 EBADF (Bad file descriptor) [pid 6628] close(17) = -1 EBADF (Bad file descriptor) [pid 6628] close(18) = -1 EBADF (Bad file descriptor) [pid 6628] close(19) = -1 EBADF (Bad file descriptor) [pid 6628] close(20) = -1 EBADF (Bad file descriptor) [pid 6628] close(21) = -1 EBADF (Bad file descriptor) [pid 6628] close(22) = -1 EBADF (Bad file descriptor) [pid 6628] close(23) = -1 EBADF (Bad file descriptor) [pid 6628] close(24) = -1 EBADF (Bad file descriptor) [pid 6628] close(25) = -1 EBADF (Bad file descriptor) [pid 6628] close(26) = -1 EBADF (Bad file descriptor) [pid 6628] close(27) = -1 EBADF (Bad file descriptor) [pid 6628] close(28) = -1 EBADF (Bad file descriptor) [pid 6628] close(29) = -1 EBADF (Bad file descriptor) [pid 6628] exit_group(0 [pid 6630] <... futex resumed>) = ? [pid 6629] <... futex resumed>) = ? [pid 6628] <... exit_group resumed>) = ? [pid 6630] +++ exited with 0 +++ [pid 6629] +++ exited with 0 +++ [pid 6628] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1605, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./535", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./535/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./535/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./535") = 0 [pid 5019] mkdir("./536", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.129115][ T6629] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6631 attached , child_tidptr=0x555556a42690) = 1608 [pid 6631] set_robust_list(0x555556a426a0, 24) = 0 [pid 6631] chdir("./536") = 0 [pid 6631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6631] setpgid(0, 0) = 0 [pid 6631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6631] write(3, "1000", 4) = 4 [pid 6631] close(3) = 0 [pid 6631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6631] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6631] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6632 attached => {parent_tid=[1609]}, 88) = 1609 [pid 6632] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6631] rt_sigprocmask(SIG_SETMASK, [], [pid 6632] <... rseq resumed>) = 0 [pid 6632] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6632] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6632] <... futex resumed>) = 0 [pid 6632] memfd_create("syzkaller", 0) = 3 [pid 6632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6632] munmap(0x7f15b9a45000, 524288) = 0 [pid 6632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6632] close(3) = 0 [pid 6632] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6632] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6632] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6632] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6632] ioctl(4, LOOP_CLR_FD) = 0 [pid 6632] close(4) = 0 [pid 6632] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6631] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1610]}, 88) = 1610 [pid 6631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6631] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6631] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6632] <... futex resumed>) = 1 [pid 6632] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6633 attached [pid 6633] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6633] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6633] rt_sigprocmask(SIG_SETMASK, [], [pid 6632] <... mknodat resumed>) = 0 [pid 6633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6633] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6633] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6632] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6632] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6633] <... mount resumed>) = 0 [pid 6633] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6633] chdir(".") = 0 [pid 6633] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] <... futex resumed>) = 0 [pid 6633] <... futex resumed>) = 1 [pid 6633] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6631] close(3) = 0 [pid 6631] close(4) = 0 [pid 6631] close(5) = -1 EBADF (Bad file descriptor) [pid 6631] close(6) = -1 EBADF (Bad file descriptor) [pid 6631] close(7) = -1 EBADF (Bad file descriptor) [pid 6631] close(8) = -1 EBADF (Bad file descriptor) [pid 6631] close(9) = -1 EBADF (Bad file descriptor) [pid 6631] close(10) = -1 EBADF (Bad file descriptor) [pid 6631] close(11) = -1 EBADF (Bad file descriptor) [pid 6631] close(12) = -1 EBADF (Bad file descriptor) [pid 6631] close(13) = -1 EBADF (Bad file descriptor) [pid 6631] close(14) = -1 EBADF (Bad file descriptor) [pid 6631] close(15) = -1 EBADF (Bad file descriptor) [pid 6631] close(16) = -1 EBADF (Bad file descriptor) [pid 6631] close(17) = -1 EBADF (Bad file descriptor) [pid 6631] close(18) = -1 EBADF (Bad file descriptor) [pid 6631] close(19) = -1 EBADF (Bad file descriptor) [pid 6631] close(20) = -1 EBADF (Bad file descriptor) [pid 6631] close(21) = -1 EBADF (Bad file descriptor) [pid 6631] close(22) = -1 EBADF (Bad file descriptor) [pid 6631] close(23) = -1 EBADF (Bad file descriptor) [pid 6631] close(24) = -1 EBADF (Bad file descriptor) [pid 6631] close(25) = -1 EBADF (Bad file descriptor) [pid 6631] close(26) = -1 EBADF (Bad file descriptor) [pid 6631] close(27) = -1 EBADF (Bad file descriptor) [pid 6631] close(28) = -1 EBADF (Bad file descriptor) [pid 6631] close(29) = -1 EBADF (Bad file descriptor) [pid 6631] exit_group(0 [pid 6633] <... futex resumed>) = ? [pid 6632] <... futex resumed>) = ? [pid 6631] <... exit_group resumed>) = ? [pid 6632] +++ exited with 0 +++ [pid 6633] +++ exited with 0 +++ [pid 6631] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1608, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./536", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./536/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./536/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./536") = 0 [pid 5019] mkdir("./537", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.212874][ T6632] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6634 attached , child_tidptr=0x555556a42690) = 1611 [pid 6634] set_robust_list(0x555556a426a0, 24) = 0 [pid 6634] chdir("./537") = 0 [pid 6634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6634] setpgid(0, 0) = 0 [pid 6634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6634] write(3, "1000", 4) = 4 [pid 6634] close(3) = 0 [pid 6634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6634] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6634] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6635 attached [pid 6635] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6635] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6634] <... clone3 resumed> => {parent_tid=[1612]}, 88) = 1612 [pid 6635] rt_sigprocmask(SIG_SETMASK, [], [pid 6634] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6634] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6635] <... futex resumed>) = 0 [pid 6634] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6635] memfd_create("syzkaller", 0) = 3 [pid 6635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6635] munmap(0x7f15b9a45000, 524288) = 0 [pid 6635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6635] close(3) = 0 [pid 6635] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6635] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6635] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6635] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6635] ioctl(4, LOOP_CLR_FD) = 0 [pid 6635] close(4) = 0 [pid 6635] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6634] <... futex resumed>) = 0 [pid 6635] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6634] <... futex resumed>) = 0 [pid 6635] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6634] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6635] <... mknodat resumed>) = 0 [pid 6634] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6635] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6635] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6636 attached => {parent_tid=[1613]}, 88) = 1613 [pid 6634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6634] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6634] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6636] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6636] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6636] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6636] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6636] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6636] chdir(".") = 0 [pid 6636] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] <... futex resumed>) = 0 [pid 6636] <... futex resumed>) = 1 [pid 6634] close(3 [pid 6636] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] <... close resumed>) = 0 [pid 6634] close(4) = 0 [pid 6634] close(5) = -1 EBADF (Bad file descriptor) [pid 6634] close(6) = -1 EBADF (Bad file descriptor) [pid 6634] close(7) = -1 EBADF (Bad file descriptor) [pid 6634] close(8) = -1 EBADF (Bad file descriptor) [pid 6634] close(9) = -1 EBADF (Bad file descriptor) [pid 6634] close(10) = -1 EBADF (Bad file descriptor) [pid 6634] close(11) = -1 EBADF (Bad file descriptor) [pid 6634] close(12) = -1 EBADF (Bad file descriptor) [pid 6634] close(13) = -1 EBADF (Bad file descriptor) [pid 6634] close(14) = -1 EBADF (Bad file descriptor) [pid 6634] close(15) = -1 EBADF (Bad file descriptor) [pid 6634] close(16) = -1 EBADF (Bad file descriptor) [pid 6634] close(17) = -1 EBADF (Bad file descriptor) [pid 6634] close(18) = -1 EBADF (Bad file descriptor) [pid 6634] close(19) = -1 EBADF (Bad file descriptor) [pid 6634] close(20) = -1 EBADF (Bad file descriptor) [pid 6634] close(21) = -1 EBADF (Bad file descriptor) [pid 6634] close(22) = -1 EBADF (Bad file descriptor) [pid 6634] close(23) = -1 EBADF (Bad file descriptor) [pid 6634] close(24) = -1 EBADF (Bad file descriptor) [pid 6634] close(25) = -1 EBADF (Bad file descriptor) [pid 6634] close(26) = -1 EBADF (Bad file descriptor) [pid 6634] close(27) = -1 EBADF (Bad file descriptor) [pid 6634] close(28) = -1 EBADF (Bad file descriptor) [pid 6634] close(29) = -1 EBADF (Bad file descriptor) [pid 6634] exit_group(0 [pid 6635] <... futex resumed>) = ? [pid 6634] <... exit_group resumed>) = ? [pid 6635] +++ exited with 0 +++ [pid 6636] <... futex resumed>) = ? [pid 6636] +++ exited with 0 +++ [pid 6634] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1611, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./537", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./537/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./537/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./537") = 0 [pid 5019] mkdir("./538", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.299161][ T6635] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6637 attached [pid 6637] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1614 [pid 6637] <... set_robust_list resumed>) = 0 [pid 6637] chdir("./538") = 0 [pid 6637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6637] setpgid(0, 0) = 0 [pid 6637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6637] write(3, "1000", 4) = 4 [pid 6637] close(3) = 0 [pid 6637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6637] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6637] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6638 attached [pid 6638] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6638] set_robust_list(0x7f15c1e659a0, 24 [pid 6637] <... clone3 resumed> => {parent_tid=[1615]}, 88) = 1615 [pid 6638] <... set_robust_list resumed>) = 0 [pid 6638] rt_sigprocmask(SIG_SETMASK, [], [pid 6637] rt_sigprocmask(SIG_SETMASK, [], [pid 6638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6638] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6637] <... futex resumed>) = 0 [pid 6638] memfd_create("syzkaller", 0 [pid 6637] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6638] <... memfd_create resumed>) = 3 [pid 6638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6638] munmap(0x7f15b9a45000, 524288) = 0 [pid 6638] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6638] close(3) = 0 [pid 6638] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6638] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6638] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6638] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6638] ioctl(4, LOOP_CLR_FD) = 0 [pid 6638] close(4) = 0 [pid 6638] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... futex resumed>) = 0 [pid 6637] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6637] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1616]}, 88) = 1616 [pid 6637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6637] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6637] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6638] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6639 attached [pid 6638] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6639] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6638] <... mknodat resumed>) = 0 [pid 6639] set_robust_list(0x7f15b9ac49a0, 24 [pid 6638] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6638] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6639] <... set_robust_list resumed>) = 0 [pid 6639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6639] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6639] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6639] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6639] chdir(".") = 0 [pid 6639] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6637] <... futex resumed>) = 0 [pid 6637] close(3) = 0 [pid 6637] close(4 [pid 6639] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] <... close resumed>) = 0 [pid 6637] close(5) = -1 EBADF (Bad file descriptor) [pid 6637] close(6) = -1 EBADF (Bad file descriptor) [pid 6637] close(7) = -1 EBADF (Bad file descriptor) [pid 6637] close(8) = -1 EBADF (Bad file descriptor) [pid 6637] close(9) = -1 EBADF (Bad file descriptor) [pid 6637] close(10) = -1 EBADF (Bad file descriptor) [pid 6637] close(11) = -1 EBADF (Bad file descriptor) [pid 6637] close(12) = -1 EBADF (Bad file descriptor) [pid 6637] close(13) = -1 EBADF (Bad file descriptor) [pid 6637] close(14) = -1 EBADF (Bad file descriptor) [pid 6637] close(15) = -1 EBADF (Bad file descriptor) [pid 6637] close(16) = -1 EBADF (Bad file descriptor) [pid 6637] close(17) = -1 EBADF (Bad file descriptor) [pid 6637] close(18) = -1 EBADF (Bad file descriptor) [pid 6637] close(19) = -1 EBADF (Bad file descriptor) [pid 6637] close(20) = -1 EBADF (Bad file descriptor) [pid 6637] close(21) = -1 EBADF (Bad file descriptor) [pid 6637] close(22) = -1 EBADF (Bad file descriptor) [pid 6637] close(23) = -1 EBADF (Bad file descriptor) [pid 6637] close(24) = -1 EBADF (Bad file descriptor) [pid 6637] close(25) = -1 EBADF (Bad file descriptor) [pid 6637] close(26) = -1 EBADF (Bad file descriptor) [pid 6637] close(27) = -1 EBADF (Bad file descriptor) [pid 6637] close(28) = -1 EBADF (Bad file descriptor) [pid 6637] close(29) = -1 EBADF (Bad file descriptor) [pid 6637] exit_group(0 [pid 6639] <... futex resumed>) = ? [pid 6638] <... futex resumed>) = ? [pid 6637] <... exit_group resumed>) = ? [pid 6639] +++ exited with 0 +++ [pid 6638] +++ exited with 0 +++ [pid 6637] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1614, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./538", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./538/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./538/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./538") = 0 [pid 5019] mkdir("./539", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.382013][ T6638] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1617 ./strace-static-x86_64: Process 6640 attached [pid 6640] set_robust_list(0x555556a426a0, 24) = 0 [pid 6640] chdir("./539") = 0 [pid 6640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6640] setpgid(0, 0) = 0 [pid 6640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6640] write(3, "1000", 4) = 4 [pid 6640] close(3) = 0 [pid 6640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6640] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6640] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1618]}, 88) = 1618 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6640] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6641 attached [pid 6641] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6641] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6641] memfd_create("syzkaller", 0) = 3 [pid 6641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6641] munmap(0x7f15b9a45000, 524288) = 0 [pid 6641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6641] close(3) = 0 [pid 6641] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6641] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6641] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6641] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6641] ioctl(4, LOOP_CLR_FD) = 0 [pid 6641] close(4) = 0 [pid 6641] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6640] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6640] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1619]}, 88) = 1619 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6640] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6640] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6641] <... futex resumed>) = 1 [pid 6641] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6642 attached [pid 6642] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6642] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6641] <... mknodat resumed>) = 0 [pid 6641] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6641] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6642] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6642] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6642] chdir(".") = 0 [pid 6642] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6640] <... futex resumed>) = 0 [pid 6640] close(3) = 0 [pid 6640] close(4) = 0 [pid 6640] close(5) = -1 EBADF (Bad file descriptor) [pid 6640] close(6) = -1 EBADF (Bad file descriptor) [pid 6640] close(7) = -1 EBADF (Bad file descriptor) [pid 6640] close(8) = -1 EBADF (Bad file descriptor) [pid 6640] close(9) = -1 EBADF (Bad file descriptor) [pid 6640] close(10) = -1 EBADF (Bad file descriptor) [pid 6640] close(11) = -1 EBADF (Bad file descriptor) [pid 6640] close(12) = -1 EBADF (Bad file descriptor) [pid 6640] close(13) = -1 EBADF (Bad file descriptor) [pid 6640] close(14) = -1 EBADF (Bad file descriptor) [pid 6640] close(15) = -1 EBADF (Bad file descriptor) [pid 6640] close(16) = -1 EBADF (Bad file descriptor) [pid 6640] close(17) = -1 EBADF (Bad file descriptor) [pid 6640] close(18) = -1 EBADF (Bad file descriptor) [pid 6640] close(19) = -1 EBADF (Bad file descriptor) [pid 6640] close(20) = -1 EBADF (Bad file descriptor) [pid 6640] close(21) = -1 EBADF (Bad file descriptor) [pid 6640] close(22) = -1 EBADF (Bad file descriptor) [pid 6640] close(23) = -1 EBADF (Bad file descriptor) [pid 6640] close(24) = -1 EBADF (Bad file descriptor) [pid 6640] close(25) = -1 EBADF (Bad file descriptor) [pid 6640] close(26) = -1 EBADF (Bad file descriptor) [pid 6640] close(27) = -1 EBADF (Bad file descriptor) [pid 6640] close(28) = -1 EBADF (Bad file descriptor) [pid 6640] close(29) = -1 EBADF (Bad file descriptor) [pid 6640] exit_group(0 [pid 6641] <... futex resumed>) = ? [pid 6640] <... exit_group resumed>) = ? [pid 6641] +++ exited with 0 +++ [pid 6642] +++ exited with 0 +++ [pid 6640] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1617, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./539", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./539/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./539/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./539/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./539") = 0 [pid 5019] mkdir("./540", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1620 ./strace-static-x86_64: Process 6643 attached [pid 6643] set_robust_list(0x555556a426a0, 24) = 0 [pid 6643] chdir("./540") = 0 [pid 6643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6643] setpgid(0, 0) = 0 [pid 6643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6643] write(3, "1000", 4) = 4 [pid 6643] close(3) = 0 [pid 6643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6643] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 83.457254][ T6641] loop0: detected capacity change from 0 to 1024 [pid 6643] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1621]}, 88) = 1621 [pid 6643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6643] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6644 attached [pid 6644] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6644] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6644] memfd_create("syzkaller", 0) = 3 [pid 6644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6644] munmap(0x7f15b9a45000, 524288) = 0 [pid 6644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6644] close(3) = 0 [pid 6644] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6644] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6644] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6644] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6644] ioctl(4, LOOP_CLR_FD) = 0 [pid 6644] close(4) = 0 [pid 6644] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6643] <... futex resumed>) = 0 [pid 6643] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6643] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6644] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6643] <... mprotect resumed>) = 0 [pid 6643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1622]}, 88) = 1622 [pid 6643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6643] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6643] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6645 attached [pid 6645] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6645] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6645] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6645] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6644] <... mknodat resumed>) = 0 [pid 6644] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... mount resumed>) = 0 [pid 6645] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6645] chdir(".") = 0 [pid 6645] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = 0 [pid 6643] close(3) = 0 [pid 6643] close(4) = 0 [pid 6643] close(5) = -1 EBADF (Bad file descriptor) [pid 6643] close(6) = -1 EBADF (Bad file descriptor) [pid 6643] close(7) = -1 EBADF (Bad file descriptor) [pid 6643] close(8) = -1 EBADF (Bad file descriptor) [pid 6643] close(9) = -1 EBADF (Bad file descriptor) [pid 6643] close(10) = -1 EBADF (Bad file descriptor) [pid 6643] close(11) = -1 EBADF (Bad file descriptor) [pid 6643] close(12) = -1 EBADF (Bad file descriptor) [pid 6643] close(13) = -1 EBADF (Bad file descriptor) [pid 6643] close(14) = -1 EBADF (Bad file descriptor) [pid 6643] close(15) = -1 EBADF (Bad file descriptor) [pid 6643] close(16) = -1 EBADF (Bad file descriptor) [pid 6643] close(17) = -1 EBADF (Bad file descriptor) [pid 6643] close(18) = -1 EBADF (Bad file descriptor) [pid 6643] close(19) = -1 EBADF (Bad file descriptor) [pid 6643] close(20) = -1 EBADF (Bad file descriptor) [pid 6643] close(21) = -1 EBADF (Bad file descriptor) [pid 6643] close(22) = -1 EBADF (Bad file descriptor) [pid 6643] close(23) = -1 EBADF (Bad file descriptor) [pid 6643] close(24) = -1 EBADF (Bad file descriptor) [pid 6643] close(25) = -1 EBADF (Bad file descriptor) [pid 6643] close(26) = -1 EBADF (Bad file descriptor) [pid 6643] close(27) = -1 EBADF (Bad file descriptor) [pid 6643] close(28) = -1 EBADF (Bad file descriptor) [pid 6643] close(29) = -1 EBADF (Bad file descriptor) [pid 6643] exit_group(0) = ? [pid 6645] <... futex resumed>) = ? [pid 6645] +++ exited with 0 +++ [pid 6644] <... futex resumed>) = ? [pid 6644] +++ exited with 0 +++ [pid 6643] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1620, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./540", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./540/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./540/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./540/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./540/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./540/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./540/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./540/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./540/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./540") = 0 [pid 5019] mkdir("./541", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 83.530862][ T6644] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1623 ./strace-static-x86_64: Process 6646 attached [pid 6646] set_robust_list(0x555556a426a0, 24) = 0 [pid 6646] chdir("./541") = 0 [pid 6646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6646] setpgid(0, 0) = 0 [pid 6646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6646] write(3, "1000", 4) = 4 [pid 6646] close(3) = 0 [pid 6646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6646] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6646] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1624]}, 88) = 1624 ./strace-static-x86_64: Process 6647 attached [pid 6647] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6647] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6647] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6646] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6647] <... futex resumed>) = 0 [pid 6646] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6647] memfd_create("syzkaller", 0) = 3 [pid 6647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6647] munmap(0x7f15b9a45000, 524288) = 0 [pid 6647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6647] close(3) = 0 [pid 6647] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6647] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6647] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6647] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6647] ioctl(4, LOOP_CLR_FD) = 0 [pid 6647] close(4) = 0 [pid 6647] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6646] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6646] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1625]}, 88) = 1625 [pid 6646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6646] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6647] <... futex resumed>) = 1 [pid 6647] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6648 attached [pid 6648] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6648] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6648] mkdir(".", 0777 [pid 6647] <... mknodat resumed>) = 0 [pid 6648] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6648] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6647] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6647] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6648] <... mount resumed>) = 0 [pid 6648] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6648] chdir(".") = 0 [pid 6648] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6646] <... futex resumed>) = 0 [pid 6646] close(3) = 0 [pid 6646] close(4) = 0 [pid 6646] close(5) = -1 EBADF (Bad file descriptor) [pid 6646] close(6) = -1 EBADF (Bad file descriptor) [pid 6646] close(7) = -1 EBADF (Bad file descriptor) [pid 6646] close(8) = -1 EBADF (Bad file descriptor) [pid 6646] close(9) = -1 EBADF (Bad file descriptor) [pid 6646] close(10) = -1 EBADF (Bad file descriptor) [pid 6646] close(11) = -1 EBADF (Bad file descriptor) [pid 6646] close(12) = -1 EBADF (Bad file descriptor) [pid 6646] close(13) = -1 EBADF (Bad file descriptor) [pid 6646] close(14) = -1 EBADF (Bad file descriptor) [pid 6646] close(15) = -1 EBADF (Bad file descriptor) [pid 6646] close(16) = -1 EBADF (Bad file descriptor) [pid 6646] close(17) = -1 EBADF (Bad file descriptor) [pid 6646] close(18) = -1 EBADF (Bad file descriptor) [pid 6646] close(19) = -1 EBADF (Bad file descriptor) [pid 6646] close(20) = -1 EBADF (Bad file descriptor) [pid 6646] close(21) = -1 EBADF (Bad file descriptor) [pid 6646] close(22) = -1 EBADF (Bad file descriptor) [pid 6646] close(23) = -1 EBADF (Bad file descriptor) [pid 6646] close(24) = -1 EBADF (Bad file descriptor) [pid 6646] close(25) = -1 EBADF (Bad file descriptor) [pid 6646] close(26) = -1 EBADF (Bad file descriptor) [pid 6646] close(27) = -1 EBADF (Bad file descriptor) [pid 6646] close(28) = -1 EBADF (Bad file descriptor) [pid 6646] close(29) = -1 EBADF (Bad file descriptor) [pid 6646] exit_group(0) = ? [pid 6647] <... futex resumed>) = ? [pid 6647] +++ exited with 0 +++ [pid 6648] <... futex resumed>) = ? [pid 6648] +++ exited with 0 +++ [pid 6646] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1623, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./541", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./541/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./541/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./541") = 0 [pid 5019] mkdir("./542", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1626 ./strace-static-x86_64: Process 6649 attached [pid 6649] set_robust_list(0x555556a426a0, 24) = 0 [pid 6649] chdir("./542") = 0 [pid 6649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6649] setpgid(0, 0) = 0 [pid 6649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6649] write(3, "1000", 4) = 4 [pid 6649] close(3) = 0 [pid 6649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6649] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6649] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1627]}, 88) = 1627 [pid 6649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6649] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6650 attached [pid 6650] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6650] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6650] memfd_create("syzkaller", 0) = 3 [pid 6650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 83.610563][ T6647] loop0: detected capacity change from 0 to 1024 [pid 6650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6650] munmap(0x7f15b9a45000, 524288) = 0 [pid 6650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6650] close(3) = 0 [pid 6650] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6650] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6650] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6650] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6650] ioctl(4, LOOP_CLR_FD) = 0 [pid 6650] close(4) = 0 [pid 6650] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6649] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6650] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6649] <... mprotect resumed>) = 0 [pid 6649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1628]}, 88) = 1628 ./strace-static-x86_64: Process 6651 attached [pid 6649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6651] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6649] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... rseq resumed>) = 0 [pid 6651] set_robust_list(0x7f15b9ac49a0, 24 [pid 6650] <... mknodat resumed>) = 0 [pid 6651] <... set_robust_list resumed>) = 0 [pid 6651] rt_sigprocmask(SIG_SETMASK, [], [pid 6650] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6650] <... futex resumed>) = 0 [pid 6651] mkdir(".", 0777 [pid 6650] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6651] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6651] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6649] <... futex resumed>) = 0 [pid 6649] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6651] <... mount resumed>) = 0 [pid 6651] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6651] chdir(".") = 0 [pid 6651] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6649] <... futex resumed>) = 0 [pid 6649] close(3) = 0 [pid 6649] close(4) = 0 [pid 6651] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6649] close(5) = -1 EBADF (Bad file descriptor) [pid 6649] close(6) = -1 EBADF (Bad file descriptor) [pid 6649] close(7) = -1 EBADF (Bad file descriptor) [pid 6649] close(8) = -1 EBADF (Bad file descriptor) [pid 6649] close(9) = -1 EBADF (Bad file descriptor) [pid 6649] close(10) = -1 EBADF (Bad file descriptor) [pid 6649] close(11) = -1 EBADF (Bad file descriptor) [pid 6649] close(12) = -1 EBADF (Bad file descriptor) [pid 6649] close(13) = -1 EBADF (Bad file descriptor) [pid 6649] close(14) = -1 EBADF (Bad file descriptor) [pid 6649] close(15) = -1 EBADF (Bad file descriptor) [pid 6649] close(16) = -1 EBADF (Bad file descriptor) [pid 6649] close(17) = -1 EBADF (Bad file descriptor) [pid 6649] close(18) = -1 EBADF (Bad file descriptor) [pid 6649] close(19) = -1 EBADF (Bad file descriptor) [pid 6649] close(20) = -1 EBADF (Bad file descriptor) [pid 6649] close(21) = -1 EBADF (Bad file descriptor) [pid 6649] close(22) = -1 EBADF (Bad file descriptor) [pid 6649] close(23) = -1 EBADF (Bad file descriptor) [pid 6649] close(24) = -1 EBADF (Bad file descriptor) [pid 6649] close(25) = -1 EBADF (Bad file descriptor) [pid 6649] close(26) = -1 EBADF (Bad file descriptor) [pid 6649] close(27) = -1 EBADF (Bad file descriptor) [pid 6649] close(28) = -1 EBADF (Bad file descriptor) [pid 6649] close(29) = -1 EBADF (Bad file descriptor) [pid 6649] exit_group(0) = ? [pid 6651] <... futex resumed>) = ? [pid 6650] <... futex resumed>) = ? [pid 6651] +++ exited with 0 +++ [pid 6650] +++ exited with 0 +++ [pid 6649] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1626, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./542", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./542/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./542/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./542") = 0 [pid 5019] mkdir("./543", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 83.674561][ T6650] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6652 attached [pid 6652] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1629 [pid 6652] chdir("./543") = 0 [pid 6652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6652] setpgid(0, 0) = 0 [pid 6652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6652] write(3, "1000", 4) = 4 [pid 6652] close(3) = 0 [pid 6652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6652] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6652] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6652] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6653 attached [pid 6653] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6653] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6653] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] <... clone3 resumed> => {parent_tid=[1630]}, 88) = 1630 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6652] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6653] <... futex resumed>) = 0 [pid 6653] memfd_create("syzkaller", 0 [pid 6652] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6653] <... memfd_create resumed>) = 3 [pid 6653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6653] munmap(0x7f15b9a45000, 524288) = 0 [pid 6653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6653] close(3) = 0 [pid 6653] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6653] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6653] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6653] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6653] ioctl(4, LOOP_CLR_FD) = 0 [pid 6653] close(4) = 0 [pid 6653] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = 0 [pid 6652] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6652] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6652] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1631]}, 88) = 1631 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6652] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6654 attached ) = 0 [pid 6654] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6652] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6653] <... futex resumed>) = 1 [pid 6653] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6654] <... rseq resumed>) = 0 [pid 6654] set_robust_list(0x7f15b9ac49a0, 24 [pid 6653] <... mknodat resumed>) = 0 [pid 6653] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6653] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6654] <... set_robust_list resumed>) = 0 [pid 6654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6654] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6654] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6654] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6654] chdir(".") = 0 [pid 6654] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6652] <... futex resumed>) = 0 [pid 6652] close(3) = 0 [pid 6652] close(4 [pid 6654] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] <... close resumed>) = 0 [pid 6652] close(5) = -1 EBADF (Bad file descriptor) [pid 6652] close(6) = -1 EBADF (Bad file descriptor) [pid 6652] close(7) = -1 EBADF (Bad file descriptor) [pid 6652] close(8) = -1 EBADF (Bad file descriptor) [pid 6652] close(9) = -1 EBADF (Bad file descriptor) [pid 6652] close(10) = -1 EBADF (Bad file descriptor) [pid 6652] close(11) = -1 EBADF (Bad file descriptor) [pid 6652] close(12) = -1 EBADF (Bad file descriptor) [pid 6652] close(13) = -1 EBADF (Bad file descriptor) [pid 6652] close(14) = -1 EBADF (Bad file descriptor) [pid 6652] close(15) = -1 EBADF (Bad file descriptor) [pid 6652] close(16) = -1 EBADF (Bad file descriptor) [pid 6652] close(17) = -1 EBADF (Bad file descriptor) [pid 6652] close(18) = -1 EBADF (Bad file descriptor) [pid 6652] close(19) = -1 EBADF (Bad file descriptor) [pid 6652] close(20) = -1 EBADF (Bad file descriptor) [pid 6652] close(21) = -1 EBADF (Bad file descriptor) [pid 6652] close(22) = -1 EBADF (Bad file descriptor) [pid 6652] close(23) = -1 EBADF (Bad file descriptor) [pid 6652] close(24) = -1 EBADF (Bad file descriptor) [pid 6652] close(25) = -1 EBADF (Bad file descriptor) [pid 6652] close(26) = -1 EBADF (Bad file descriptor) [pid 6652] close(27) = -1 EBADF (Bad file descriptor) [pid 6652] close(28) = -1 EBADF (Bad file descriptor) [pid 6652] close(29) = -1 EBADF (Bad file descriptor) [pid 6652] exit_group(0 [pid 6653] <... futex resumed>) = ? [pid 6652] <... exit_group resumed>) = ? [pid 6654] <... futex resumed>) = ? [pid 6653] +++ exited with 0 +++ [pid 6654] +++ exited with 0 +++ [pid 6652] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1629, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./543", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./543/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./543/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./543/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./543") = 0 [pid 5019] mkdir("./544", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.751322][ T6653] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6655 attached [pid 6655] set_robust_list(0x555556a426a0, 24) = 0 [pid 6655] chdir("./544" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1632 [pid 6655] <... chdir resumed>) = 0 [pid 6655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6655] setpgid(0, 0) = 0 [pid 6655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6655] write(3, "1000", 4) = 4 [pid 6655] close(3) = 0 [pid 6655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6655] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6655] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6656 attached => {parent_tid=[1633]}, 88) = 1633 [pid 6656] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6655] rt_sigprocmask(SIG_SETMASK, [], [pid 6656] <... rseq resumed>) = 0 [pid 6655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] set_robust_list(0x7f15c1e659a0, 24 [pid 6655] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6656] <... set_robust_list resumed>) = 0 [pid 6656] rt_sigprocmask(SIG_SETMASK, [], [pid 6655] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] memfd_create("syzkaller", 0) = 3 [pid 6656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6656] munmap(0x7f15b9a45000, 524288) = 0 [pid 6656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6656] close(3) = 0 [pid 6656] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6656] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6656] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6656] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6656] ioctl(4, LOOP_CLR_FD) = 0 [pid 6656] close(4) = 0 [pid 6656] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6655] <... futex resumed>) = 0 [pid 6655] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6655] <... futex resumed>) = 0 [pid 6655] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6655] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6658 attached [pid 6656] <... mknodat resumed>) = 0 [pid 6655] <... clone3 resumed> => {parent_tid=[1634]}, 88) = 1634 [pid 6656] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6658] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6656] <... futex resumed>) = 0 [pid 6655] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6655] <... futex resumed>) = 0 [pid 6655] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6658] <... rseq resumed>) = 0 [pid 6658] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6658] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6658] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6658] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6658] chdir(".") = 0 [pid 6658] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6655] <... futex resumed>) = 0 [pid 6655] close(3) = 0 [pid 6655] close(4) = 0 [pid 6655] close(5) = -1 EBADF (Bad file descriptor) [pid 6658] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6655] close(6) = -1 EBADF (Bad file descriptor) [pid 6655] close(7) = -1 EBADF (Bad file descriptor) [pid 6655] close(8) = -1 EBADF (Bad file descriptor) [pid 6655] close(9) = -1 EBADF (Bad file descriptor) [pid 6655] close(10) = -1 EBADF (Bad file descriptor) [pid 6655] close(11) = -1 EBADF (Bad file descriptor) [pid 6655] close(12) = -1 EBADF (Bad file descriptor) [pid 6655] close(13) = -1 EBADF (Bad file descriptor) [pid 6655] close(14) = -1 EBADF (Bad file descriptor) [pid 6655] close(15) = -1 EBADF (Bad file descriptor) [pid 6655] close(16) = -1 EBADF (Bad file descriptor) [pid 6655] close(17) = -1 EBADF (Bad file descriptor) [pid 6655] close(18) = -1 EBADF (Bad file descriptor) [pid 6655] close(19) = -1 EBADF (Bad file descriptor) [pid 6655] close(20) = -1 EBADF (Bad file descriptor) [pid 6655] close(21) = -1 EBADF (Bad file descriptor) [pid 6655] close(22) = -1 EBADF (Bad file descriptor) [pid 6655] close(23) = -1 EBADF (Bad file descriptor) [pid 6655] close(24) = -1 EBADF (Bad file descriptor) [pid 6655] close(25) = -1 EBADF (Bad file descriptor) [pid 6655] close(26) = -1 EBADF (Bad file descriptor) [pid 6655] close(27) = -1 EBADF (Bad file descriptor) [pid 6655] close(28) = -1 EBADF (Bad file descriptor) [pid 6655] close(29) = -1 EBADF (Bad file descriptor) [pid 6655] exit_group(0 [pid 6658] <... futex resumed>) = ? [pid 6656] <... futex resumed>) = ? [pid 6655] <... exit_group resumed>) = ? [pid 6656] +++ exited with 0 +++ [pid 6658] +++ exited with 0 +++ [pid 6655] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1632, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./544", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./544/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./544/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./544") = 0 [pid 5019] mkdir("./545", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.825299][ T6656] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1635 ./strace-static-x86_64: Process 6659 attached [pid 6659] set_robust_list(0x555556a426a0, 24) = 0 [pid 6659] chdir("./545") = 0 [pid 6659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6659] setpgid(0, 0) = 0 [pid 6659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6659] write(3, "1000", 4) = 4 [pid 6659] close(3) = 0 [pid 6659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6659] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6659] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1636]}, 88) = 1636 ./strace-static-x86_64: Process 6660 attached [pid 6660] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6660] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6660] rt_sigprocmask(SIG_SETMASK, [], [pid 6659] rt_sigprocmask(SIG_SETMASK, [], [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6660] <... futex resumed>) = 0 [pid 6660] memfd_create("syzkaller", 0 [pid 6659] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6660] <... memfd_create resumed>) = 3 [pid 6660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6660] munmap(0x7f15b9a45000, 524288) = 0 [pid 6660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6660] close(3) = 0 [pid 6660] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6660] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6660] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6660] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6660] ioctl(4, LOOP_CLR_FD) = 0 [pid 6660] close(4) = 0 [pid 6660] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6659] <... futex resumed>) = 0 [pid 6659] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6659] <... futex resumed>) = 0 [pid 6659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6659] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6660] <... mknodat resumed>) = 0 [pid 6660] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... mprotect resumed>) = 0 [pid 6660] <... futex resumed>) = 0 [pid 6660] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1637]}, 88) = 1637 [pid 6659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6659] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6661 attached [pid 6661] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6661] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6661] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6661] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6661] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6661] chdir(".") = 0 [pid 6661] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... futex resumed>) = 0 [pid 6659] close(3) = 0 [pid 6659] close(4) = 0 [pid 6659] close(5) = -1 EBADF (Bad file descriptor) [pid 6659] close(6) = -1 EBADF (Bad file descriptor) [pid 6659] close(7) = -1 EBADF (Bad file descriptor) [pid 6659] close(8) = -1 EBADF (Bad file descriptor) [pid 6659] close(9) = -1 EBADF (Bad file descriptor) [pid 6659] close(10) = -1 EBADF (Bad file descriptor) [pid 6659] close(11) = -1 EBADF (Bad file descriptor) [pid 6659] close(12) = -1 EBADF (Bad file descriptor) [pid 6659] close(13) = -1 EBADF (Bad file descriptor) [pid 6659] close(14) = -1 EBADF (Bad file descriptor) [pid 6659] close(15) = -1 EBADF (Bad file descriptor) [pid 6659] close(16) = -1 EBADF (Bad file descriptor) [pid 6659] close(17) = -1 EBADF (Bad file descriptor) [pid 6659] close(18) = -1 EBADF (Bad file descriptor) [pid 6659] close(19) = -1 EBADF (Bad file descriptor) [pid 6659] close(20) = -1 EBADF (Bad file descriptor) [pid 6659] close(21) = -1 EBADF (Bad file descriptor) [pid 6661] <... futex resumed>) = 1 [pid 6661] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] close(22) = -1 EBADF (Bad file descriptor) [pid 6659] close(23) = -1 EBADF (Bad file descriptor) [pid 6659] close(24) = -1 EBADF (Bad file descriptor) [pid 6659] close(25) = -1 EBADF (Bad file descriptor) [pid 6659] close(26) = -1 EBADF (Bad file descriptor) [pid 6659] close(27) = -1 EBADF (Bad file descriptor) [pid 6659] close(28) = -1 EBADF (Bad file descriptor) [pid 6659] close(29) = -1 EBADF (Bad file descriptor) [pid 6659] exit_group(0 [pid 6660] <... futex resumed>) = ? [pid 6659] <... exit_group resumed>) = ? [pid 6661] <... futex resumed>) = ? [pid 6660] +++ exited with 0 +++ [pid 6661] +++ exited with 0 +++ [pid 6659] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1635, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./545", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./545/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./545/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./545") = 0 [pid 5019] mkdir("./546", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 83.912847][ T6660] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1638 ./strace-static-x86_64: Process 6662 attached [pid 6662] set_robust_list(0x555556a426a0, 24) = 0 [pid 6662] chdir("./546") = 0 [pid 6662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6662] setpgid(0, 0) = 0 [pid 6662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6662] write(3, "1000", 4) = 4 [pid 6662] close(3) = 0 [pid 6662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6662] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6662] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6662] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6662] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6662] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6663 attached => {parent_tid=[1639]}, 88) = 1639 [pid 6662] rt_sigprocmask(SIG_SETMASK, [], [pid 6663] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6663] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6662] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6662] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6663] memfd_create("syzkaller", 0) = 3 [pid 6663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6663] munmap(0x7f15b9a45000, 524288) = 0 [pid 6663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6663] close(3) = 0 [pid 6663] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6663] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6663] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6663] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6663] ioctl(4, LOOP_CLR_FD) = 0 [pid 6663] close(4) = 0 [pid 6663] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6662] <... futex resumed>) = 0 [pid 6662] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6662] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6663] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6662] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6662] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1640]}, 88) = 1640 ./strace-static-x86_64: Process 6664 attached [pid 6662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6662] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6662] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6664] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6664] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6664] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6664] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6663] <... mknodat resumed>) = 0 [pid 6663] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6663] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6664] <... mount resumed>) = 0 [pid 6664] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6664] chdir(".") = 0 [pid 6664] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6662] <... futex resumed>) = 0 [pid 6662] close(3) = 0 [pid 6662] close(4) = 0 [pid 6662] close(5) = -1 EBADF (Bad file descriptor) [pid 6662] close(6) = -1 EBADF (Bad file descriptor) [pid 6662] close(7) = -1 EBADF (Bad file descriptor) [pid 6662] close(8) = -1 EBADF (Bad file descriptor) [pid 6662] close(9) = -1 EBADF (Bad file descriptor) [pid 6662] close(10) = -1 EBADF (Bad file descriptor) [pid 6662] close(11) = -1 EBADF (Bad file descriptor) [pid 6662] close(12) = -1 EBADF (Bad file descriptor) [pid 6662] close(13) = -1 EBADF (Bad file descriptor) [pid 6662] close(14 [pid 6664] <... futex resumed>) = 1 [pid 6662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6664] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6662] close(15) = -1 EBADF (Bad file descriptor) [pid 6662] close(16) = -1 EBADF (Bad file descriptor) [pid 6662] close(17) = -1 EBADF (Bad file descriptor) [pid 6662] close(18) = -1 EBADF (Bad file descriptor) [pid 6662] close(19) = -1 EBADF (Bad file descriptor) [pid 6662] close(20) = -1 EBADF (Bad file descriptor) [pid 6662] close(21) = -1 EBADF (Bad file descriptor) [pid 6662] close(22) = -1 EBADF (Bad file descriptor) [pid 6662] close(23) = -1 EBADF (Bad file descriptor) [pid 6662] close(24) = -1 EBADF (Bad file descriptor) [pid 6662] close(25) = -1 EBADF (Bad file descriptor) [pid 6662] close(26) = -1 EBADF (Bad file descriptor) [pid 6662] close(27) = -1 EBADF (Bad file descriptor) [pid 6662] close(28) = -1 EBADF (Bad file descriptor) [pid 6662] close(29) = -1 EBADF (Bad file descriptor) [pid 6662] exit_group(0 [pid 6664] <... futex resumed>) = ? [pid 6662] <... exit_group resumed>) = ? [pid 6664] +++ exited with 0 +++ [pid 6663] <... futex resumed>) = ? [pid 6663] +++ exited with 0 +++ [pid 6662] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1638, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./546", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./546/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./546/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./546") = 0 [pid 5019] mkdir("./547", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1641 ./strace-static-x86_64: Process 6665 attached [pid 6665] set_robust_list(0x555556a426a0, 24) = 0 [pid 6665] chdir("./547") = 0 [pid 6665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 83.991130][ T6663] loop0: detected capacity change from 0 to 1024 [pid 6665] setpgid(0, 0) = 0 [pid 6665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6665] write(3, "1000", 4) = 4 [pid 6665] close(3) = 0 [pid 6665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6665] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6665] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1642]}, 88) = 1642 ./strace-static-x86_64: Process 6666 attached [pid 6666] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6666] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6666] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6665] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6666] memfd_create("syzkaller", 0 [pid 6665] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6666] <... memfd_create resumed>) = 3 [pid 6666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6666] munmap(0x7f15b9a45000, 524288) = 0 [pid 6666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6666] close(3) = 0 [pid 6666] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6666] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6666] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6666] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6666] ioctl(4, LOOP_CLR_FD) = 0 [pid 6666] close(4) = 0 [pid 6666] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6665] <... futex resumed>) = 0 [pid 6665] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6665] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1643]}, 88) = 1643 [pid 6665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6665] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6667 attached [pid 6667] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6667] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6667] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6667] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6666] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6667] <... mount resumed>) = 0 [pid 6667] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6667] chdir(".") = 0 [pid 6667] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... futex resumed>) = 0 [pid 6667] <... futex resumed>) = 1 [pid 6667] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] <... mknodat resumed>) = 0 [pid 6666] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6665] close(3) = 0 [pid 6665] close(4) = 0 [pid 6665] close(5) = -1 EBADF (Bad file descriptor) [pid 6665] close(6) = -1 EBADF (Bad file descriptor) [pid 6665] close(7) = -1 EBADF (Bad file descriptor) [pid 6665] close(8) = -1 EBADF (Bad file descriptor) [pid 6665] close(9) = -1 EBADF (Bad file descriptor) [pid 6665] close(10) = -1 EBADF (Bad file descriptor) [pid 6665] close(11) = -1 EBADF (Bad file descriptor) [pid 6665] close(12) = -1 EBADF (Bad file descriptor) [pid 6665] close(13) = -1 EBADF (Bad file descriptor) [pid 6665] close(14) = -1 EBADF (Bad file descriptor) [pid 6665] close(15) = -1 EBADF (Bad file descriptor) [pid 6665] close(16) = -1 EBADF (Bad file descriptor) [pid 6665] close(17) = -1 EBADF (Bad file descriptor) [pid 6665] close(18) = -1 EBADF (Bad file descriptor) [pid 6665] close(19) = -1 EBADF (Bad file descriptor) [pid 6665] close(20) = -1 EBADF (Bad file descriptor) [pid 6665] close(21) = -1 EBADF (Bad file descriptor) [pid 6665] close(22) = -1 EBADF (Bad file descriptor) [pid 6665] close(23) = -1 EBADF (Bad file descriptor) [pid 6665] close(24) = -1 EBADF (Bad file descriptor) [pid 6665] close(25) = -1 EBADF (Bad file descriptor) [pid 6665] close(26) = -1 EBADF (Bad file descriptor) [pid 6665] close(27) = -1 EBADF (Bad file descriptor) [pid 6665] close(28) = -1 EBADF (Bad file descriptor) [pid 6666] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] close(29) = -1 EBADF (Bad file descriptor) [pid 6665] exit_group(0 [pid 6667] <... futex resumed>) = ? [pid 6665] <... exit_group resumed>) = ? [pid 6667] +++ exited with 0 +++ [pid 6666] <... futex resumed>) = ? [pid 6666] +++ exited with 0 +++ [pid 6665] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1641, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./547", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./547/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./547/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./547") = 0 [pid 5019] mkdir("./548", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6669 attached [pid 6669] set_robust_list(0x555556a426a0, 24) = 0 [pid 6669] chdir("./548") = 0 [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6669] setpgid(0, 0) = 0 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6669] write(3, "1000", 4) = 4 [pid 6669] close(3) = 0 [pid 6669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6669] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1644 [pid 6669] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6669] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1645]}, 88) = 1645 [pid 6669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6669] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6670 attached [pid 6670] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6670] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6670] memfd_create("syzkaller", 0) = 3 [pid 6670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6670] munmap(0x7f15b9a45000, 524288) = 0 [pid 6670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 84.069901][ T6666] loop0: detected capacity change from 0 to 1024 [pid 6670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6670] close(3) = 0 [pid 6670] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6670] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6670] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6670] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6670] ioctl(4, LOOP_CLR_FD) = 0 [pid 6670] close(4) = 0 [pid 6670] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6669] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6670] <... futex resumed>) = 1 [pid 6669] <... mprotect resumed>) = 0 [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6670] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1646]}, 88) = 1646 [pid 6669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6669] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6671 attached ) = 0 [pid 6669] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6671] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6671] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6671] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6671] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6670] <... mknodat resumed>) = 0 [pid 6670] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6670] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6671] <... mount resumed>) = 0 [pid 6671] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6671] chdir(".") = 0 [pid 6671] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6671] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] close(3) = 0 [pid 6669] close(4) = 0 [pid 6669] close(5) = -1 EBADF (Bad file descriptor) [pid 6669] close(6) = -1 EBADF (Bad file descriptor) [pid 6669] close(7) = -1 EBADF (Bad file descriptor) [pid 6669] close(8) = -1 EBADF (Bad file descriptor) [pid 6669] close(9) = -1 EBADF (Bad file descriptor) [pid 6669] close(10) = -1 EBADF (Bad file descriptor) [pid 6669] close(11) = -1 EBADF (Bad file descriptor) [pid 6669] close(12) = -1 EBADF (Bad file descriptor) [pid 6669] close(13) = -1 EBADF (Bad file descriptor) [pid 6669] close(14) = -1 EBADF (Bad file descriptor) [pid 6669] close(15) = -1 EBADF (Bad file descriptor) [pid 6669] close(16) = -1 EBADF (Bad file descriptor) [pid 6669] close(17) = -1 EBADF (Bad file descriptor) [pid 6669] close(18) = -1 EBADF (Bad file descriptor) [pid 6669] close(19) = -1 EBADF (Bad file descriptor) [pid 6669] close(20) = -1 EBADF (Bad file descriptor) [pid 6669] close(21) = -1 EBADF (Bad file descriptor) [pid 6669] close(22) = -1 EBADF (Bad file descriptor) [pid 6669] close(23) = -1 EBADF (Bad file descriptor) [pid 6669] close(24) = -1 EBADF (Bad file descriptor) [pid 6669] close(25) = -1 EBADF (Bad file descriptor) [pid 6669] close(26) = -1 EBADF (Bad file descriptor) [pid 6669] close(27) = -1 EBADF (Bad file descriptor) [pid 6669] close(28) = -1 EBADF (Bad file descriptor) [pid 6669] close(29) = -1 EBADF (Bad file descriptor) [pid 6669] exit_group(0 [pid 6671] <... futex resumed>) = ? [pid 6670] <... futex resumed>) = ? [pid 6669] <... exit_group resumed>) = ? [pid 6671] +++ exited with 0 +++ [pid 6670] +++ exited with 0 +++ [pid 6669] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1644, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./548", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./548/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./548/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./548") = 0 [pid 5019] mkdir("./549", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 84.147186][ T6670] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1647 ./strace-static-x86_64: Process 6672 attached [pid 6672] set_robust_list(0x555556a426a0, 24) = 0 [pid 6672] chdir("./549") = 0 [pid 6672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6672] setpgid(0, 0) = 0 [pid 6672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6672] write(3, "1000", 4) = 4 [pid 6672] close(3) = 0 [pid 6672] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6672] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6672] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6672] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6672] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1648]}, 88) = 1648 [pid 6672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6672] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6672] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6673 attached [pid 6673] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6673] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6673] memfd_create("syzkaller", 0) = 3 [pid 6673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6673] munmap(0x7f15b9a45000, 524288) = 0 [pid 6673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6673] close(3) = 0 [pid 6673] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6673] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6673] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6673] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6673] ioctl(4, LOOP_CLR_FD) = 0 [pid 6673] close(4) = 0 [pid 6673] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6672] <... futex resumed>) = 0 [pid 6672] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6672] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6672] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1649]}, 88) = 1649 [pid 6673] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6672] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6672] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6674 attached [pid 6674] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6674] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6674] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6674] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6674] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6674] chdir(".") = 0 [pid 6674] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] <... futex resumed>) = 0 [pid 6674] <... futex resumed>) = 1 [pid 6674] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] <... mknodat resumed>) = 0 [pid 6673] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6672] close(3) = 0 [pid 6672] close(4) = 0 [pid 6672] close(5) = -1 EBADF (Bad file descriptor) [pid 6672] close(6) = -1 EBADF (Bad file descriptor) [pid 6672] close(7) = -1 EBADF (Bad file descriptor) [pid 6672] close(8) = -1 EBADF (Bad file descriptor) [pid 6672] close(9) = -1 EBADF (Bad file descriptor) [pid 6672] close(10) = -1 EBADF (Bad file descriptor) [pid 6672] close(11) = -1 EBADF (Bad file descriptor) [pid 6672] close(12) = -1 EBADF (Bad file descriptor) [pid 6672] close(13) = -1 EBADF (Bad file descriptor) [pid 6672] close(14) = -1 EBADF (Bad file descriptor) [pid 6672] close(15) = -1 EBADF (Bad file descriptor) [pid 6672] close(16) = -1 EBADF (Bad file descriptor) [pid 6672] close(17) = -1 EBADF (Bad file descriptor) [pid 6672] close(18) = -1 EBADF (Bad file descriptor) [pid 6672] close(19) = -1 EBADF (Bad file descriptor) [pid 6672] close(20) = -1 EBADF (Bad file descriptor) [pid 6673] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6672] close(21) = -1 EBADF (Bad file descriptor) [pid 6672] close(22) = -1 EBADF (Bad file descriptor) [pid 6672] close(23) = -1 EBADF (Bad file descriptor) [pid 6672] close(24) = -1 EBADF (Bad file descriptor) [pid 6672] close(25) = -1 EBADF (Bad file descriptor) [pid 6672] close(26) = -1 EBADF (Bad file descriptor) [pid 6672] close(27) = -1 EBADF (Bad file descriptor) [pid 6672] close(28) = -1 EBADF (Bad file descriptor) [pid 6672] close(29) = -1 EBADF (Bad file descriptor) [pid 6672] exit_group(0) = ? [pid 6674] <... futex resumed>) = ? [pid 6674] +++ exited with 0 +++ [pid 6673] <... futex resumed>) = ? [pid 6673] +++ exited with 0 +++ [pid 6672] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1647, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./549", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./549/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./549/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./549") = 0 [pid 5019] mkdir("./550", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 84.222331][ T6673] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6675 attached [pid 6675] set_robust_list(0x555556a426a0, 24) = 0 [pid 6675] chdir("./550") = 0 [pid 6675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6675] setpgid(0, 0) = 0 [pid 6675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1650 [pid 6675] <... openat resumed>) = 3 [pid 6675] write(3, "1000", 4) = 4 [pid 6675] close(3) = 0 [pid 6675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6675] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6675] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6675] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6676 attached [pid 6676] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6676] set_robust_list(0x7f15c1e659a0, 24 [pid 6675] <... clone3 resumed> => {parent_tid=[1651]}, 88) = 1651 [pid 6676] <... set_robust_list resumed>) = 0 [pid 6675] rt_sigprocmask(SIG_SETMASK, [], [pid 6676] rt_sigprocmask(SIG_SETMASK, [], [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6675] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6676] memfd_create("syzkaller", 0 [pid 6675] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6676] <... memfd_create resumed>) = 3 [pid 6676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6676] munmap(0x7f15b9a45000, 524288) = 0 [pid 6676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6676] close(3) = 0 [pid 6676] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6676] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6676] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6676] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6676] ioctl(4, LOOP_CLR_FD) = 0 [pid 6676] close(4) = 0 [pid 6676] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6676] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6675] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6675] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6676] <... mknodat resumed>) = 0 [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6675] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1652]}, 88) = 1652 [pid 6675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6677 attached [pid 6675] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6677] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6675] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6676] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6676] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6677] <... rseq resumed>) = 0 [pid 6677] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6677] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6677] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6677] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6677] chdir(".") = 0 [pid 6677] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6675] close(3) = 0 [pid 6675] close(4) = 0 [pid 6675] close(5) = -1 EBADF (Bad file descriptor) [pid 6675] close(6) = -1 EBADF (Bad file descriptor) [pid 6675] close(7) = -1 EBADF (Bad file descriptor) [pid 6675] close(8) = -1 EBADF (Bad file descriptor) [pid 6675] close(9) = -1 EBADF (Bad file descriptor) [pid 6675] close(10) = -1 EBADF (Bad file descriptor) [pid 6675] close(11) = -1 EBADF (Bad file descriptor) [pid 6675] close(12) = -1 EBADF (Bad file descriptor) [pid 6675] close(13) = -1 EBADF (Bad file descriptor) [pid 6675] close(14) = -1 EBADF (Bad file descriptor) [pid 6675] close(15) = -1 EBADF (Bad file descriptor) [pid 6675] close(16) = -1 EBADF (Bad file descriptor) [pid 6675] close(17) = -1 EBADF (Bad file descriptor) [pid 6675] close(18) = -1 EBADF (Bad file descriptor) [pid 6675] close(19) = -1 EBADF (Bad file descriptor) [pid 6675] close(20) = -1 EBADF (Bad file descriptor) [pid 6675] close(21) = -1 EBADF (Bad file descriptor) [pid 6675] close(22) = -1 EBADF (Bad file descriptor) [pid 6675] close(23) = -1 EBADF (Bad file descriptor) [pid 6675] close(24) = -1 EBADF (Bad file descriptor) [pid 6675] close(25) = -1 EBADF (Bad file descriptor) [pid 6675] close(26) = -1 EBADF (Bad file descriptor) [pid 6675] close(27) = -1 EBADF (Bad file descriptor) [pid 6675] close(28) = -1 EBADF (Bad file descriptor) [pid 6675] close(29) = -1 EBADF (Bad file descriptor) [pid 6675] exit_group(0 [pid 6676] <... futex resumed>) = ? [pid 6675] <... exit_group resumed>) = ? [pid 6676] +++ exited with 0 +++ [pid 6677] +++ exited with 0 +++ [pid 6675] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1650, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./550", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./550/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./550/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./550") = 0 [pid 5019] mkdir("./551", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1653 ./strace-static-x86_64: Process 6678 attached [pid 6678] set_robust_list(0x555556a426a0, 24) = 0 [pid 6678] chdir("./551") = 0 [pid 6678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6678] setpgid(0, 0) = 0 [pid 6678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6678] write(3, "1000", 4) = 4 [pid 6678] close(3) = 0 [pid 6678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6678] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6678] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6678] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1654]}, 88) = 1654 [pid 6678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6678] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6678] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6679 attached [pid 6679] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6679] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6679] memfd_create("syzkaller", 0) = 3 [pid 6679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 84.302288][ T6676] loop0: detected capacity change from 0 to 1024 [pid 6679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6679] munmap(0x7f15b9a45000, 524288) = 0 [pid 6679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6679] close(3) = 0 [pid 6679] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6679] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6679] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6679] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6679] ioctl(4, LOOP_CLR_FD) = 0 [pid 6679] close(4) = 0 [pid 6679] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] <... futex resumed>) = 0 [pid 6679] <... futex resumed>) = 1 [pid 6678] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6678] <... futex resumed>) = 0 [pid 6678] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6678] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1655]}, 88) = 1655 [pid 6678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6678] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6678] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6680 attached [pid 6680] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6680] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6680] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6680] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6679] <... mknodat resumed>) = 0 [pid 6679] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6680] <... mount resumed>) = 0 [pid 6680] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 6679] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6680] <... openat resumed>) = 4 [pid 6680] chdir(".") = 0 [pid 6680] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] <... futex resumed>) = 0 [pid 6678] close(3) = 0 [pid 6678] close(4) = 0 [pid 6678] close(5) = -1 EBADF (Bad file descriptor) [pid 6678] close(6) = -1 EBADF (Bad file descriptor) [pid 6678] close(7) = -1 EBADF (Bad file descriptor) [pid 6678] close(8) = -1 EBADF (Bad file descriptor) [pid 6678] close(9) = -1 EBADF (Bad file descriptor) [pid 6678] close(10) = -1 EBADF (Bad file descriptor) [pid 6678] close(11) = -1 EBADF (Bad file descriptor) [pid 6678] close(12) = -1 EBADF (Bad file descriptor) [pid 6678] close(13) = -1 EBADF (Bad file descriptor) [pid 6678] close(14) = -1 EBADF (Bad file descriptor) [pid 6678] close(15) = -1 EBADF (Bad file descriptor) [pid 6678] close(16) = -1 EBADF (Bad file descriptor) [pid 6678] close(17) = -1 EBADF (Bad file descriptor) [pid 6678] close(18) = -1 EBADF (Bad file descriptor) [pid 6678] close(19) = -1 EBADF (Bad file descriptor) [pid 6678] close(20) = -1 EBADF (Bad file descriptor) [pid 6678] close(21) = -1 EBADF (Bad file descriptor) [pid 6678] close(22) = -1 EBADF (Bad file descriptor) [pid 6678] close(23) = -1 EBADF (Bad file descriptor) [pid 6678] close(24) = -1 EBADF (Bad file descriptor) [pid 6678] close(25) = -1 EBADF (Bad file descriptor) [pid 6678] close(26) = -1 EBADF (Bad file descriptor) [pid 6678] close(27) = -1 EBADF (Bad file descriptor) [pid 6678] close(28) = -1 EBADF (Bad file descriptor) [pid 6678] close(29) = -1 EBADF (Bad file descriptor) [pid 6678] exit_group(0) = ? [pid 6679] <... futex resumed>) = ? [pid 6680] <... futex resumed>) = ? [pid 6679] +++ exited with 0 +++ [pid 6680] +++ exited with 0 +++ [pid 6678] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1653, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./551", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./551/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./551/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./551/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./551") = 0 [pid 5019] mkdir("./552", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1656 ./strace-static-x86_64: Process 6681 attached [pid 6681] set_robust_list(0x555556a426a0, 24) = 0 [pid 6681] chdir("./552") = 0 [pid 6681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6681] setpgid(0, 0) = 0 [pid 6681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6681] write(3, "1000", 4) = 4 [pid 6681] close(3) = 0 [pid 6681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6681] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6681] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6681] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6682 attached => {parent_tid=[1657]}, 88) = 1657 [pid 6682] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6682] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 84.368173][ T6679] loop0: detected capacity change from 0 to 1024 [pid 6682] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6681] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6682] <... futex resumed>) = 0 [pid 6681] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6682] memfd_create("syzkaller", 0) = 3 [pid 6682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6682] munmap(0x7f15b9a45000, 524288) = 0 [pid 6682] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6682] close(3) = 0 [pid 6682] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6682] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6682] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6682] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6682] ioctl(4, LOOP_CLR_FD) = 0 [pid 6682] close(4) = 0 [pid 6682] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6681] <... futex resumed>) = 0 [pid 6681] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6681] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6681] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1658]}, 88) = 1658 [pid 6681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6681] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6681] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6683 attached [pid 6683] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6683] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6683] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6683] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6682] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6683] <... mount resumed>) = 0 [pid 6683] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6683] chdir(".") = 0 [pid 6683] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6681] <... futex resumed>) = 0 [pid 6683] <... futex resumed>) = 1 [pid 6683] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] <... mknodat resumed>) = 0 [pid 6682] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6681] close(3) = 0 [pid 6681] close(4) = 0 [pid 6681] close(5) = -1 EBADF (Bad file descriptor) [pid 6681] close(6) = -1 EBADF (Bad file descriptor) [pid 6681] close(7) = -1 EBADF (Bad file descriptor) [pid 6681] close(8) = -1 EBADF (Bad file descriptor) [pid 6681] close(9) = -1 EBADF (Bad file descriptor) [pid 6681] close(10) = -1 EBADF (Bad file descriptor) [pid 6681] close(11) = -1 EBADF (Bad file descriptor) [pid 6681] close(12) = -1 EBADF (Bad file descriptor) [pid 6681] close(13) = -1 EBADF (Bad file descriptor) [pid 6681] close(14) = -1 EBADF (Bad file descriptor) [pid 6681] close(15) = -1 EBADF (Bad file descriptor) [pid 6681] close(16) = -1 EBADF (Bad file descriptor) [pid 6681] close(17) = -1 EBADF (Bad file descriptor) [pid 6681] close(18) = -1 EBADF (Bad file descriptor) [pid 6681] close(19) = -1 EBADF (Bad file descriptor) [pid 6681] close(20) = -1 EBADF (Bad file descriptor) [pid 6681] close(21) = -1 EBADF (Bad file descriptor) [pid 6681] close(22) = -1 EBADF (Bad file descriptor) [pid 6681] close(23) = -1 EBADF (Bad file descriptor) [pid 6681] close(24) = -1 EBADF (Bad file descriptor) [pid 6681] close(25) = -1 EBADF (Bad file descriptor) [pid 6681] close(26) = -1 EBADF (Bad file descriptor) [pid 6681] close(27) = -1 EBADF (Bad file descriptor) [pid 6681] close(28) = -1 EBADF (Bad file descriptor) [pid 6681] close(29) = -1 EBADF (Bad file descriptor) [pid 6681] exit_group(0) = ? [pid 6682] <... futex resumed>) = ? [pid 6683] <... futex resumed>) = ? [pid 6682] +++ exited with 0 +++ [pid 6683] +++ exited with 0 +++ [pid 6681] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1656, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./552", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./552/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./552/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./552") = 0 [pid 5019] mkdir("./553", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 84.436828][ T6682] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6684 attached , child_tidptr=0x555556a42690) = 1659 [pid 6684] set_robust_list(0x555556a426a0, 24) = 0 [pid 6684] chdir("./553") = 0 [pid 6684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6684] setpgid(0, 0) = 0 [pid 6684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6684] write(3, "1000", 4) = 4 [pid 6684] close(3) = 0 [pid 6684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6684] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6684] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6685 attached [pid 6685] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6685] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6685] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6684] <... clone3 resumed> => {parent_tid=[1660]}, 88) = 1660 [pid 6684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6684] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6685] <... futex resumed>) = 0 [pid 6685] memfd_create("syzkaller", 0 [pid 6684] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6685] <... memfd_create resumed>) = 3 [pid 6685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6685] munmap(0x7f15b9a45000, 524288) = 0 [pid 6685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6685] close(3) = 0 [pid 6685] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6685] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6685] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6685] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6685] ioctl(4, LOOP_CLR_FD) = 0 [pid 6685] close(4) = 0 [pid 6685] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... futex resumed>) = 0 [pid 6684] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6684] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1661]}, 88) = 1661 [pid 6684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6684] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6684] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6685] <... futex resumed>) = 1 [pid 6685] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6685] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6685] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6686 attached [pid 6686] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6686] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6686] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6686] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6686] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6686] chdir(".") = 0 [pid 6686] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] <... futex resumed>) = 0 [pid 6686] <... futex resumed>) = 1 [pid 6684] close(3 [pid 6686] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6684] <... close resumed>) = 0 [pid 6684] close(4) = 0 [pid 6684] close(5) = -1 EBADF (Bad file descriptor) [pid 6684] close(6) = -1 EBADF (Bad file descriptor) [pid 6684] close(7) = -1 EBADF (Bad file descriptor) [pid 6684] close(8) = -1 EBADF (Bad file descriptor) [pid 6684] close(9) = -1 EBADF (Bad file descriptor) [pid 6684] close(10) = -1 EBADF (Bad file descriptor) [pid 6684] close(11) = -1 EBADF (Bad file descriptor) [pid 6684] close(12) = -1 EBADF (Bad file descriptor) [pid 6684] close(13) = -1 EBADF (Bad file descriptor) [pid 6684] close(14) = -1 EBADF (Bad file descriptor) [pid 6684] close(15) = -1 EBADF (Bad file descriptor) [pid 6684] close(16) = -1 EBADF (Bad file descriptor) [pid 6684] close(17) = -1 EBADF (Bad file descriptor) [pid 6684] close(18) = -1 EBADF (Bad file descriptor) [pid 6684] close(19) = -1 EBADF (Bad file descriptor) [pid 6684] close(20) = -1 EBADF (Bad file descriptor) [pid 6684] close(21) = -1 EBADF (Bad file descriptor) [pid 6684] close(22) = -1 EBADF (Bad file descriptor) [pid 6684] close(23) = -1 EBADF (Bad file descriptor) [pid 6684] close(24) = -1 EBADF (Bad file descriptor) [pid 6684] close(25) = -1 EBADF (Bad file descriptor) [pid 6684] close(26) = -1 EBADF (Bad file descriptor) [pid 6684] close(27) = -1 EBADF (Bad file descriptor) [pid 6684] close(28) = -1 EBADF (Bad file descriptor) [pid 6684] close(29) = -1 EBADF (Bad file descriptor) [pid 6684] exit_group(0 [pid 6685] <... futex resumed>) = ? [pid 6684] <... exit_group resumed>) = ? [pid 6685] +++ exited with 0 +++ [pid 6686] <... futex resumed>) = ? [pid 6686] +++ exited with 0 +++ [pid 6684] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1659, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./553", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./553/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./553/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./553") = 0 [pid 5019] mkdir("./554", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1662 ./strace-static-x86_64: Process 6687 attached [pid 6687] set_robust_list(0x555556a426a0, 24) = 0 [pid 6687] chdir("./554") = 0 [pid 6687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6687] setpgid(0, 0) = 0 [ 84.517349][ T6685] loop0: detected capacity change from 0 to 1024 [pid 6687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6687] write(3, "1000", 4) = 4 [pid 6687] close(3) = 0 [pid 6687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6687] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6687] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6687] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6688 attached => {parent_tid=[1663]}, 88) = 1663 [pid 6688] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6688] <... rseq resumed>) = 0 [pid 6687] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6687] <... futex resumed>) = 0 [pid 6688] rt_sigprocmask(SIG_SETMASK, [], [pid 6687] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6688] memfd_create("syzkaller", 0) = 3 [pid 6688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6688] munmap(0x7f15b9a45000, 524288) = 0 [pid 6688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6688] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6688] close(3) = 0 [pid 6688] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6688] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6688] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6688] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6688] ioctl(4, LOOP_CLR_FD) = 0 [pid 6688] close(4) = 0 [pid 6688] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6687] <... futex resumed>) = 0 [pid 6687] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6687] <... futex resumed>) = 0 [pid 6687] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6687] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6688] <... mknodat resumed>) = 0 [pid 6687] <... mprotect resumed>) = 0 [pid 6687] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6688] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6687] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6688] <... futex resumed>) = 0 [pid 6687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6688] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6689 attached [pid 6689] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6689] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6689] rt_sigprocmask(SIG_SETMASK, [], [pid 6687] <... clone3 resumed> => {parent_tid=[1664]}, 88) = 1664 [pid 6689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6689] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6687] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] <... futex resumed>) = 0 [pid 6687] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6689] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6689] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6689] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6689] chdir(".") = 0 [pid 6689] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6687] <... futex resumed>) = 0 [pid 6687] close(3) = 0 [pid 6687] close(4) = 0 [pid 6687] close(5) = -1 EBADF (Bad file descriptor) [pid 6687] close(6) = -1 EBADF (Bad file descriptor) [pid 6687] close(7) = -1 EBADF (Bad file descriptor) [pid 6687] close(8) = -1 EBADF (Bad file descriptor) [pid 6687] close(9) = -1 EBADF (Bad file descriptor) [pid 6687] close(10) = -1 EBADF (Bad file descriptor) [pid 6687] close(11) = -1 EBADF (Bad file descriptor) [pid 6687] close(12) = -1 EBADF (Bad file descriptor) [pid 6687] close(13) = -1 EBADF (Bad file descriptor) [pid 6687] close(14) = -1 EBADF (Bad file descriptor) [pid 6687] close(15) = -1 EBADF (Bad file descriptor) [pid 6687] close(16) = -1 EBADF (Bad file descriptor) [pid 6687] close(17) = -1 EBADF (Bad file descriptor) [pid 6687] close(18) = -1 EBADF (Bad file descriptor) [pid 6687] close(19) = -1 EBADF (Bad file descriptor) [pid 6687] close(20) = -1 EBADF (Bad file descriptor) [pid 6689] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6687] close(21) = -1 EBADF (Bad file descriptor) [pid 6687] close(22) = -1 EBADF (Bad file descriptor) [pid 6687] close(23) = -1 EBADF (Bad file descriptor) [pid 6687] close(24) = -1 EBADF (Bad file descriptor) [pid 6687] close(25) = -1 EBADF (Bad file descriptor) [pid 6687] close(26) = -1 EBADF (Bad file descriptor) [pid 6687] close(27) = -1 EBADF (Bad file descriptor) [pid 6687] close(28) = -1 EBADF (Bad file descriptor) [pid 6687] close(29) = -1 EBADF (Bad file descriptor) [pid 6687] exit_group(0 [pid 6688] <... futex resumed>) = ? [pid 6687] <... exit_group resumed>) = ? [pid 6689] <... futex resumed>) = ? [pid 6688] +++ exited with 0 +++ [pid 6689] +++ exited with 0 +++ [pid 6687] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1662, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./554", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./554/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./554/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./554") = 0 [pid 5019] mkdir("./555", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1665 ./strace-static-x86_64: Process 6690 attached [pid 6690] set_robust_list(0x555556a426a0, 24) = 0 [pid 6690] chdir("./555") = 0 [pid 6690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6690] setpgid(0, 0) = 0 [pid 6690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6690] write(3, "1000", 4) = 4 [pid 6690] close(3) = 0 [pid 6690] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6690] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6690] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6690] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6691 attached => {parent_tid=[1666]}, 88) = 1666 [pid 6691] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6691] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6691] rt_sigprocmask(SIG_SETMASK, [], [pid 6690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6691] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6690] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6691] <... futex resumed>) = 0 [pid 6690] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6691] memfd_create("syzkaller", 0) = 3 [ 84.594167][ T6688] loop0: detected capacity change from 0 to 1024 [pid 6691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6691] munmap(0x7f15b9a45000, 524288) = 0 [pid 6691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6691] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6691] close(3) = 0 [pid 6691] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6691] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6691] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6691] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6691] ioctl(4, LOOP_CLR_FD) = 0 [pid 6691] close(4) = 0 [pid 6691] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6690] <... futex resumed>) = 0 [pid 6690] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6690] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6690] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1667]}, 88) = 1667 [pid 6690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6690] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6690] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6691] <... futex resumed>) = 1 [pid 6691] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6691] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6691] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6692 attached [pid 6692] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6692] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6692] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6692] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6692] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6692] chdir(".") = 0 [pid 6692] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6690] <... futex resumed>) = 0 [pid 6690] close(3) = 0 [pid 6690] close(4) = 0 [pid 6690] close(5) = -1 EBADF (Bad file descriptor) [pid 6690] close(6) = -1 EBADF (Bad file descriptor) [pid 6690] close(7) = -1 EBADF (Bad file descriptor) [pid 6690] close(8) = -1 EBADF (Bad file descriptor) [pid 6690] close(9) = -1 EBADF (Bad file descriptor) [pid 6690] close(10) = -1 EBADF (Bad file descriptor) [pid 6690] close(11) = -1 EBADF (Bad file descriptor) [pid 6690] close(12) = -1 EBADF (Bad file descriptor) [pid 6690] close(13) = -1 EBADF (Bad file descriptor) [pid 6690] close(14) = -1 EBADF (Bad file descriptor) [pid 6690] close(15) = -1 EBADF (Bad file descriptor) [pid 6690] close(16) = -1 EBADF (Bad file descriptor) [pid 6690] close(17) = -1 EBADF (Bad file descriptor) [pid 6690] close(18) = -1 EBADF (Bad file descriptor) [pid 6690] close(19) = -1 EBADF (Bad file descriptor) [pid 6690] close(20) = -1 EBADF (Bad file descriptor) [pid 6690] close(21) = -1 EBADF (Bad file descriptor) [pid 6690] close(22) = -1 EBADF (Bad file descriptor) [pid 6690] close(23) = -1 EBADF (Bad file descriptor) [pid 6690] close(24) = -1 EBADF (Bad file descriptor) [pid 6690] close(25) = -1 EBADF (Bad file descriptor) [pid 6690] close(26) = -1 EBADF (Bad file descriptor) [pid 6690] close(27) = -1 EBADF (Bad file descriptor) [pid 6690] close(28) = -1 EBADF (Bad file descriptor) [pid 6690] close(29) = -1 EBADF (Bad file descriptor) [pid 6690] exit_group(0 [pid 6691] <... futex resumed>) = ? [pid 6690] <... exit_group resumed>) = ? [pid 6691] +++ exited with 0 +++ [pid 6692] +++ exited with 0 +++ [pid 6690] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1665, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./555", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./555/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./555/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./555/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./555") = 0 [pid 5019] mkdir("./556", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1668 ./strace-static-x86_64: Process 6693 attached [pid 6693] set_robust_list(0x555556a426a0, 24) = 0 [pid 6693] chdir("./556") = 0 [pid 6693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6693] setpgid(0, 0) = 0 [pid 6693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6693] write(3, "1000", 4) = 4 [pid 6693] close(3) = 0 [pid 6693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6693] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6693] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1669]}, 88) = 1669 [pid 6693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6693] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6694 attached [pid 6694] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6694] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6694] memfd_create("syzkaller", 0) = 3 [pid 6694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 84.660177][ T6691] loop0: detected capacity change from 0 to 1024 [pid 6694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6694] munmap(0x7f15b9a45000, 524288) = 0 [pid 6694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6694] close(3) = 0 [pid 6694] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6694] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6694] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6694] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6694] ioctl(4, LOOP_CLR_FD) = 0 [pid 6694] close(4) = 0 [pid 6694] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6693] <... futex resumed>) = 0 [pid 6694] <... futex resumed>) = 1 [pid 6693] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6693] <... futex resumed>) = 0 [pid 6693] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6693] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6695 attached [pid 6695] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6693] <... clone3 resumed> => {parent_tid=[1670]}, 88) = 1670 [pid 6693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6693] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6695] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6695] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6695] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6694] <... mknodat resumed>) = 0 [pid 6694] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6695] <... mount resumed>) = 0 [pid 6695] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6695] chdir(".") = 0 [pid 6695] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6693] <... futex resumed>) = 0 [pid 6693] close(3) = 0 [pid 6693] close(4) = 0 [pid 6693] close(5) = -1 EBADF (Bad file descriptor) [pid 6693] close(6) = -1 EBADF (Bad file descriptor) [pid 6693] close(7) = -1 EBADF (Bad file descriptor) [pid 6693] close(8) = -1 EBADF (Bad file descriptor) [pid 6693] close(9) = -1 EBADF (Bad file descriptor) [pid 6693] close(10) = -1 EBADF (Bad file descriptor) [pid 6693] close(11) = -1 EBADF (Bad file descriptor) [pid 6693] close(12) = -1 EBADF (Bad file descriptor) [pid 6693] close(13) = -1 EBADF (Bad file descriptor) [pid 6693] close(14) = -1 EBADF (Bad file descriptor) [pid 6693] close(15) = -1 EBADF (Bad file descriptor) [pid 6693] close(16) = -1 EBADF (Bad file descriptor) [pid 6693] close(17) = -1 EBADF (Bad file descriptor) [pid 6693] close(18) = -1 EBADF (Bad file descriptor) [pid 6693] close(19) = -1 EBADF (Bad file descriptor) [pid 6693] close(20) = -1 EBADF (Bad file descriptor) [pid 6693] close(21) = -1 EBADF (Bad file descriptor) [pid 6693] close(22) = -1 EBADF (Bad file descriptor) [pid 6693] close(23) = -1 EBADF (Bad file descriptor) [pid 6693] close(24) = -1 EBADF (Bad file descriptor) [pid 6693] close(25) = -1 EBADF (Bad file descriptor) [pid 6693] close(26) = -1 EBADF (Bad file descriptor) [pid 6693] close(27) = -1 EBADF (Bad file descriptor) [pid 6693] close(28) = -1 EBADF (Bad file descriptor) [pid 6693] close(29) = -1 EBADF (Bad file descriptor) [pid 6693] exit_group(0) = ? [pid 6694] <... futex resumed>) = ? [pid 6695] +++ exited with 0 +++ [pid 6694] +++ exited with 0 +++ [pid 6693] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1668, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./556", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./556/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./556/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./556") = 0 [pid 5019] mkdir("./557", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 84.724568][ T6694] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1671 ./strace-static-x86_64: Process 6697 attached [pid 6697] set_robust_list(0x555556a426a0, 24) = 0 [pid 6697] chdir("./557") = 0 [pid 6697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6697] setpgid(0, 0) = 0 [pid 6697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6697] write(3, "1000", 4) = 4 [pid 6697] close(3) = 0 [pid 6697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6697] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6697] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6698 attached [pid 6698] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6698] set_robust_list(0x7f15c1e659a0, 24 [pid 6697] <... clone3 resumed> => {parent_tid=[1672]}, 88) = 1672 [pid 6698] <... set_robust_list resumed>) = 0 [pid 6697] rt_sigprocmask(SIG_SETMASK, [], [pid 6698] rt_sigprocmask(SIG_SETMASK, [], [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6697] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6698] memfd_create("syzkaller", 0 [pid 6697] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6698] <... memfd_create resumed>) = 3 [pid 6698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6698] munmap(0x7f15b9a45000, 524288) = 0 [pid 6698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6698] close(3) = 0 [pid 6698] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6698] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6698] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6698] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6698] ioctl(4, LOOP_CLR_FD) = 0 [pid 6698] close(4) = 0 [pid 6698] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6697] <... futex resumed>) = 0 [pid 6698] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6697] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6698] <... mknodat resumed>) = 0 [pid 6697] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6697] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6698] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6698] <... futex resumed>) = 0 [pid 6697] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6698] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6699 attached => {parent_tid=[1673]}, 88) = 1673 [pid 6699] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6699] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6699] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6697] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6697] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6699] <... futex resumed>) = 0 [pid 6699] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6699] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6699] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6699] chdir(".") = 0 [pid 6699] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6697] <... futex resumed>) = 0 [pid 6697] close(3) = 0 [pid 6697] close(4) = 0 [pid 6697] close(5 [pid 6699] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6697] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6697] close(6) = -1 EBADF (Bad file descriptor) [pid 6697] close(7) = -1 EBADF (Bad file descriptor) [pid 6697] close(8) = -1 EBADF (Bad file descriptor) [pid 6697] close(9) = -1 EBADF (Bad file descriptor) [pid 6697] close(10) = -1 EBADF (Bad file descriptor) [pid 6697] close(11) = -1 EBADF (Bad file descriptor) [pid 6697] close(12) = -1 EBADF (Bad file descriptor) [pid 6697] close(13) = -1 EBADF (Bad file descriptor) [pid 6697] close(14) = -1 EBADF (Bad file descriptor) [pid 6697] close(15) = -1 EBADF (Bad file descriptor) [pid 6697] close(16) = -1 EBADF (Bad file descriptor) [pid 6697] close(17) = -1 EBADF (Bad file descriptor) [pid 6697] close(18) = -1 EBADF (Bad file descriptor) [pid 6697] close(19) = -1 EBADF (Bad file descriptor) [pid 6697] close(20) = -1 EBADF (Bad file descriptor) [pid 6697] close(21) = -1 EBADF (Bad file descriptor) [pid 6697] close(22) = -1 EBADF (Bad file descriptor) [pid 6697] close(23) = -1 EBADF (Bad file descriptor) [pid 6697] close(24) = -1 EBADF (Bad file descriptor) [pid 6697] close(25) = -1 EBADF (Bad file descriptor) [pid 6697] close(26) = -1 EBADF (Bad file descriptor) [pid 6697] close(27) = -1 EBADF (Bad file descriptor) [pid 6697] close(28) = -1 EBADF (Bad file descriptor) [pid 6697] close(29) = -1 EBADF (Bad file descriptor) [pid 6697] exit_group(0 [pid 6698] <... futex resumed>) = ? [pid 6699] <... futex resumed>) = ? [pid 6697] <... exit_group resumed>) = ? [pid 6699] +++ exited with 0 +++ [pid 6698] +++ exited with 0 +++ [pid 6697] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1671, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./557", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./557/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./557/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./557") = 0 [pid 5019] mkdir("./558", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1674 ./strace-static-x86_64: Process 6700 attached [ 84.806569][ T6698] loop0: detected capacity change from 0 to 1024 [pid 6700] set_robust_list(0x555556a426a0, 24) = 0 [pid 6700] chdir("./558") = 0 [pid 6700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6700] setpgid(0, 0) = 0 [pid 6700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6700] write(3, "1000", 4) = 4 [pid 6700] close(3) = 0 [pid 6700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6700] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6700] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6701 attached => {parent_tid=[1675]}, 88) = 1675 [pid 6701] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6700] rt_sigprocmask(SIG_SETMASK, [], [pid 6701] <... rseq resumed>) = 0 [pid 6700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6701] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6701] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6701] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6700] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6701] <... futex resumed>) = 0 [pid 6700] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6701] memfd_create("syzkaller", 0) = 3 [pid 6701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6701] munmap(0x7f15b9a45000, 524288) = 0 [pid 6701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6701] close(3) = 0 [pid 6701] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6701] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6701] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6701] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6701] ioctl(4, LOOP_CLR_FD) = 0 [pid 6701] close(4) = 0 [pid 6701] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] <... futex resumed>) = 0 [pid 6700] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6700] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1676]}, 88) = 1676 ./strace-static-x86_64: Process 6702 attached [pid 6700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6700] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6700] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6701] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6702] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6702] set_robust_list(0x7f15b9ac49a0, 24 [pid 6701] <... mknodat resumed>) = 0 [pid 6701] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6701] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6702] <... set_robust_list resumed>) = 0 [pid 6702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6702] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6702] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6702] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6702] chdir(".") = 0 [pid 6702] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6700] <... futex resumed>) = 0 [pid 6700] close(3) = 0 [pid 6700] close(4) = 0 [pid 6700] close(5) = -1 EBADF (Bad file descriptor) [pid 6700] close(6) = -1 EBADF (Bad file descriptor) [pid 6700] close(7) = -1 EBADF (Bad file descriptor) [pid 6700] close(8 [pid 6702] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6700] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6700] close(9) = -1 EBADF (Bad file descriptor) [pid 6700] close(10) = -1 EBADF (Bad file descriptor) [pid 6700] close(11) = -1 EBADF (Bad file descriptor) [pid 6700] close(12) = -1 EBADF (Bad file descriptor) [pid 6700] close(13) = -1 EBADF (Bad file descriptor) [pid 6700] close(14) = -1 EBADF (Bad file descriptor) [pid 6700] close(15) = -1 EBADF (Bad file descriptor) [pid 6700] close(16) = -1 EBADF (Bad file descriptor) [pid 6700] close(17) = -1 EBADF (Bad file descriptor) [pid 6700] close(18) = -1 EBADF (Bad file descriptor) [pid 6700] close(19) = -1 EBADF (Bad file descriptor) [pid 6700] close(20) = -1 EBADF (Bad file descriptor) [pid 6700] close(21) = -1 EBADF (Bad file descriptor) [pid 6700] close(22) = -1 EBADF (Bad file descriptor) [pid 6700] close(23) = -1 EBADF (Bad file descriptor) [pid 6700] close(24) = -1 EBADF (Bad file descriptor) [pid 6700] close(25) = -1 EBADF (Bad file descriptor) [pid 6700] close(26) = -1 EBADF (Bad file descriptor) [pid 6700] close(27) = -1 EBADF (Bad file descriptor) [pid 6700] close(28) = -1 EBADF (Bad file descriptor) [pid 6700] close(29) = -1 EBADF (Bad file descriptor) [pid 6700] exit_group(0 [pid 6702] <... futex resumed>) = ? [pid 6701] <... futex resumed>) = ? [pid 6700] <... exit_group resumed>) = ? [pid 6702] +++ exited with 0 +++ [pid 6701] +++ exited with 0 +++ [pid 6700] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1674, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./558", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./558/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./558/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./558") = 0 [pid 5019] mkdir("./559", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1677 ./strace-static-x86_64: Process 6703 attached [pid 6703] set_robust_list(0x555556a426a0, 24) = 0 [pid 6703] chdir("./559") = 0 [pid 6703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6703] setpgid(0, 0) = 0 [pid 6703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6703] write(3, "1000", 4) = 4 [pid 6703] close(3) = 0 [pid 6703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6703] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6703] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1678]}, 88) = 1678 [pid 6703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6703] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6704 attached [pid 6704] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6704] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6704] memfd_create("syzkaller", 0) = 3 [pid 6704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 84.887070][ T6701] loop0: detected capacity change from 0 to 1024 [pid 6704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6704] munmap(0x7f15b9a45000, 524288) = 0 [pid 6704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6704] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6704] close(3) = 0 [pid 6704] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6704] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6704] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6704] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6704] ioctl(4, LOOP_CLR_FD) = 0 [pid 6704] close(4) = 0 [pid 6704] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6703] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6705 attached [pid 6705] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6705] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6705] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] <... clone3 resumed> => {parent_tid=[1679]}, 88) = 1679 [pid 6703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6704] <... mknodat resumed>) = 0 [pid 6703] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6704] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] <... futex resumed>) = 1 [pid 6703] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6705] <... futex resumed>) = 0 [pid 6705] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6705] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6705] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6705] chdir(".") = 0 [pid 6705] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6703] <... futex resumed>) = 0 [pid 6703] close(3) = 0 [pid 6703] close(4) = 0 [pid 6703] close(5) = -1 EBADF (Bad file descriptor) [pid 6703] close(6) = -1 EBADF (Bad file descriptor) [pid 6703] close(7) = -1 EBADF (Bad file descriptor) [pid 6703] close(8) = -1 EBADF (Bad file descriptor) [pid 6703] close(9) = -1 EBADF (Bad file descriptor) [pid 6703] close(10) = -1 EBADF (Bad file descriptor) [pid 6703] close(11) = -1 EBADF (Bad file descriptor) [pid 6703] close(12) = -1 EBADF (Bad file descriptor) [pid 6703] close(13) = -1 EBADF (Bad file descriptor) [pid 6703] close(14) = -1 EBADF (Bad file descriptor) [pid 6703] close(15) = -1 EBADF (Bad file descriptor) [pid 6703] close(16) = -1 EBADF (Bad file descriptor) [pid 6703] close(17) = -1 EBADF (Bad file descriptor) [pid 6703] close(18) = -1 EBADF (Bad file descriptor) [pid 6703] close(19) = -1 EBADF (Bad file descriptor) [pid 6703] close(20) = -1 EBADF (Bad file descriptor) [pid 6703] close(21) = -1 EBADF (Bad file descriptor) [pid 6703] close(22) = -1 EBADF (Bad file descriptor) [pid 6703] close(23) = -1 EBADF (Bad file descriptor) [pid 6703] close(24) = -1 EBADF (Bad file descriptor) [pid 6703] close(25) = -1 EBADF (Bad file descriptor) [pid 6703] close(26) = -1 EBADF (Bad file descriptor) [pid 6703] close(27) = -1 EBADF (Bad file descriptor) [pid 6703] close(28) = -1 EBADF (Bad file descriptor) [pid 6703] close(29) = -1 EBADF (Bad file descriptor) [pid 6703] exit_group(0 [pid 6704] <... futex resumed>) = ? [pid 6703] <... exit_group resumed>) = ? [pid 6704] +++ exited with 0 +++ [pid 6705] +++ exited with 0 +++ [pid 6703] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1677, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./559", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./559/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./559/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [ 84.956431][ T6704] loop0: detected capacity change from 0 to 1024 [pid 5019] rmdir("./559") = 0 [pid 5019] mkdir("./560", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6706 attached [pid 6706] set_robust_list(0x555556a426a0, 24) = 0 [pid 6706] chdir("./560" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1680 [pid 6706] <... chdir resumed>) = 0 [pid 6706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6706] setpgid(0, 0) = 0 [pid 6706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6706] write(3, "1000", 4) = 4 [pid 6706] close(3) = 0 [pid 6706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6706] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6706] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6707 attached [pid 6707] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6707] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6707] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6706] <... clone3 resumed> => {parent_tid=[1681]}, 88) = 1681 [pid 6706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6706] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6707] memfd_create("syzkaller", 0 [pid 6706] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6707] <... memfd_create resumed>) = 3 [pid 6707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6707] munmap(0x7f15b9a45000, 524288) = 0 [pid 6707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6707] close(3) = 0 [pid 6707] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6707] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6707] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6707] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6707] ioctl(4, LOOP_CLR_FD) = 0 [pid 6707] close(4) = 0 [pid 6707] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6706] <... futex resumed>) = 0 [pid 6706] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6706] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6707] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6706] <... mprotect resumed>) = 0 [pid 6706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6708 attached [pid 6708] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6706] <... clone3 resumed> => {parent_tid=[1682]}, 88) = 1682 [pid 6708] set_robust_list(0x7f15b9ac49a0, 24 [pid 6706] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] <... set_robust_list resumed>) = 0 [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6706] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6708] rt_sigprocmask(SIG_SETMASK, [], [pid 6706] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6708] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6707] <... mknodat resumed>) = 0 [pid 6707] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6707] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6708] <... mount resumed>) = 0 [pid 6708] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6708] chdir(".") = 0 [pid 6708] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6706] <... futex resumed>) = 0 [pid 6706] close(3) = 0 [pid 6706] close(4) = 0 [pid 6706] close(5) = -1 EBADF (Bad file descriptor) [pid 6706] close(6) = -1 EBADF (Bad file descriptor) [pid 6706] close(7) = -1 EBADF (Bad file descriptor) [pid 6706] close(8) = -1 EBADF (Bad file descriptor) [pid 6706] close(9) = -1 EBADF (Bad file descriptor) [pid 6706] close(10) = -1 EBADF (Bad file descriptor) [pid 6706] close(11) = -1 EBADF (Bad file descriptor) [pid 6706] close(12) = -1 EBADF (Bad file descriptor) [pid 6706] close(13) = -1 EBADF (Bad file descriptor) [pid 6706] close(14) = -1 EBADF (Bad file descriptor) [pid 6706] close(15) = -1 EBADF (Bad file descriptor) [pid 6706] close(16) = -1 EBADF (Bad file descriptor) [pid 6706] close(17) = -1 EBADF (Bad file descriptor) [pid 6706] close(18) = -1 EBADF (Bad file descriptor) [pid 6708] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6706] close(19) = -1 EBADF (Bad file descriptor) [pid 6706] close(20) = -1 EBADF (Bad file descriptor) [pid 6706] close(21) = -1 EBADF (Bad file descriptor) [pid 6706] close(22) = -1 EBADF (Bad file descriptor) [pid 6706] close(23) = -1 EBADF (Bad file descriptor) [pid 6706] close(24) = -1 EBADF (Bad file descriptor) [pid 6706] close(25) = -1 EBADF (Bad file descriptor) [pid 6706] close(26) = -1 EBADF (Bad file descriptor) [pid 6706] close(27) = -1 EBADF (Bad file descriptor) [pid 6706] close(28) = -1 EBADF (Bad file descriptor) [pid 6706] close(29) = -1 EBADF (Bad file descriptor) [pid 6706] exit_group(0 [pid 6707] <... futex resumed>) = ? [pid 6708] <... futex resumed>) = ? [pid 6706] <... exit_group resumed>) = ? [pid 6707] +++ exited with 0 +++ [pid 6708] +++ exited with 0 +++ [pid 6706] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1680, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./560", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./560", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./560/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./560/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./560/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./560") = 0 [pid 5019] mkdir("./561", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1683 ./strace-static-x86_64: Process 6709 attached [pid 6709] set_robust_list(0x555556a426a0, 24) = 0 [pid 6709] chdir("./561") = 0 [pid 6709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6709] setpgid(0, 0) = 0 [pid 6709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6709] write(3, "1000", 4) = 4 [pid 6709] close(3) = 0 [pid 6709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6709] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6709] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6709] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1684]}, 88) = 1684 [ 85.031257][ T6707] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6710 attached [pid 6710] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6710] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6709] rt_sigprocmask(SIG_SETMASK, [], [pid 6710] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6709] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6710] <... futex resumed>) = 0 [pid 6709] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6710] memfd_create("syzkaller", 0) = 3 [pid 6710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6710] munmap(0x7f15b9a45000, 524288) = 0 [pid 6710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6710] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6710] close(3) = 0 [pid 6710] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6710] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6710] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6710] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6710] ioctl(4, LOOP_CLR_FD) = 0 [pid 6710] close(4) = 0 [pid 6710] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6709] <... futex resumed>) = 0 [pid 6709] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6709] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1685]}, 88) = 1685 [pid 6709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6709] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6710] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6711 attached ) = 0 [pid 6711] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6711] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6710] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6710] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6711] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6711] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6711] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6711] chdir(".") = 0 [pid 6711] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6709] <... futex resumed>) = 0 [pid 6711] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6709] close(3) = 0 [pid 6709] close(4) = 0 [pid 6709] close(5) = -1 EBADF (Bad file descriptor) [pid 6709] close(6) = -1 EBADF (Bad file descriptor) [pid 6709] close(7) = -1 EBADF (Bad file descriptor) [pid 6709] close(8) = -1 EBADF (Bad file descriptor) [pid 6709] close(9) = -1 EBADF (Bad file descriptor) [pid 6709] close(10) = -1 EBADF (Bad file descriptor) [pid 6709] close(11) = -1 EBADF (Bad file descriptor) [pid 6709] close(12) = -1 EBADF (Bad file descriptor) [pid 6709] close(13) = -1 EBADF (Bad file descriptor) [pid 6709] close(14) = -1 EBADF (Bad file descriptor) [pid 6709] close(15) = -1 EBADF (Bad file descriptor) [pid 6709] close(16) = -1 EBADF (Bad file descriptor) [pid 6709] close(17) = -1 EBADF (Bad file descriptor) [pid 6709] close(18) = -1 EBADF (Bad file descriptor) [pid 6709] close(19) = -1 EBADF (Bad file descriptor) [pid 6709] close(20) = -1 EBADF (Bad file descriptor) [pid 6709] close(21) = -1 EBADF (Bad file descriptor) [pid 6709] close(22) = -1 EBADF (Bad file descriptor) [pid 6709] close(23) = -1 EBADF (Bad file descriptor) [pid 6709] close(24) = -1 EBADF (Bad file descriptor) [pid 6709] close(25) = -1 EBADF (Bad file descriptor) [pid 6709] close(26) = -1 EBADF (Bad file descriptor) [pid 6709] close(27) = -1 EBADF (Bad file descriptor) [pid 6709] close(28) = -1 EBADF (Bad file descriptor) [pid 6709] close(29) = -1 EBADF (Bad file descriptor) [pid 6709] exit_group(0) = ? [pid 6710] <... futex resumed>) = ? [pid 6711] <... futex resumed>) = ? [pid 6710] +++ exited with 0 +++ [pid 6711] +++ exited with 0 +++ [pid 6709] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1683, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./561", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./561", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./561/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./561/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./561/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./561/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./561") = 0 [pid 5019] mkdir("./562", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1686 ./strace-static-x86_64: Process 6712 attached [pid 6712] set_robust_list(0x555556a426a0, 24) = 0 [pid 6712] chdir("./562") = 0 [pid 6712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6712] setpgid(0, 0) = 0 [pid 6712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6712] write(3, "1000", 4) = 4 [pid 6712] close(3) = 0 [pid 6712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6712] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6712] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6712] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6712] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6713 attached => {parent_tid=[1687]}, 88) = 1687 [pid 6713] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6712] rt_sigprocmask(SIG_SETMASK, [], [pid 6713] <... rseq resumed>) = 0 [pid 6713] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6713] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6713] <... futex resumed>) = 0 [pid 6712] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6713] memfd_create("syzkaller", 0) = 3 [pid 6713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 85.101103][ T6710] loop0: detected capacity change from 0 to 1024 [pid 6713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6713] munmap(0x7f15b9a45000, 524288) = 0 [pid 6713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6713] close(3) = 0 [pid 6713] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6713] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6713] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6713] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6713] ioctl(4, LOOP_CLR_FD) = 0 [pid 6713] close(4) = 0 [pid 6713] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] <... futex resumed>) = 0 [pid 6712] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6713] <... futex resumed>) = 1 [pid 6712] <... futex resumed>) = 0 [pid 6712] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6712] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6712] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6713] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6712] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6714 attached => {parent_tid=[1688]}, 88) = 1688 [pid 6714] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6712] rt_sigprocmask(SIG_SETMASK, [], [pid 6714] <... rseq resumed>) = 0 [pid 6712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6712] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6714] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6714] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6714] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6713] <... mknodat resumed>) = 0 [pid 6713] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6713] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6714] <... mount resumed>) = 0 [pid 6714] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6714] chdir(".") = 0 [pid 6714] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6712] <... futex resumed>) = 0 [pid 6714] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6712] close(3) = 0 [pid 6712] close(4) = 0 [pid 6712] close(5) = -1 EBADF (Bad file descriptor) [pid 6712] close(6) = -1 EBADF (Bad file descriptor) [pid 6712] close(7) = -1 EBADF (Bad file descriptor) [pid 6712] close(8) = -1 EBADF (Bad file descriptor) [pid 6712] close(9) = -1 EBADF (Bad file descriptor) [pid 6712] close(10) = -1 EBADF (Bad file descriptor) [pid 6712] close(11) = -1 EBADF (Bad file descriptor) [pid 6712] close(12) = -1 EBADF (Bad file descriptor) [pid 6712] close(13) = -1 EBADF (Bad file descriptor) [pid 6712] close(14) = -1 EBADF (Bad file descriptor) [pid 6712] close(15) = -1 EBADF (Bad file descriptor) [pid 6712] close(16) = -1 EBADF (Bad file descriptor) [pid 6712] close(17) = -1 EBADF (Bad file descriptor) [pid 6712] close(18) = -1 EBADF (Bad file descriptor) [pid 6712] close(19) = -1 EBADF (Bad file descriptor) [pid 6712] close(20) = -1 EBADF (Bad file descriptor) [pid 6712] close(21) = -1 EBADF (Bad file descriptor) [pid 6712] close(22) = -1 EBADF (Bad file descriptor) [pid 6712] close(23) = -1 EBADF (Bad file descriptor) [pid 6712] close(24) = -1 EBADF (Bad file descriptor) [pid 6712] close(25) = -1 EBADF (Bad file descriptor) [pid 6712] close(26) = -1 EBADF (Bad file descriptor) [pid 6712] close(27) = -1 EBADF (Bad file descriptor) [pid 6712] close(28) = -1 EBADF (Bad file descriptor) [pid 6712] close(29) = -1 EBADF (Bad file descriptor) [pid 6712] exit_group(0 [pid 6714] <... futex resumed>) = ? [pid 6713] <... futex resumed>) = ? [pid 6712] <... exit_group resumed>) = ? [pid 6714] +++ exited with 0 +++ [pid 6713] +++ exited with 0 +++ [pid 6712] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1686, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./562", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./562", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./562/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./562/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./562/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./562") = 0 [pid 5019] mkdir("./563", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 85.165827][ T6713] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6715 attached [pid 6715] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1689 [pid 6715] <... set_robust_list resumed>) = 0 [pid 6715] chdir("./563") = 0 [pid 6715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6715] setpgid(0, 0) = 0 [pid 6715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6715] write(3, "1000", 4) = 4 [pid 6715] close(3) = 0 [pid 6715] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6715] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6715] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6715] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6716 attached => {parent_tid=[1690]}, 88) = 1690 [pid 6716] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6716] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6716] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], [pid 6716] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6715] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6715] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6716] <... futex resumed>) = 0 [pid 6716] memfd_create("syzkaller", 0) = 3 [pid 6716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6716] munmap(0x7f15b9a45000, 524288) = 0 [pid 6716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6716] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6716] close(3) = 0 [pid 6716] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6716] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6716] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6716] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6716] ioctl(4, LOOP_CLR_FD) = 0 [pid 6716] close(4) = 0 [pid 6716] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... futex resumed>) = 0 [pid 6715] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] <... futex resumed>) = 1 [pid 6715] <... futex resumed>) = 0 [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6715] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6716] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6715] <... mprotect resumed>) = 0 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1691]}, 88) = 1691 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6715] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6717 attached [pid 6717] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6717] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6717] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6717] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6716] <... mknodat resumed>) = 0 [pid 6716] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6716] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6717] <... mount resumed>) = 0 [pid 6717] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6717] chdir(".") = 0 [pid 6717] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... futex resumed>) = 0 [pid 6715] close(3) = 0 [pid 6715] close(4) = 0 [pid 6715] close(5) = -1 EBADF (Bad file descriptor) [pid 6715] close(6) = -1 EBADF (Bad file descriptor) [pid 6715] close(7) = -1 EBADF (Bad file descriptor) [pid 6715] close(8) = -1 EBADF (Bad file descriptor) [pid 6715] close(9) = -1 EBADF (Bad file descriptor) [pid 6715] close(10) = -1 EBADF (Bad file descriptor) [pid 6715] close(11) = -1 EBADF (Bad file descriptor) [pid 6715] close(12) = -1 EBADF (Bad file descriptor) [pid 6715] close(13) = -1 EBADF (Bad file descriptor) [pid 6715] close(14) = -1 EBADF (Bad file descriptor) [pid 6715] close(15) = -1 EBADF (Bad file descriptor) [pid 6715] close(16) = -1 EBADF (Bad file descriptor) [pid 6715] close(17) = -1 EBADF (Bad file descriptor) [pid 6715] close(18) = -1 EBADF (Bad file descriptor) [pid 6715] close(19) = -1 EBADF (Bad file descriptor) [pid 6715] close(20) = -1 EBADF (Bad file descriptor) [pid 6715] close(21) = -1 EBADF (Bad file descriptor) [pid 6715] close(22) = -1 EBADF (Bad file descriptor) [pid 6715] close(23) = -1 EBADF (Bad file descriptor) [pid 6715] close(24) = -1 EBADF (Bad file descriptor) [pid 6715] close(25) = -1 EBADF (Bad file descriptor) [pid 6715] close(26) = -1 EBADF (Bad file descriptor) [pid 6715] close(27) = -1 EBADF (Bad file descriptor) [pid 6715] close(28) = -1 EBADF (Bad file descriptor) [pid 6715] close(29) = -1 EBADF (Bad file descriptor) [pid 6715] exit_group(0) = ? [pid 6717] <... futex resumed>) = ? [pid 6717] +++ exited with 0 +++ [pid 6716] <... futex resumed>) = ? [pid 6716] +++ exited with 0 +++ [pid 6715] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1689, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./563", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./563", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./563/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./563/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./563/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./563") = 0 [pid 5019] mkdir("./564", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1692 ./strace-static-x86_64: Process 6718 attached [pid 6718] set_robust_list(0x555556a426a0, 24) = 0 [pid 6718] chdir("./564") = 0 [pid 6718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6718] setpgid(0, 0) = 0 [pid 6718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6718] write(3, "1000", 4) = 4 [pid 6718] close(3) = 0 [pid 6718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6718] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6718] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6719 attached => {parent_tid=[1693]}, 88) = 1693 [pid 6719] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6719] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6719] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6718] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6719] <... futex resumed>) = 0 [pid 6718] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6719] memfd_create("syzkaller", 0) = 3 [ 85.243416][ T6716] loop0: detected capacity change from 0 to 1024 [pid 6719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6719] munmap(0x7f15b9a45000, 524288) = 0 [pid 6719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6719] close(3) = 0 [pid 6719] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6719] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6719] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6719] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6719] ioctl(4, LOOP_CLR_FD) = 0 [pid 6719] close(4) = 0 [pid 6719] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6718] <... futex resumed>) = 0 [pid 6718] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6718] <... futex resumed>) = 0 [pid 6719] <... mknodat resumed>) = 0 [pid 6718] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6719] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6718] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6719] <... futex resumed>) = 0 [pid 6718] <... mprotect resumed>) = 0 [pid 6719] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6721 attached => {parent_tid=[1694]}, 88) = 1694 [pid 6718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6718] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6721] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6718] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6721] <... rseq resumed>) = 0 [pid 6721] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6721] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6721] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6721] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6721] chdir(".") = 0 [pid 6721] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6718] <... futex resumed>) = 0 [pid 6721] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] close(3) = 0 [pid 6718] close(4) = 0 [pid 6718] close(5) = -1 EBADF (Bad file descriptor) [pid 6718] close(6) = -1 EBADF (Bad file descriptor) [pid 6718] close(7) = -1 EBADF (Bad file descriptor) [pid 6718] close(8) = -1 EBADF (Bad file descriptor) [pid 6718] close(9) = -1 EBADF (Bad file descriptor) [pid 6718] close(10) = -1 EBADF (Bad file descriptor) [pid 6718] close(11) = -1 EBADF (Bad file descriptor) [pid 6718] close(12) = -1 EBADF (Bad file descriptor) [pid 6718] close(13) = -1 EBADF (Bad file descriptor) [pid 6718] close(14) = -1 EBADF (Bad file descriptor) [pid 6718] close(15) = -1 EBADF (Bad file descriptor) [pid 6718] close(16) = -1 EBADF (Bad file descriptor) [pid 6718] close(17) = -1 EBADF (Bad file descriptor) [pid 6718] close(18) = -1 EBADF (Bad file descriptor) [pid 6718] close(19) = -1 EBADF (Bad file descriptor) [pid 6718] close(20) = -1 EBADF (Bad file descriptor) [pid 6718] close(21) = -1 EBADF (Bad file descriptor) [pid 6718] close(22) = -1 EBADF (Bad file descriptor) [pid 6718] close(23) = -1 EBADF (Bad file descriptor) [pid 6718] close(24) = -1 EBADF (Bad file descriptor) [pid 6718] close(25) = -1 EBADF (Bad file descriptor) [pid 6718] close(26) = -1 EBADF (Bad file descriptor) [pid 6718] close(27) = -1 EBADF (Bad file descriptor) [pid 6718] close(28) = -1 EBADF (Bad file descriptor) [pid 6718] close(29) = -1 EBADF (Bad file descriptor) [pid 6718] exit_group(0 [pid 6721] <... futex resumed>) = ? [pid 6719] <... futex resumed>) = ? [pid 6718] <... exit_group resumed>) = ? [pid 6719] +++ exited with 0 +++ [pid 6721] +++ exited with 0 +++ [pid 6718] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1692, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./564", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./564", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [ 85.310676][ T6719] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./564/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./564/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./564/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./564") = 0 [pid 5019] mkdir("./565", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1695 ./strace-static-x86_64: Process 6722 attached [pid 6722] set_robust_list(0x555556a426a0, 24) = 0 [pid 6722] chdir("./565") = 0 [pid 6722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6722] setpgid(0, 0) = 0 [pid 6722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6722] write(3, "1000", 4) = 4 [pid 6722] close(3) = 0 [pid 6722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6722] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6722] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6722] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1696]}, 88) = 1696 [pid 6722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6722] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6722] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6723 attached [pid 6723] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6723] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6723] memfd_create("syzkaller", 0) = 3 [pid 6723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6723] munmap(0x7f15b9a45000, 524288) = 0 [pid 6723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6723] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6723] close(3) = 0 [pid 6723] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6723] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6723] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6723] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6723] ioctl(4, LOOP_CLR_FD) = 0 [pid 6723] close(4) = 0 [pid 6723] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6722] <... futex resumed>) = 0 [pid 6723] <... futex resumed>) = 1 [pid 6722] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6723] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6722] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6722] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1697]}, 88) = 1697 [pid 6722] rt_sigprocmask(SIG_SETMASK, [], [pid 6723] <... mknodat resumed>) = 0 [pid 6723] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6722] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6723] <... futex resumed>) = 0 [pid 6722] <... futex resumed>) = 0 [pid 6722] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6723] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6724 attached [pid 6724] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6724] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6724] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6724] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6724] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6724] chdir(".") = 0 [pid 6724] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6722] <... futex resumed>) = 0 [pid 6724] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6722] close(3) = 0 [pid 6722] close(4) = 0 [pid 6722] close(5) = -1 EBADF (Bad file descriptor) [pid 6722] close(6) = -1 EBADF (Bad file descriptor) [pid 6722] close(7) = -1 EBADF (Bad file descriptor) [pid 6722] close(8) = -1 EBADF (Bad file descriptor) [pid 6722] close(9) = -1 EBADF (Bad file descriptor) [pid 6722] close(10) = -1 EBADF (Bad file descriptor) [pid 6722] close(11) = -1 EBADF (Bad file descriptor) [pid 6722] close(12) = -1 EBADF (Bad file descriptor) [pid 6722] close(13) = -1 EBADF (Bad file descriptor) [pid 6722] close(14) = -1 EBADF (Bad file descriptor) [pid 6722] close(15) = -1 EBADF (Bad file descriptor) [pid 6722] close(16) = -1 EBADF (Bad file descriptor) [pid 6722] close(17) = -1 EBADF (Bad file descriptor) [pid 6722] close(18) = -1 EBADF (Bad file descriptor) [pid 6722] close(19) = -1 EBADF (Bad file descriptor) [pid 6722] close(20) = -1 EBADF (Bad file descriptor) [pid 6722] close(21) = -1 EBADF (Bad file descriptor) [pid 6722] close(22) = -1 EBADF (Bad file descriptor) [pid 6722] close(23) = -1 EBADF (Bad file descriptor) [pid 6722] close(24) = -1 EBADF (Bad file descriptor) [pid 6722] close(25) = -1 EBADF (Bad file descriptor) [pid 6722] close(26) = -1 EBADF (Bad file descriptor) [pid 6722] close(27) = -1 EBADF (Bad file descriptor) [pid 6722] close(28) = -1 EBADF (Bad file descriptor) [pid 6722] close(29) = -1 EBADF (Bad file descriptor) [pid 6722] exit_group(0 [pid 6723] <... futex resumed>) = ? [pid 6722] <... exit_group resumed>) = ? [pid 6723] +++ exited with 0 +++ [pid 6724] <... futex resumed>) = ? [pid 6724] +++ exited with 0 +++ [pid 6722] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1695, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./565", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./565", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./565/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./565/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./565/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./565") = 0 [pid 5019] mkdir("./566", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1698 [ 85.389001][ T6723] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6725 attached [pid 6725] set_robust_list(0x555556a426a0, 24) = 0 [pid 6725] chdir("./566") = 0 [pid 6725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6725] setpgid(0, 0) = 0 [pid 6725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6725] write(3, "1000", 4) = 4 [pid 6725] close(3) = 0 [pid 6725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6725] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6725] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6725] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1699]}, 88) = 1699 ./strace-static-x86_64: Process 6726 attached [pid 6726] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6726] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6726] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6725] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6725] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6726] memfd_create("syzkaller", 0) = 3 [pid 6726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6726] munmap(0x7f15b9a45000, 524288) = 0 [pid 6726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6726] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6726] close(3) = 0 [pid 6726] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6726] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6726] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6726] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6726] ioctl(4, LOOP_CLR_FD) = 0 [pid 6726] close(4) = 0 [pid 6726] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6725] <... futex resumed>) = 0 [pid 6725] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6726] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6725] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6725] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1700]}, 88) = 1700 [pid 6725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6725] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6727 attached [pid 6727] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6727] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6727] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6727] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6726] <... mknodat resumed>) = 0 [pid 6726] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6726] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6727] <... mount resumed>) = 0 [pid 6727] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6727] chdir(".") = 0 [pid 6727] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6725] <... futex resumed>) = 0 [pid 6725] close(3) = 0 [pid 6725] close(4) = 0 [pid 6725] close(5) = -1 EBADF (Bad file descriptor) [pid 6725] close(6) = -1 EBADF (Bad file descriptor) [pid 6725] close(7) = -1 EBADF (Bad file descriptor) [pid 6725] close(8) = -1 EBADF (Bad file descriptor) [pid 6725] close(9) = -1 EBADF (Bad file descriptor) [pid 6725] close(10) = -1 EBADF (Bad file descriptor) [pid 6725] close(11) = -1 EBADF (Bad file descriptor) [pid 6725] close(12) = -1 EBADF (Bad file descriptor) [pid 6725] close(13) = -1 EBADF (Bad file descriptor) [pid 6725] close(14) = -1 EBADF (Bad file descriptor) [pid 6725] close(15) = -1 EBADF (Bad file descriptor) [pid 6725] close(16) = -1 EBADF (Bad file descriptor) [pid 6725] close(17) = -1 EBADF (Bad file descriptor) [pid 6725] close(18 [pid 6727] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6725] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6725] close(19) = -1 EBADF (Bad file descriptor) [pid 6725] close(20) = -1 EBADF (Bad file descriptor) [pid 6725] close(21) = -1 EBADF (Bad file descriptor) [pid 6725] close(22) = -1 EBADF (Bad file descriptor) [pid 6725] close(23) = -1 EBADF (Bad file descriptor) [pid 6725] close(24) = -1 EBADF (Bad file descriptor) [pid 6725] close(25) = -1 EBADF (Bad file descriptor) [pid 6725] close(26) = -1 EBADF (Bad file descriptor) [pid 6725] close(27) = -1 EBADF (Bad file descriptor) [pid 6725] close(28) = -1 EBADF (Bad file descriptor) [pid 6725] close(29) = -1 EBADF (Bad file descriptor) [pid 6725] exit_group(0 [pid 6727] <... futex resumed>) = ? [pid 6726] <... futex resumed>) = ? [pid 6725] <... exit_group resumed>) = ? [pid 6726] +++ exited with 0 +++ [pid 6727] +++ exited with 0 +++ [pid 6725] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1698, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./566", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./566", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./566/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./566/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./566/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./566") = 0 [pid 5019] mkdir("./567", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1701 ./strace-static-x86_64: Process 6728 attached [pid 6728] set_robust_list(0x555556a426a0, 24) = 0 [pid 6728] chdir("./567") = 0 [pid 6728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6728] setpgid(0, 0) = 0 [pid 6728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 85.466709][ T6726] loop0: detected capacity change from 0 to 1024 [pid 6728] write(3, "1000", 4) = 4 [pid 6728] close(3) = 0 [pid 6728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6728] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6728] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6728] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6728] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6728] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6729 attached [pid 6729] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6729] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6729] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6729] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] <... clone3 resumed> => {parent_tid=[1702]}, 88) = 1702 [pid 6728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6728] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6729] <... futex resumed>) = 0 [pid 6729] memfd_create("syzkaller", 0) = 3 [pid 6729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6728] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6729] munmap(0x7f15b9a45000, 524288) = 0 [pid 6729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6729] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6729] close(3) = 0 [pid 6729] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6729] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6729] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6729] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6729] ioctl(4, LOOP_CLR_FD) = 0 [pid 6729] close(4) = 0 [pid 6729] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6729] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] <... futex resumed>) = 0 [pid 6728] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6729] <... futex resumed>) = 0 [pid 6729] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6728] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6728] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6728] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6729] <... mknodat resumed>) = 0 [pid 6729] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6730 attached ) = 0 [pid 6728] <... clone3 resumed> => {parent_tid=[1703]}, 88) = 1703 [pid 6729] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6728] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6728] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6730] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6730] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6730] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6730] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6730] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6730] chdir(".") = 0 [pid 6730] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6728] <... futex resumed>) = 0 [pid 6728] close(3) = 0 [pid 6728] close(4) = 0 [pid 6730] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] close(5) = -1 EBADF (Bad file descriptor) [pid 6728] close(6) = -1 EBADF (Bad file descriptor) [pid 6728] close(7) = -1 EBADF (Bad file descriptor) [pid 6728] close(8) = -1 EBADF (Bad file descriptor) [pid 6728] close(9) = -1 EBADF (Bad file descriptor) [pid 6728] close(10) = -1 EBADF (Bad file descriptor) [pid 6728] close(11) = -1 EBADF (Bad file descriptor) [pid 6728] close(12) = -1 EBADF (Bad file descriptor) [pid 6728] close(13) = -1 EBADF (Bad file descriptor) [pid 6728] close(14) = -1 EBADF (Bad file descriptor) [pid 6728] close(15) = -1 EBADF (Bad file descriptor) [pid 6728] close(16) = -1 EBADF (Bad file descriptor) [pid 6728] close(17) = -1 EBADF (Bad file descriptor) [pid 6728] close(18) = -1 EBADF (Bad file descriptor) [pid 6728] close(19) = -1 EBADF (Bad file descriptor) [pid 6728] close(20) = -1 EBADF (Bad file descriptor) [pid 6728] close(21) = -1 EBADF (Bad file descriptor) [pid 6728] close(22) = -1 EBADF (Bad file descriptor) [pid 6728] close(23) = -1 EBADF (Bad file descriptor) [pid 6728] close(24) = -1 EBADF (Bad file descriptor) [pid 6728] close(25) = -1 EBADF (Bad file descriptor) [pid 6728] close(26) = -1 EBADF (Bad file descriptor) [pid 6728] close(27) = -1 EBADF (Bad file descriptor) [pid 6728] close(28) = -1 EBADF (Bad file descriptor) [pid 6728] close(29) = -1 EBADF (Bad file descriptor) [pid 6728] exit_group(0 [pid 6729] <... futex resumed>) = ? [pid 6728] <... exit_group resumed>) = ? [pid 6730] <... futex resumed>) = ? [pid 6729] +++ exited with 0 +++ [pid 6730] +++ exited with 0 +++ [pid 6728] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1701, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./567", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./567", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./567/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./567/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./567/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./567") = 0 [pid 5019] mkdir("./568", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 85.542941][ T6729] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6731 attached [pid 6731] set_robust_list(0x555556a426a0, 24) = 0 [pid 6731] chdir("./568") = 0 [pid 6731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6731] setpgid(0, 0) = 0 [pid 6731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6731] write(3, "1000", 4) = 4 [pid 6731] close(3) = 0 [pid 6731] symlink("/dev/binderfs", "./binderfs" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1704 [pid 6731] <... symlink resumed>) = 0 [pid 6731] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6731] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6731] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6732 attached [pid 6732] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6731] <... clone3 resumed> => {parent_tid=[1705]}, 88) = 1705 [pid 6732] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6731] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] rt_sigprocmask(SIG_SETMASK, [], [pid 6731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6731] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] memfd_create("syzkaller", 0 [pid 6731] <... futex resumed>) = 0 [pid 6731] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6732] <... memfd_create resumed>) = 3 [pid 6732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6732] munmap(0x7f15b9a45000, 524288) = 0 [pid 6732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6732] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6732] close(3) = 0 [pid 6732] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6732] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6732] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6732] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6732] ioctl(4, LOOP_CLR_FD) = 0 [pid 6732] close(4) = 0 [pid 6732] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... futex resumed>) = 0 [pid 6731] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6731] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6731] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1706]}, 88) = 1706 [pid 6731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6731] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6731] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6732] <... futex resumed>) = 1 [pid 6732] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6733 attached ) = 0 [pid 6732] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6732] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6733] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6733] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6733] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6733] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6733] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6733] chdir(".") = 0 [pid 6733] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6731] <... futex resumed>) = 0 [pid 6733] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6731] close(3) = 0 [pid 6731] close(4) = 0 [pid 6731] close(5) = -1 EBADF (Bad file descriptor) [pid 6731] close(6) = -1 EBADF (Bad file descriptor) [pid 6731] close(7) = -1 EBADF (Bad file descriptor) [pid 6731] close(8) = -1 EBADF (Bad file descriptor) [pid 6731] close(9) = -1 EBADF (Bad file descriptor) [pid 6731] close(10) = -1 EBADF (Bad file descriptor) [pid 6731] close(11) = -1 EBADF (Bad file descriptor) [pid 6731] close(12) = -1 EBADF (Bad file descriptor) [pid 6731] close(13) = -1 EBADF (Bad file descriptor) [pid 6731] close(14) = -1 EBADF (Bad file descriptor) [pid 6731] close(15) = -1 EBADF (Bad file descriptor) [pid 6731] close(16) = -1 EBADF (Bad file descriptor) [pid 6731] close(17) = -1 EBADF (Bad file descriptor) [pid 6731] close(18) = -1 EBADF (Bad file descriptor) [pid 6731] close(19) = -1 EBADF (Bad file descriptor) [pid 6731] close(20) = -1 EBADF (Bad file descriptor) [pid 6731] close(21) = -1 EBADF (Bad file descriptor) [pid 6731] close(22) = -1 EBADF (Bad file descriptor) [pid 6731] close(23) = -1 EBADF (Bad file descriptor) [pid 6731] close(24) = -1 EBADF (Bad file descriptor) [pid 6731] close(25) = -1 EBADF (Bad file descriptor) [pid 6731] close(26) = -1 EBADF (Bad file descriptor) [pid 6731] close(27) = -1 EBADF (Bad file descriptor) [pid 6731] close(28) = -1 EBADF (Bad file descriptor) [pid 6731] close(29) = -1 EBADF (Bad file descriptor) [pid 6731] exit_group(0) = ? [pid 6733] <... futex resumed>) = ? [pid 6732] <... futex resumed>) = ? [pid 6732] +++ exited with 0 +++ [pid 6733] +++ exited with 0 +++ [pid 6731] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1704, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./568", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./568", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./568/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./568/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./568/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [ 85.619322][ T6732] loop0: detected capacity change from 0 to 1024 [pid 5019] rmdir("./568") = 0 [pid 5019] mkdir("./569", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1707 ./strace-static-x86_64: Process 6734 attached [pid 6734] set_robust_list(0x555556a426a0, 24) = 0 [pid 6734] chdir("./569") = 0 [pid 6734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6734] setpgid(0, 0) = 0 [pid 6734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6734] write(3, "1000", 4) = 4 [pid 6734] close(3) = 0 [pid 6734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6734] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6734] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6734] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6735 attached => {parent_tid=[1708]}, 88) = 1708 [pid 6735] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6735] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6735] rt_sigprocmask(SIG_SETMASK, [], [pid 6734] rt_sigprocmask(SIG_SETMASK, [], [pid 6735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6734] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6735] <... futex resumed>) = 0 [pid 6734] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6735] memfd_create("syzkaller", 0) = 3 [pid 6735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6735] munmap(0x7f15b9a45000, 524288) = 0 [pid 6735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6735] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6735] close(3) = 0 [pid 6735] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6735] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6735] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6735] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6735] ioctl(4, LOOP_CLR_FD) = 0 [pid 6735] close(4) = 0 [pid 6735] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6734] <... futex resumed>) = 0 [pid 6734] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6734] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6734] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1709]}, 88) = 1709 [pid 6734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6734] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6735] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6736 attached [pid 6736] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6735] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6736] <... rseq resumed>) = 0 [pid 6736] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6736] rt_sigprocmask(SIG_SETMASK, [], [pid 6735] <... mknodat resumed>) = 0 [pid 6735] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6735] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6736] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6736] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6736] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6736] chdir(".") = 0 [pid 6736] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6734] <... futex resumed>) = 0 [pid 6736] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6734] close(3) = 0 [pid 6734] close(4) = 0 [pid 6734] close(5) = -1 EBADF (Bad file descriptor) [pid 6734] close(6) = -1 EBADF (Bad file descriptor) [pid 6734] close(7) = -1 EBADF (Bad file descriptor) [pid 6734] close(8) = -1 EBADF (Bad file descriptor) [pid 6734] close(9) = -1 EBADF (Bad file descriptor) [pid 6734] close(10) = -1 EBADF (Bad file descriptor) [pid 6734] close(11) = -1 EBADF (Bad file descriptor) [pid 6734] close(12) = -1 EBADF (Bad file descriptor) [pid 6734] close(13) = -1 EBADF (Bad file descriptor) [pid 6734] close(14) = -1 EBADF (Bad file descriptor) [pid 6734] close(15) = -1 EBADF (Bad file descriptor) [pid 6734] close(16) = -1 EBADF (Bad file descriptor) [pid 6734] close(17) = -1 EBADF (Bad file descriptor) [pid 6734] close(18) = -1 EBADF (Bad file descriptor) [pid 6734] close(19) = -1 EBADF (Bad file descriptor) [pid 6734] close(20) = -1 EBADF (Bad file descriptor) [pid 6734] close(21) = -1 EBADF (Bad file descriptor) [pid 6734] close(22) = -1 EBADF (Bad file descriptor) [pid 6734] close(23) = -1 EBADF (Bad file descriptor) [pid 6734] close(24) = -1 EBADF (Bad file descriptor) [pid 6734] close(25) = -1 EBADF (Bad file descriptor) [pid 6734] close(26) = -1 EBADF (Bad file descriptor) [pid 6734] close(27) = -1 EBADF (Bad file descriptor) [pid 6734] close(28) = -1 EBADF (Bad file descriptor) [pid 6734] close(29) = -1 EBADF (Bad file descriptor) [pid 6734] exit_group(0 [pid 6736] <... futex resumed>) = ? [pid 6735] <... futex resumed>) = ? [pid 6734] <... exit_group resumed>) = ? [pid 6736] +++ exited with 0 +++ [pid 6735] +++ exited with 0 +++ [pid 6734] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1707, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./569", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./569", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./569/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./569/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./569/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./569") = 0 [pid 5019] mkdir("./570", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 85.705294][ T6735] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1710 ./strace-static-x86_64: Process 6737 attached [pid 6737] set_robust_list(0x555556a426a0, 24) = 0 [pid 6737] chdir("./570") = 0 [pid 6737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6737] setpgid(0, 0) = 0 [pid 6737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6737] write(3, "1000", 4) = 4 [pid 6737] close(3) = 0 [pid 6737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6737] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6737] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6737] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1711]}, 88) = 1711 [pid 6737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6737] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6737] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6738 attached [pid 6738] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6738] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6738] memfd_create("syzkaller", 0) = 3 [pid 6738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6738] munmap(0x7f15b9a45000, 524288) = 0 [pid 6738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6738] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6738] close(3) = 0 [pid 6738] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6738] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6738] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6738] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6738] ioctl(4, LOOP_CLR_FD) = 0 [pid 6738] close(4) = 0 [pid 6738] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6737] <... futex resumed>) = 0 [pid 6737] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6738] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6737] <... futex resumed>) = 0 [pid 6737] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6737] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1712]}, 88) = 1712 [pid 6737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6737] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6737] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6738] <... mknodat resumed>) = 0 ./strace-static-x86_64: Process 6739 attached [pid 6738] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6739] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6738] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6739] <... rseq resumed>) = 0 [pid 6739] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6739] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6739] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6739] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6739] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6739] chdir(".") = 0 [pid 6739] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6737] <... futex resumed>) = 0 [pid 6737] close(3 [pid 6739] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6737] <... close resumed>) = 0 [pid 6737] close(4) = 0 [pid 6737] close(5) = -1 EBADF (Bad file descriptor) [pid 6737] close(6) = -1 EBADF (Bad file descriptor) [pid 6737] close(7) = -1 EBADF (Bad file descriptor) [pid 6737] close(8) = -1 EBADF (Bad file descriptor) [pid 6737] close(9) = -1 EBADF (Bad file descriptor) [pid 6737] close(10) = -1 EBADF (Bad file descriptor) [pid 6737] close(11) = -1 EBADF (Bad file descriptor) [pid 6737] close(12) = -1 EBADF (Bad file descriptor) [pid 6737] close(13) = -1 EBADF (Bad file descriptor) [pid 6737] close(14) = -1 EBADF (Bad file descriptor) [pid 6737] close(15) = -1 EBADF (Bad file descriptor) [pid 6737] close(16) = -1 EBADF (Bad file descriptor) [pid 6737] close(17) = -1 EBADF (Bad file descriptor) [pid 6737] close(18) = -1 EBADF (Bad file descriptor) [pid 6737] close(19) = -1 EBADF (Bad file descriptor) [pid 6737] close(20) = -1 EBADF (Bad file descriptor) [pid 6737] close(21) = -1 EBADF (Bad file descriptor) [pid 6737] close(22) = -1 EBADF (Bad file descriptor) [pid 6737] close(23) = -1 EBADF (Bad file descriptor) [pid 6737] close(24) = -1 EBADF (Bad file descriptor) [pid 6737] close(25) = -1 EBADF (Bad file descriptor) [pid 6737] close(26) = -1 EBADF (Bad file descriptor) [pid 6737] close(27) = -1 EBADF (Bad file descriptor) [pid 6737] close(28) = -1 EBADF (Bad file descriptor) [pid 6737] close(29) = -1 EBADF (Bad file descriptor) [pid 6737] exit_group(0 [pid 6738] <... futex resumed>) = ? [pid 6737] <... exit_group resumed>) = ? [pid 6739] <... futex resumed>) = ? [pid 6738] +++ exited with 0 +++ [pid 6739] +++ exited with 0 +++ [pid 6737] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1710, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./570", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./570", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./570/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./570/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./570/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./570") = 0 [pid 5019] mkdir("./571", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1713 ./strace-static-x86_64: Process 6740 attached [pid 6740] set_robust_list(0x555556a426a0, 24) = 0 [pid 6740] chdir("./571") = 0 [pid 6740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6740] setpgid(0, 0) = 0 [ 85.777028][ T6738] loop0: detected capacity change from 0 to 1024 [pid 6740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6740] write(3, "1000", 4) = 4 [pid 6740] close(3) = 0 [pid 6740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6740] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6740] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6740] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1714]}, 88) = 1714 ./strace-static-x86_64: Process 6741 attached [pid 6741] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6741] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6741] rt_sigprocmask(SIG_SETMASK, [], [pid 6740] rt_sigprocmask(SIG_SETMASK, [], [pid 6741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6741] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6740] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6741] <... futex resumed>) = 0 [pid 6740] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6741] memfd_create("syzkaller", 0) = 3 [pid 6741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6741] munmap(0x7f15b9a45000, 524288) = 0 [pid 6741] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6741] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6741] close(3) = 0 [pid 6741] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6741] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6741] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6741] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6741] ioctl(4, LOOP_CLR_FD) = 0 [pid 6741] close(4) = 0 [pid 6741] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] <... futex resumed>) = 0 [pid 6740] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6740] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6740] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1715]}, 88) = 1715 [pid 6740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6740] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6740] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6741] <... futex resumed>) = 1 [pid 6741] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6742 attached [pid 6742] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6742] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6741] <... mknodat resumed>) = 0 [pid 6741] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6741] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6742] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6742] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6742] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6742] chdir(".") = 0 [pid 6742] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6740] <... futex resumed>) = 0 [pid 6742] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6740] close(3) = 0 [pid 6740] close(4) = 0 [pid 6740] close(5) = -1 EBADF (Bad file descriptor) [pid 6740] close(6) = -1 EBADF (Bad file descriptor) [pid 6740] close(7) = -1 EBADF (Bad file descriptor) [pid 6740] close(8) = -1 EBADF (Bad file descriptor) [pid 6740] close(9) = -1 EBADF (Bad file descriptor) [pid 6740] close(10) = -1 EBADF (Bad file descriptor) [pid 6740] close(11) = -1 EBADF (Bad file descriptor) [pid 6740] close(12) = -1 EBADF (Bad file descriptor) [pid 6740] close(13) = -1 EBADF (Bad file descriptor) [pid 6740] close(14) = -1 EBADF (Bad file descriptor) [pid 6740] close(15) = -1 EBADF (Bad file descriptor) [pid 6740] close(16) = -1 EBADF (Bad file descriptor) [pid 6740] close(17) = -1 EBADF (Bad file descriptor) [pid 6740] close(18) = -1 EBADF (Bad file descriptor) [pid 6740] close(19) = -1 EBADF (Bad file descriptor) [pid 6740] close(20) = -1 EBADF (Bad file descriptor) [pid 6740] close(21) = -1 EBADF (Bad file descriptor) [pid 6740] close(22) = -1 EBADF (Bad file descriptor) [pid 6740] close(23) = -1 EBADF (Bad file descriptor) [pid 6740] close(24) = -1 EBADF (Bad file descriptor) [pid 6740] close(25) = -1 EBADF (Bad file descriptor) [pid 6740] close(26) = -1 EBADF (Bad file descriptor) [pid 6740] close(27) = -1 EBADF (Bad file descriptor) [pid 6740] close(28) = -1 EBADF (Bad file descriptor) [pid 6740] close(29) = -1 EBADF (Bad file descriptor) [pid 6740] exit_group(0) = ? [pid 6741] <... futex resumed>) = ? [pid 6742] <... futex resumed>) = ? [pid 6741] +++ exited with 0 +++ [pid 6742] +++ exited with 0 +++ [pid 6740] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1713, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./571", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./571", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./571/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./571/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./571/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./571") = 0 [pid 5019] mkdir("./572", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 85.855363][ T6741] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1716 ./strace-static-x86_64: Process 6743 attached [pid 6743] set_robust_list(0x555556a426a0, 24) = 0 [pid 6743] chdir("./572") = 0 [pid 6743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6743] setpgid(0, 0) = 0 [pid 6743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6743] write(3, "1000", 4) = 4 [pid 6743] close(3) = 0 [pid 6743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6743] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6743] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6743] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6743] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1717]}, 88) = 1717 [pid 6743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6743] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6743] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6744 attached [pid 6744] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6744] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6744] memfd_create("syzkaller", 0) = 3 [pid 6744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6744] munmap(0x7f15b9a45000, 524288) = 0 [pid 6744] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6744] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6744] close(3) = 0 [pid 6744] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6744] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6744] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6744] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6744] ioctl(4, LOOP_CLR_FD) = 0 [pid 6744] close(4) = 0 [pid 6744] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6743] <... futex resumed>) = 0 [pid 6744] <... futex resumed>) = 1 [pid 6743] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6743] <... futex resumed>) = 0 [pid 6743] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6743] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6743] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1718]}, 88) = 1718 [pid 6743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6743] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6743] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6744] <... mknodat resumed>) = 0 [pid 6744] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6745 attached [pid 6745] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6745] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6745] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6745] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6745] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6745] chdir(".") = 0 [pid 6745] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6743] <... futex resumed>) = 0 [pid 6743] close(3) = 0 [pid 6743] close(4) = 0 [pid 6743] close(5) = -1 EBADF (Bad file descriptor) [pid 6743] close(6) = -1 EBADF (Bad file descriptor) [pid 6743] close(7) = -1 EBADF (Bad file descriptor) [pid 6743] close(8) = -1 EBADF (Bad file descriptor) [pid 6743] close(9) = -1 EBADF (Bad file descriptor) [pid 6743] close(10) = -1 EBADF (Bad file descriptor) [pid 6743] close(11) = -1 EBADF (Bad file descriptor) [pid 6743] close(12) = -1 EBADF (Bad file descriptor) [pid 6743] close(13) = -1 EBADF (Bad file descriptor) [pid 6743] close(14) = -1 EBADF (Bad file descriptor) [pid 6743] close(15 [pid 6745] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6743] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6743] close(16) = -1 EBADF (Bad file descriptor) [pid 6743] close(17) = -1 EBADF (Bad file descriptor) [pid 6743] close(18) = -1 EBADF (Bad file descriptor) [pid 6743] close(19) = -1 EBADF (Bad file descriptor) [pid 6743] close(20) = -1 EBADF (Bad file descriptor) [pid 6743] close(21) = -1 EBADF (Bad file descriptor) [pid 6743] close(22) = -1 EBADF (Bad file descriptor) [pid 6743] close(23) = -1 EBADF (Bad file descriptor) [pid 6743] close(24) = -1 EBADF (Bad file descriptor) [pid 6743] close(25) = -1 EBADF (Bad file descriptor) [pid 6743] close(26) = -1 EBADF (Bad file descriptor) [pid 6743] close(27) = -1 EBADF (Bad file descriptor) [pid 6743] close(28) = -1 EBADF (Bad file descriptor) [pid 6743] close(29) = -1 EBADF (Bad file descriptor) [pid 6743] exit_group(0) = ? [pid 6745] <... futex resumed>) = ? [pid 6744] <... futex resumed>) = ? [pid 6745] +++ exited with 0 +++ [pid 6744] +++ exited with 0 +++ [pid 6743] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1716, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./572", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./572", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./572/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./572/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./572/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./572") = 0 [pid 5019] mkdir("./573", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1719 ./strace-static-x86_64: Process 6746 attached [pid 6746] set_robust_list(0x555556a426a0, 24) = 0 [pid 6746] chdir("./573") = 0 [pid 6746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6746] setpgid(0, 0) = 0 [pid 6746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6746] write(3, "1000", 4) = 4 [pid 6746] close(3) = 0 [pid 6746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6746] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6746] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1720]}, 88) = 1720 [pid 6746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6746] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6747 attached [pid 6747] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6747] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6747] memfd_create("syzkaller", 0) = 3 [pid 6747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 85.925821][ T6744] loop0: detected capacity change from 0 to 1024 [pid 6747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6747] munmap(0x7f15b9a45000, 524288) = 0 [pid 6747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6747] close(3) = 0 [pid 6747] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6747] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6747] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6747] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6747] ioctl(4, LOOP_CLR_FD) = 0 [pid 6747] close(4) = 0 [pid 6747] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6746] <... futex resumed>) = 0 [pid 6746] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6746] <... futex resumed>) = 0 [pid 6746] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6746] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1721]}, 88) = 1721 [pid 6746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6746] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6747] <... mknodat resumed>) = 0 [pid 6747] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6747] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6748 attached [pid 6748] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6748] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6748] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6748] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6748] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6748] chdir(".") = 0 [pid 6748] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6746] <... futex resumed>) = 0 [pid 6748] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6746] close(3) = 0 [pid 6746] close(4) = 0 [pid 6746] close(5) = -1 EBADF (Bad file descriptor) [pid 6746] close(6) = -1 EBADF (Bad file descriptor) [pid 6746] close(7) = -1 EBADF (Bad file descriptor) [pid 6746] close(8) = -1 EBADF (Bad file descriptor) [pid 6746] close(9) = -1 EBADF (Bad file descriptor) [pid 6746] close(10) = -1 EBADF (Bad file descriptor) [pid 6746] close(11) = -1 EBADF (Bad file descriptor) [pid 6746] close(12) = -1 EBADF (Bad file descriptor) [pid 6746] close(13) = -1 EBADF (Bad file descriptor) [pid 6746] close(14) = -1 EBADF (Bad file descriptor) [pid 6746] close(15) = -1 EBADF (Bad file descriptor) [pid 6746] close(16) = -1 EBADF (Bad file descriptor) [pid 6746] close(17) = -1 EBADF (Bad file descriptor) [pid 6746] close(18) = -1 EBADF (Bad file descriptor) [pid 6746] close(19) = -1 EBADF (Bad file descriptor) [pid 6746] close(20) = -1 EBADF (Bad file descriptor) [pid 6746] close(21) = -1 EBADF (Bad file descriptor) [pid 6746] close(22) = -1 EBADF (Bad file descriptor) [pid 6746] close(23) = -1 EBADF (Bad file descriptor) [pid 6746] close(24) = -1 EBADF (Bad file descriptor) [pid 6746] close(25) = -1 EBADF (Bad file descriptor) [pid 6746] close(26) = -1 EBADF (Bad file descriptor) [pid 6746] close(27) = -1 EBADF (Bad file descriptor) [pid 6746] close(28) = -1 EBADF (Bad file descriptor) [pid 6746] close(29) = -1 EBADF (Bad file descriptor) [pid 6746] exit_group(0 [pid 6747] <... futex resumed>) = ? [pid 6746] <... exit_group resumed>) = ? [pid 6747] +++ exited with 0 +++ [pid 6748] <... futex resumed>) = ? [pid 6748] +++ exited with 0 +++ [pid 6746] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1719, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./573", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./573", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./573/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./573/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./573/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./573") = 0 [pid 5019] mkdir("./574", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1722 ./strace-static-x86_64: Process 6749 attached [ 85.992549][ T6747] loop0: detected capacity change from 0 to 1024 [pid 6749] set_robust_list(0x555556a426a0, 24) = 0 [pid 6749] chdir("./574") = 0 [pid 6749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6749] setpgid(0, 0) = 0 [pid 6749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6749] write(3, "1000", 4) = 4 [pid 6749] close(3) = 0 [pid 6749] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6749] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6749] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6749] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6750 attached [pid 6750] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6750] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6750] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] <... clone3 resumed> => {parent_tid=[1723]}, 88) = 1723 [pid 6749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6749] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6750] <... futex resumed>) = 0 [pid 6750] memfd_create("syzkaller", 0 [pid 6749] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6750] <... memfd_create resumed>) = 3 [pid 6750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6750] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6750] munmap(0x7f15b9a45000, 524288) = 0 [pid 6750] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6750] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6750] close(3) = 0 [pid 6750] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6750] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6750] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6750] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6750] ioctl(4, LOOP_CLR_FD) = 0 [pid 6750] close(4) = 0 [pid 6750] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6749] <... futex resumed>) = 0 [pid 6749] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6749] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6750] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6749] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6751 attached => {parent_tid=[1724]}, 88) = 1724 [pid 6751] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6751] set_robust_list(0x7f15b9ac49a0, 24 [pid 6749] rt_sigprocmask(SIG_SETMASK, [], [pid 6750] <... mknodat resumed>) = 0 [pid 6750] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6750] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6751] <... set_robust_list resumed>) = 0 [pid 6751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6751] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6749] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6749] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6751] <... futex resumed>) = 0 [pid 6751] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6751] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6751] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6751] chdir(".") = 0 [pid 6751] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... futex resumed>) = 0 [pid 6751] <... futex resumed>) = 1 [pid 6749] close(3) = 0 [pid 6749] close(4) = 0 [pid 6749] close(5) = -1 EBADF (Bad file descriptor) [pid 6749] close(6) = -1 EBADF (Bad file descriptor) [pid 6749] close(7) = -1 EBADF (Bad file descriptor) [pid 6749] close(8) = -1 EBADF (Bad file descriptor) [pid 6749] close(9) = -1 EBADF (Bad file descriptor) [pid 6749] close(10) = -1 EBADF (Bad file descriptor) [pid 6749] close(11) = -1 EBADF (Bad file descriptor) [pid 6749] close(12) = -1 EBADF (Bad file descriptor) [pid 6749] close(13) = -1 EBADF (Bad file descriptor) [pid 6749] close(14) = -1 EBADF (Bad file descriptor) [pid 6749] close(15) = -1 EBADF (Bad file descriptor) [pid 6749] close(16) = -1 EBADF (Bad file descriptor) [pid 6749] close(17) = -1 EBADF (Bad file descriptor) [pid 6749] close(18) = -1 EBADF (Bad file descriptor) [pid 6751] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6749] close(19) = -1 EBADF (Bad file descriptor) [pid 6749] close(20) = -1 EBADF (Bad file descriptor) [pid 6749] close(21) = -1 EBADF (Bad file descriptor) [pid 6749] close(22) = -1 EBADF (Bad file descriptor) [pid 6749] close(23) = -1 EBADF (Bad file descriptor) [pid 6749] close(24) = -1 EBADF (Bad file descriptor) [pid 6749] close(25) = -1 EBADF (Bad file descriptor) [pid 6749] close(26) = -1 EBADF (Bad file descriptor) [pid 6749] close(27) = -1 EBADF (Bad file descriptor) [pid 6749] close(28) = -1 EBADF (Bad file descriptor) [pid 6749] close(29) = -1 EBADF (Bad file descriptor) [pid 6749] exit_group(0 [pid 6750] <... futex resumed>) = ? [pid 6749] <... exit_group resumed>) = ? [pid 6751] <... futex resumed>) = ? [pid 6750] +++ exited with 0 +++ [pid 6751] +++ exited with 0 +++ [pid 6749] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1722, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./574", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./574", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./574/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./574/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 86.068907][ T6750] loop0: detected capacity change from 0 to 1024 [pid 5019] unlink("./574/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./574") = 0 [pid 5019] mkdir("./575", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1725 ./strace-static-x86_64: Process 6752 attached [pid 6752] set_robust_list(0x555556a426a0, 24) = 0 [pid 6752] chdir("./575") = 0 [pid 6752] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6752] setpgid(0, 0) = 0 [pid 6752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6752] write(3, "1000", 4) = 4 [pid 6752] close(3) = 0 [pid 6752] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6752] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6752] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6752] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6752] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6753 attached [pid 6753] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6753] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6753] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6752] <... clone3 resumed> => {parent_tid=[1726]}, 88) = 1726 [pid 6752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6752] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6753] <... futex resumed>) = 0 [pid 6752] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6753] memfd_create("syzkaller", 0) = 3 [pid 6753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6753] munmap(0x7f15b9a45000, 524288) = 0 [pid 6753] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6753] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6753] close(3) = 0 [pid 6753] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6753] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6753] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6753] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6753] ioctl(4, LOOP_CLR_FD) = 0 [pid 6753] close(4) = 0 [pid 6753] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = 0 [pid 6752] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6752] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6752] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6754 attached => {parent_tid=[1727]}, 88) = 1727 [pid 6754] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6752] rt_sigprocmask(SIG_SETMASK, [], [pid 6754] <... rseq resumed>) = 0 [pid 6752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] set_robust_list(0x7f15b9ac49a0, 24 [pid 6752] <... futex resumed>) = 0 [pid 6754] <... set_robust_list resumed>) = 0 [pid 6754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6754] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6754] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6754] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6754] chdir(".") = 0 [pid 6754] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6752] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6753] <... futex resumed>) = 1 [pid 6753] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6753] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] close(3) = 0 [pid 6752] close(4) = 0 [pid 6752] close(5) = -1 EBADF (Bad file descriptor) [pid 6752] close(6) = -1 EBADF (Bad file descriptor) [pid 6752] close(7) = -1 EBADF (Bad file descriptor) [pid 6752] close(8) = -1 EBADF (Bad file descriptor) [pid 6752] close(9) = -1 EBADF (Bad file descriptor) [pid 6752] close(10) = -1 EBADF (Bad file descriptor) [pid 6752] close(11) = -1 EBADF (Bad file descriptor) [pid 6752] close(12) = -1 EBADF (Bad file descriptor) [pid 6752] close(13) = -1 EBADF (Bad file descriptor) [pid 6752] close(14) = -1 EBADF (Bad file descriptor) [pid 6752] close(15) = -1 EBADF (Bad file descriptor) [pid 6752] close(16) = -1 EBADF (Bad file descriptor) [pid 6752] close(17) = -1 EBADF (Bad file descriptor) [pid 6752] close(18) = -1 EBADF (Bad file descriptor) [pid 6752] close(19) = -1 EBADF (Bad file descriptor) [pid 6752] close(20) = -1 EBADF (Bad file descriptor) [pid 6752] close(21) = -1 EBADF (Bad file descriptor) [pid 6752] close(22) = -1 EBADF (Bad file descriptor) [pid 6752] close(23) = -1 EBADF (Bad file descriptor) [pid 6752] close(24) = -1 EBADF (Bad file descriptor) [pid 6752] close(25) = -1 EBADF (Bad file descriptor) [pid 6752] close(26) = -1 EBADF (Bad file descriptor) [pid 6752] close(27) = -1 EBADF (Bad file descriptor) [pid 6752] close(28) = -1 EBADF (Bad file descriptor) [pid 6752] close(29) = -1 EBADF (Bad file descriptor) [pid 6752] exit_group(0) = ? [pid 6753] <... futex resumed>) = ? [pid 6754] <... futex resumed>) = ? [pid 6753] +++ exited with 0 +++ [pid 6754] +++ exited with 0 +++ [pid 6752] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1725, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./575", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./575", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./575/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./575/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./575/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./575") = 0 [pid 5019] mkdir("./576", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1728 ./strace-static-x86_64: Process 6755 attached [pid 6755] set_robust_list(0x555556a426a0, 24) = 0 [pid 6755] chdir("./576") = 0 [pid 6755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6755] setpgid(0, 0) = 0 [pid 6755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 86.159590][ T6753] loop0: detected capacity change from 0 to 1024 [pid 6755] write(3, "1000", 4) = 4 [pid 6755] close(3) = 0 [pid 6755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6755] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6755] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6755] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6755] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6755] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1729]}, 88) = 1729 [pid 6755] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6756 attached [pid 6756] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6756] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6756] rt_sigprocmask(SIG_SETMASK, [], [pid 6755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6756] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6755] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6756] <... futex resumed>) = 0 [pid 6755] <... futex resumed>) = 1 [pid 6755] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6756] memfd_create("syzkaller", 0) = 3 [pid 6756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6756] munmap(0x7f15b9a45000, 524288) = 0 [pid 6756] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6756] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6756] close(3) = 0 [pid 6756] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6756] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6756] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6756] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6756] ioctl(4, LOOP_CLR_FD) = 0 [pid 6756] close(4) = 0 [pid 6756] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6755] <... futex resumed>) = 0 [pid 6755] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6755] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6755] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6755] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6757 attached [pid 6757] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6755] <... clone3 resumed> => {parent_tid=[1730]}, 88) = 1730 [pid 6755] rt_sigprocmask(SIG_SETMASK, [], [pid 6757] <... rseq resumed>) = 0 [pid 6755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6757] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6757] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6755] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6756] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6755] <... futex resumed>) = 1 [pid 6757] <... futex resumed>) = 0 [pid 6755] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6757] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6757] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6756] <... mknodat resumed>) = 0 [pid 6756] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6756] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6757] <... mount resumed>) = 0 [pid 6757] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6757] chdir(".") = 0 [pid 6757] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6755] <... futex resumed>) = 0 [pid 6757] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6755] close(3) = 0 [pid 6755] close(4) = 0 [pid 6755] close(5) = -1 EBADF (Bad file descriptor) [pid 6755] close(6) = -1 EBADF (Bad file descriptor) [pid 6755] close(7) = -1 EBADF (Bad file descriptor) [pid 6755] close(8) = -1 EBADF (Bad file descriptor) [pid 6755] close(9) = -1 EBADF (Bad file descriptor) [pid 6755] close(10) = -1 EBADF (Bad file descriptor) [pid 6755] close(11) = -1 EBADF (Bad file descriptor) [pid 6755] close(12) = -1 EBADF (Bad file descriptor) [pid 6755] close(13) = -1 EBADF (Bad file descriptor) [pid 6755] close(14) = -1 EBADF (Bad file descriptor) [pid 6755] close(15) = -1 EBADF (Bad file descriptor) [pid 6755] close(16) = -1 EBADF (Bad file descriptor) [pid 6755] close(17) = -1 EBADF (Bad file descriptor) [pid 6755] close(18) = -1 EBADF (Bad file descriptor) [pid 6755] close(19) = -1 EBADF (Bad file descriptor) [pid 6755] close(20) = -1 EBADF (Bad file descriptor) [pid 6755] close(21) = -1 EBADF (Bad file descriptor) [pid 6755] close(22) = -1 EBADF (Bad file descriptor) [pid 6755] close(23) = -1 EBADF (Bad file descriptor) [pid 6755] close(24) = -1 EBADF (Bad file descriptor) [pid 6755] close(25) = -1 EBADF (Bad file descriptor) [pid 6755] close(26) = -1 EBADF (Bad file descriptor) [pid 6755] close(27) = -1 EBADF (Bad file descriptor) [pid 6755] close(28) = -1 EBADF (Bad file descriptor) [pid 6755] close(29) = -1 EBADF (Bad file descriptor) [pid 6755] exit_group(0) = ? [pid 6757] <... futex resumed>) = ? [pid 6757] +++ exited with 0 +++ [pid 6756] <... futex resumed>) = ? [pid 6756] +++ exited with 0 +++ [pid 6755] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1728, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./576", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./576", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./576/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./576/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./576/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./576") = 0 [pid 5019] mkdir("./577", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1731 [ 86.237301][ T6756] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6758 attached [pid 6758] set_robust_list(0x555556a426a0, 24) = 0 [pid 6758] chdir("./577") = 0 [pid 6758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6758] setpgid(0, 0) = 0 [pid 6758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6758] write(3, "1000", 4) = 4 [pid 6758] close(3) = 0 [pid 6758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6758] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6758] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6758] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6758] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6759 attached => {parent_tid=[1732]}, 88) = 1732 [pid 6759] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6759] <... rseq resumed>) = 0 [pid 6759] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6759] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6759] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6758] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6759] <... futex resumed>) = 0 [pid 6758] <... futex resumed>) = 1 [pid 6758] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6759] memfd_create("syzkaller", 0) = 3 [pid 6759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6759] munmap(0x7f15b9a45000, 524288) = 0 [pid 6759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6759] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6759] close(3) = 0 [pid 6759] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6759] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6759] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6759] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6759] ioctl(4, LOOP_CLR_FD) = 0 [pid 6759] close(4) = 0 [pid 6759] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... futex resumed>) = 0 [pid 6758] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6758] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6758] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1733]}, 88) = 1733 [pid 6758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6758] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6758] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6759] <... futex resumed>) = 1 [pid 6759] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6760 attached [pid 6760] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6760] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6760] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6760] mkdir(".", 0777 [pid 6759] <... mknodat resumed>) = 0 [pid 6760] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6760] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6759] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6760] <... mount resumed>) = 0 [pid 6760] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6760] chdir(".") = 0 [pid 6760] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6758] <... futex resumed>) = 0 [pid 6758] close(3) = 0 [pid 6760] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6758] close(4) = 0 [pid 6758] close(5) = -1 EBADF (Bad file descriptor) [pid 6758] close(6) = -1 EBADF (Bad file descriptor) [pid 6758] close(7) = -1 EBADF (Bad file descriptor) [pid 6758] close(8) = -1 EBADF (Bad file descriptor) [pid 6758] close(9) = -1 EBADF (Bad file descriptor) [pid 6758] close(10) = -1 EBADF (Bad file descriptor) [pid 6758] close(11) = -1 EBADF (Bad file descriptor) [pid 6758] close(12) = -1 EBADF (Bad file descriptor) [pid 6758] close(13) = -1 EBADF (Bad file descriptor) [pid 6758] close(14) = -1 EBADF (Bad file descriptor) [pid 6758] close(15) = -1 EBADF (Bad file descriptor) [pid 6758] close(16) = -1 EBADF (Bad file descriptor) [pid 6758] close(17) = -1 EBADF (Bad file descriptor) [pid 6758] close(18) = -1 EBADF (Bad file descriptor) [pid 6758] close(19) = -1 EBADF (Bad file descriptor) [pid 6758] close(20) = -1 EBADF (Bad file descriptor) [pid 6758] close(21) = -1 EBADF (Bad file descriptor) [pid 6758] close(22) = -1 EBADF (Bad file descriptor) [pid 6758] close(23) = -1 EBADF (Bad file descriptor) [pid 6758] close(24) = -1 EBADF (Bad file descriptor) [pid 6758] close(25) = -1 EBADF (Bad file descriptor) [pid 6758] close(26) = -1 EBADF (Bad file descriptor) [pid 6758] close(27) = -1 EBADF (Bad file descriptor) [pid 6758] close(28) = -1 EBADF (Bad file descriptor) [pid 6758] close(29) = -1 EBADF (Bad file descriptor) [pid 6758] exit_group(0 [pid 6760] <... futex resumed>) = ? [pid 6759] <... futex resumed>) = ? [pid 6758] <... exit_group resumed>) = ? [pid 6759] +++ exited with 0 +++ [pid 6760] +++ exited with 0 +++ [pid 6758] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1731, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./577", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./577", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./577/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./577/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./577/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./577") = 0 [pid 5019] mkdir("./578", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 86.315043][ T6759] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1734 ./strace-static-x86_64: Process 6761 attached [pid 6761] set_robust_list(0x555556a426a0, 24) = 0 [pid 6761] chdir("./578") = 0 [pid 6761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6761] setpgid(0, 0) = 0 [pid 6761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6761] write(3, "1000", 4) = 4 [pid 6761] close(3) = 0 [pid 6761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6761] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6761] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6761] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6762 attached [pid 6762] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6762] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6762] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6761] <... clone3 resumed> => {parent_tid=[1735]}, 88) = 1735 [pid 6761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6761] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6762] <... futex resumed>) = 0 [pid 6761] <... futex resumed>) = 1 [pid 6761] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6762] memfd_create("syzkaller", 0) = 3 [pid 6762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6762] munmap(0x7f15b9a45000, 524288) = 0 [pid 6762] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6762] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6762] close(3) = 0 [pid 6762] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6762] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6762] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6762] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6762] ioctl(4, LOOP_CLR_FD) = 0 [pid 6762] close(4) = 0 [pid 6762] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6761] <... futex resumed>) = 0 [pid 6761] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6761] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6762] <... futex resumed>) = 1 [pid 6761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6761] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1736]}, 88) = 1736 [pid 6762] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6761] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6763 attached [pid 6763] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6763] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6763] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6761] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6763] <... futex resumed>) = 0 [pid 6761] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6763] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6763] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6762] <... mknodat resumed>) = 0 [pid 6762] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6762] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6763] <... mount resumed>) = 0 [pid 6763] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6763] chdir(".") = 0 [pid 6763] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6761] <... futex resumed>) = 0 [pid 6761] close(3) = 0 [pid 6761] close(4 [pid 6763] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6761] <... close resumed>) = 0 [pid 6761] close(5) = -1 EBADF (Bad file descriptor) [pid 6761] close(6) = -1 EBADF (Bad file descriptor) [pid 6761] close(7) = -1 EBADF (Bad file descriptor) [pid 6761] close(8) = -1 EBADF (Bad file descriptor) [pid 6761] close(9) = -1 EBADF (Bad file descriptor) [pid 6761] close(10) = -1 EBADF (Bad file descriptor) [pid 6761] close(11) = -1 EBADF (Bad file descriptor) [pid 6761] close(12) = -1 EBADF (Bad file descriptor) [pid 6761] close(13) = -1 EBADF (Bad file descriptor) [pid 6761] close(14) = -1 EBADF (Bad file descriptor) [pid 6761] close(15) = -1 EBADF (Bad file descriptor) [pid 6761] close(16) = -1 EBADF (Bad file descriptor) [pid 6761] close(17) = -1 EBADF (Bad file descriptor) [pid 6761] close(18) = -1 EBADF (Bad file descriptor) [pid 6761] close(19) = -1 EBADF (Bad file descriptor) [pid 6761] close(20) = -1 EBADF (Bad file descriptor) [pid 6761] close(21) = -1 EBADF (Bad file descriptor) [pid 6761] close(22) = -1 EBADF (Bad file descriptor) [pid 6761] close(23) = -1 EBADF (Bad file descriptor) [pid 6761] close(24) = -1 EBADF (Bad file descriptor) [pid 6761] close(25) = -1 EBADF (Bad file descriptor) [pid 6761] close(26) = -1 EBADF (Bad file descriptor) [pid 6761] close(27) = -1 EBADF (Bad file descriptor) [pid 6761] close(28) = -1 EBADF (Bad file descriptor) [pid 6761] close(29) = -1 EBADF (Bad file descriptor) [pid 6761] exit_group(0 [pid 6763] <... futex resumed>) = ? [pid 6762] <... futex resumed>) = ? [pid 6761] <... exit_group resumed>) = ? [pid 6763] +++ exited with 0 +++ [pid 6762] +++ exited with 0 +++ [pid 6761] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1734, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./578", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./578", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./578/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./578/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./578/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./578/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./578") = 0 [pid 5019] mkdir("./579", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 86.398596][ T6762] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1737 ./strace-static-x86_64: Process 6764 attached [pid 6764] set_robust_list(0x555556a426a0, 24) = 0 [pid 6764] chdir("./579") = 0 [pid 6764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6764] setpgid(0, 0) = 0 [pid 6764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6764] write(3, "1000", 4) = 4 [pid 6764] close(3) = 0 [pid 6764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6764] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6764] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6764] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6765 attached [pid 6765] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6764] <... clone3 resumed> => {parent_tid=[1738]}, 88) = 1738 [pid 6765] <... rseq resumed>) = 0 [pid 6764] rt_sigprocmask(SIG_SETMASK, [], [pid 6765] set_robust_list(0x7f15c1e659a0, 24 [pid 6764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6765] <... set_robust_list resumed>) = 0 [pid 6764] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6765] rt_sigprocmask(SIG_SETMASK, [], [pid 6764] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6765] memfd_create("syzkaller", 0) = 3 [pid 6765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6765] munmap(0x7f15b9a45000, 524288) = 0 [pid 6765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6765] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6765] close(3) = 0 [pid 6765] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6765] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6765] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6765] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6765] ioctl(4, LOOP_CLR_FD) = 0 [pid 6765] close(4) = 0 [pid 6765] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6764] <... futex resumed>) = 0 [pid 6764] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6765] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6764] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6764] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6764] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6766 attached [pid 6765] <... mknodat resumed>) = 0 [pid 6764] <... clone3 resumed> => {parent_tid=[1739]}, 88) = 1739 [pid 6764] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6764] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6764] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6766] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6765] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6766] <... rseq resumed>) = 0 [pid 6765] <... futex resumed>) = 0 [pid 6765] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6766] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6766] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6766] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6766] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6766] chdir(".") = 0 [pid 6766] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6764] <... futex resumed>) = 0 [pid 6764] close(3) = 0 [pid 6764] close(4) = 0 [pid 6764] close(5) = -1 EBADF (Bad file descriptor) [pid 6764] close(6) = -1 EBADF (Bad file descriptor) [pid 6764] close(7) = -1 EBADF (Bad file descriptor) [pid 6764] close(8) = -1 EBADF (Bad file descriptor) [pid 6764] close(9) = -1 EBADF (Bad file descriptor) [pid 6764] close(10) = -1 EBADF (Bad file descriptor) [pid 6764] close(11) = -1 EBADF (Bad file descriptor) [pid 6764] close(12) = -1 EBADF (Bad file descriptor) [pid 6764] close(13) = -1 EBADF (Bad file descriptor) [pid 6764] close(14) = -1 EBADF (Bad file descriptor) [pid 6764] close(15) = -1 EBADF (Bad file descriptor) [pid 6764] close(16) = -1 EBADF (Bad file descriptor) [pid 6764] close(17) = -1 EBADF (Bad file descriptor) [pid 6764] close(18) = -1 EBADF (Bad file descriptor) [pid 6764] close(19) = -1 EBADF (Bad file descriptor) [pid 6764] close(20) = -1 EBADF (Bad file descriptor) [pid 6764] close(21) = -1 EBADF (Bad file descriptor) [pid 6764] close(22) = -1 EBADF (Bad file descriptor) [pid 6764] close(23) = -1 EBADF (Bad file descriptor) [pid 6764] close(24) = -1 EBADF (Bad file descriptor) [pid 6764] close(25) = -1 EBADF (Bad file descriptor) [pid 6764] close(26) = -1 EBADF (Bad file descriptor) [pid 6764] close(27) = -1 EBADF (Bad file descriptor) [pid 6764] close(28) = -1 EBADF (Bad file descriptor) [pid 6764] close(29) = -1 EBADF (Bad file descriptor) [pid 6764] exit_group(0) = ? [pid 6765] <... futex resumed>) = ? [pid 6765] +++ exited with 0 +++ [pid 6766] +++ exited with 0 +++ [pid 6764] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1737, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./579", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./579", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./579/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./579/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./579/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./579") = 0 [pid 5019] mkdir("./580", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 86.483708][ T6765] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6767 attached [pid 6767] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1740 [pid 6767] chdir("./580") = 0 [pid 6767] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6767] setpgid(0, 0) = 0 [pid 6767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6767] write(3, "1000", 4) = 4 [pid 6767] close(3) = 0 [pid 6767] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6767] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6767] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6767] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6767] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6767] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6768 attached => {parent_tid=[1741]}, 88) = 1741 [pid 6768] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6767] rt_sigprocmask(SIG_SETMASK, [], [pid 6768] <... rseq resumed>) = 0 [pid 6767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6768] set_robust_list(0x7f15c1e659a0, 24 [pid 6767] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] <... set_robust_list resumed>) = 0 [pid 6767] <... futex resumed>) = 0 [pid 6768] rt_sigprocmask(SIG_SETMASK, [], [pid 6767] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6768] memfd_create("syzkaller", 0) = 3 [pid 6768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6768] munmap(0x7f15b9a45000, 524288) = 0 [pid 6768] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6768] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6768] close(3) = 0 [pid 6768] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6768] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6768] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6768] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6768] ioctl(4, LOOP_CLR_FD) = 0 [pid 6768] close(4) = 0 [pid 6768] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6767] <... futex resumed>) = 0 [pid 6768] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6767] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6767] <... futex resumed>) = 0 [pid 6768] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6767] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6767] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6767] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6768] <... mknodat resumed>) = 0 [pid 6767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6768] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6769 attached ) = 0 [pid 6767] <... clone3 resumed> => {parent_tid=[1742]}, 88) = 1742 [pid 6769] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6768] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6767] rt_sigprocmask(SIG_SETMASK, [], [pid 6769] <... rseq resumed>) = 0 [pid 6769] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6769] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6767] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6767] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6769] <... futex resumed>) = 0 [pid 6769] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6769] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6769] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6769] chdir(".") = 0 [pid 6769] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] <... futex resumed>) = 0 [pid 6767] close(3) = 0 [pid 6767] close(4) = 0 [pid 6767] close(5) = -1 EBADF (Bad file descriptor) [pid 6767] close(6) = -1 EBADF (Bad file descriptor) [pid 6767] close(7) = -1 EBADF (Bad file descriptor) [pid 6767] close(8) = -1 EBADF (Bad file descriptor) [pid 6767] close(9) = -1 EBADF (Bad file descriptor) [pid 6767] close(10) = -1 EBADF (Bad file descriptor) [pid 6767] close(11) = -1 EBADF (Bad file descriptor) [pid 6767] close(12) = -1 EBADF (Bad file descriptor) [pid 6767] close(13) = -1 EBADF (Bad file descriptor) [pid 6767] close(14) = -1 EBADF (Bad file descriptor) [pid 6767] close(15) = -1 EBADF (Bad file descriptor) [pid 6767] close(16) = -1 EBADF (Bad file descriptor) [pid 6767] close(17) = -1 EBADF (Bad file descriptor) [pid 6767] close(18) = -1 EBADF (Bad file descriptor) [pid 6767] close(19) = -1 EBADF (Bad file descriptor) [pid 6767] close(20) = -1 EBADF (Bad file descriptor) [pid 6767] close(21) = -1 EBADF (Bad file descriptor) [pid 6767] close(22) = -1 EBADF (Bad file descriptor) [pid 6767] close(23) = -1 EBADF (Bad file descriptor) [pid 6767] close(24) = -1 EBADF (Bad file descriptor) [pid 6767] close(25) = -1 EBADF (Bad file descriptor) [pid 6767] close(26) = -1 EBADF (Bad file descriptor) [pid 6767] close(27) = -1 EBADF (Bad file descriptor) [pid 6767] close(28) = -1 EBADF (Bad file descriptor) [pid 6767] close(29) = -1 EBADF (Bad file descriptor) [pid 6767] exit_group(0 [pid 6769] <... futex resumed>) = ? [pid 6768] <... futex resumed>) = ? [pid 6767] <... exit_group resumed>) = ? [pid 6769] +++ exited with 0 +++ [pid 6768] +++ exited with 0 +++ [pid 6767] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1740, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./580", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./580", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./580/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./580/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./580/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./580") = 0 [pid 5019] mkdir("./581", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1743 ./strace-static-x86_64: Process 6770 attached [pid 6770] set_robust_list(0x555556a426a0, 24) = 0 [pid 6770] chdir("./581") = 0 [pid 6770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6770] setpgid(0, 0) = 0 [pid 6770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6770] write(3, "1000", 4) = 4 [pid 6770] close(3) = 0 [pid 6770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6770] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6770] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6770] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6770] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6770] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1744]}, 88) = 1744 [pid 6770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6770] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6770] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6771 attached [pid 6771] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6771] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6771] memfd_create("syzkaller", 0) = 3 [pid 6771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 86.564805][ T6768] loop0: detected capacity change from 0 to 1024 [pid 6771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6771] munmap(0x7f15b9a45000, 524288) = 0 [pid 6771] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6771] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6771] close(3) = 0 [pid 6771] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6771] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6771] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6771] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6771] ioctl(4, LOOP_CLR_FD) = 0 [pid 6771] close(4) = 0 [pid 6771] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6771] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6770] <... futex resumed>) = 0 [pid 6770] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6771] <... futex resumed>) = 0 [pid 6771] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6770] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6770] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6770] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6771] <... mknodat resumed>) = 0 [pid 6771] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6771] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6770] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6770] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1745]}, 88) = 1745 ./strace-static-x86_64: Process 6772 attached [pid 6772] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6772] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6772] rt_sigprocmask(SIG_SETMASK, [], [pid 6770] rt_sigprocmask(SIG_SETMASK, [], [pid 6772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6772] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6770] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6770] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6772] <... futex resumed>) = 0 [pid 6772] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6772] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6772] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6772] chdir(".") = 0 [pid 6772] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6770] <... futex resumed>) = 0 [pid 6772] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6770] close(3) = 0 [pid 6770] close(4) = 0 [pid 6770] close(5) = -1 EBADF (Bad file descriptor) [pid 6770] close(6) = -1 EBADF (Bad file descriptor) [pid 6770] close(7) = -1 EBADF (Bad file descriptor) [pid 6770] close(8) = -1 EBADF (Bad file descriptor) [pid 6770] close(9) = -1 EBADF (Bad file descriptor) [pid 6770] close(10) = -1 EBADF (Bad file descriptor) [pid 6770] close(11) = -1 EBADF (Bad file descriptor) [pid 6770] close(12) = -1 EBADF (Bad file descriptor) [pid 6770] close(13) = -1 EBADF (Bad file descriptor) [pid 6770] close(14) = -1 EBADF (Bad file descriptor) [pid 6770] close(15) = -1 EBADF (Bad file descriptor) [pid 6770] close(16) = -1 EBADF (Bad file descriptor) [pid 6770] close(17) = -1 EBADF (Bad file descriptor) [pid 6770] close(18) = -1 EBADF (Bad file descriptor) [pid 6770] close(19) = -1 EBADF (Bad file descriptor) [pid 6770] close(20) = -1 EBADF (Bad file descriptor) [pid 6770] close(21) = -1 EBADF (Bad file descriptor) [pid 6770] close(22) = -1 EBADF (Bad file descriptor) [pid 6770] close(23) = -1 EBADF (Bad file descriptor) [pid 6770] close(24) = -1 EBADF (Bad file descriptor) [pid 6770] close(25) = -1 EBADF (Bad file descriptor) [pid 6770] close(26) = -1 EBADF (Bad file descriptor) [pid 6770] close(27) = -1 EBADF (Bad file descriptor) [pid 6770] close(28) = -1 EBADF (Bad file descriptor) [pid 6770] close(29) = -1 EBADF (Bad file descriptor) [pid 6770] exit_group(0 [pid 6771] <... futex resumed>) = ? [pid 6770] <... exit_group resumed>) = ? [pid 6771] +++ exited with 0 +++ [pid 6772] <... futex resumed>) = ? [pid 6772] +++ exited with 0 +++ [pid 6770] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1743, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./581", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./581", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./581/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./581/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./581/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./581/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./581") = 0 [pid 5019] mkdir("./582", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1746 ./strace-static-x86_64: Process 6773 attached [pid 6773] set_robust_list(0x555556a426a0, 24) = 0 [pid 6773] chdir("./582") = 0 [pid 6773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6773] setpgid(0, 0) = 0 [pid 6773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6773] write(3, "1000", 4) = 4 [pid 6773] close(3) = 0 [pid 6773] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6773] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6773] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6773] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6773] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6773] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6774 attached [pid 6774] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6774] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6774] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6773] <... clone3 resumed> => {parent_tid=[1747]}, 88) = 1747 [pid 6773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6773] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6774] <... futex resumed>) = 0 [pid 6773] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6774] memfd_create("syzkaller", 0) = 3 [ 86.630060][ T6771] loop0: detected capacity change from 0 to 1024 [pid 6774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6774] munmap(0x7f15b9a45000, 524288) = 0 [pid 6774] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6774] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6774] close(3) = 0 [pid 6774] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6774] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6774] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6774] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6774] ioctl(4, LOOP_CLR_FD) = 0 [pid 6774] close(4) = 0 [pid 6774] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6773] <... futex resumed>) = 0 [pid 6773] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6773] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6773] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6773] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1748]}, 88) = 1748 [pid 6773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6773] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6773] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6775 attached [pid 6775] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6775] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6775] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6775] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6775] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 6774] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6775] <... openat resumed>) = 4 [pid 6775] chdir(".") = 0 [pid 6775] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6773] <... futex resumed>) = 0 [pid 6775] <... futex resumed>) = 1 [pid 6775] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6774] <... mknodat resumed>) = 0 [pid 6774] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6774] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6773] close(3) = 0 [pid 6773] close(4) = 0 [pid 6773] close(5) = -1 EBADF (Bad file descriptor) [pid 6773] close(6) = -1 EBADF (Bad file descriptor) [pid 6773] close(7) = -1 EBADF (Bad file descriptor) [pid 6773] close(8) = -1 EBADF (Bad file descriptor) [pid 6773] close(9) = -1 EBADF (Bad file descriptor) [pid 6773] close(10) = -1 EBADF (Bad file descriptor) [pid 6773] close(11) = -1 EBADF (Bad file descriptor) [pid 6773] close(12) = -1 EBADF (Bad file descriptor) [pid 6773] close(13) = -1 EBADF (Bad file descriptor) [pid 6773] close(14) = -1 EBADF (Bad file descriptor) [pid 6773] close(15) = -1 EBADF (Bad file descriptor) [pid 6773] close(16) = -1 EBADF (Bad file descriptor) [pid 6773] close(17) = -1 EBADF (Bad file descriptor) [pid 6773] close(18) = -1 EBADF (Bad file descriptor) [pid 6773] close(19) = -1 EBADF (Bad file descriptor) [pid 6773] close(20) = -1 EBADF (Bad file descriptor) [pid 6773] close(21) = -1 EBADF (Bad file descriptor) [pid 6773] close(22) = -1 EBADF (Bad file descriptor) [pid 6773] close(23) = -1 EBADF (Bad file descriptor) [pid 6773] close(24) = -1 EBADF (Bad file descriptor) [pid 6773] close(25) = -1 EBADF (Bad file descriptor) [pid 6773] close(26) = -1 EBADF (Bad file descriptor) [pid 6773] close(27) = -1 EBADF (Bad file descriptor) [pid 6773] close(28) = -1 EBADF (Bad file descriptor) [pid 6773] close(29) = -1 EBADF (Bad file descriptor) [pid 6773] exit_group(0) = ? [pid 6775] <... futex resumed>) = ? [pid 6775] +++ exited with 0 +++ [pid 6774] <... futex resumed>) = ? [pid 6774] +++ exited with 0 +++ [pid 6773] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1746, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./582", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./582", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./582/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./582/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./582/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./582") = 0 [pid 5019] mkdir("./583", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1749 ./strace-static-x86_64: Process 6776 attached [pid 6776] set_robust_list(0x555556a426a0, 24) = 0 [pid 6776] chdir("./583") = 0 [pid 6776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 86.697418][ T6774] loop0: detected capacity change from 0 to 1024 [pid 6776] setpgid(0, 0) = 0 [pid 6776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6776] write(3, "1000", 4) = 4 [pid 6776] close(3) = 0 [pid 6776] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6776] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6776] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6776] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6776] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6776] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1750]}, 88) = 1750 [pid 6776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6776] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6776] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6777 attached [pid 6777] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6777] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6777] memfd_create("syzkaller", 0) = 3 [pid 6777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6777] munmap(0x7f15b9a45000, 524288) = 0 [pid 6777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6777] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6777] close(3) = 0 [pid 6777] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6777] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6777] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6777] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6777] ioctl(4, LOOP_CLR_FD) = 0 [pid 6777] close(4) = 0 [pid 6777] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6776] <... futex resumed>) = 0 [pid 6776] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6776] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6776] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6776] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1751]}, 88) = 1751 [pid 6776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6776] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6776] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6777] <... futex resumed>) = 1 [pid 6777] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6778 attached [pid 6778] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6778] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6778] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6778] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6778] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6777] <... mknodat resumed>) = 0 [pid 6777] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6777] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6778] <... mount resumed>) = 0 [pid 6778] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6778] chdir(".") = 0 [pid 6778] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6776] <... futex resumed>) = 0 [pid 6776] close(3) = 0 [pid 6776] close(4) = 0 [pid 6776] close(5) = -1 EBADF (Bad file descriptor) [pid 6776] close(6) = -1 EBADF (Bad file descriptor) [pid 6776] close(7) = -1 EBADF (Bad file descriptor) [pid 6776] close(8) = -1 EBADF (Bad file descriptor) [pid 6776] close(9) = -1 EBADF (Bad file descriptor) [pid 6776] close(10) = -1 EBADF (Bad file descriptor) [pid 6776] close(11) = -1 EBADF (Bad file descriptor) [pid 6776] close(12) = -1 EBADF (Bad file descriptor) [pid 6776] close(13) = -1 EBADF (Bad file descriptor) [pid 6776] close(14) = -1 EBADF (Bad file descriptor) [pid 6776] close(15) = -1 EBADF (Bad file descriptor) [pid 6776] close(16) = -1 EBADF (Bad file descriptor) [pid 6776] close(17) = -1 EBADF (Bad file descriptor) [pid 6776] close(18) = -1 EBADF (Bad file descriptor) [pid 6776] close(19) = -1 EBADF (Bad file descriptor) [pid 6776] close(20) = -1 EBADF (Bad file descriptor) [pid 6776] close(21) = -1 EBADF (Bad file descriptor) [pid 6776] close(22) = -1 EBADF (Bad file descriptor) [pid 6776] close(23) = -1 EBADF (Bad file descriptor) [pid 6776] close(24) = -1 EBADF (Bad file descriptor) [pid 6776] close(25) = -1 EBADF (Bad file descriptor) [pid 6776] close(26) = -1 EBADF (Bad file descriptor) [pid 6776] close(27) = -1 EBADF (Bad file descriptor) [pid 6776] close(28) = -1 EBADF (Bad file descriptor) [pid 6776] close(29) = -1 EBADF (Bad file descriptor) [pid 6776] exit_group(0) = ? [pid 6777] <... futex resumed>) = ? [pid 6777] +++ exited with 0 +++ [pid 6778] <... futex resumed>) = ? [pid 6778] +++ exited with 0 +++ [pid 6776] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1749, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./583", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./583", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./583/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./583/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./583/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./583") = 0 [pid 5019] mkdir("./584", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1752 ./strace-static-x86_64: Process 6779 attached [pid 6779] set_robust_list(0x555556a426a0, 24) = 0 [pid 6779] chdir("./584") = 0 [pid 6779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6779] setpgid(0, 0) = 0 [pid 6779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6779] write(3, "1000", 4) = 4 [pid 6779] close(3) = 0 [pid 6779] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6779] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6779] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6779] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6779] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1753]}, 88) = 1753 [pid 6779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6779] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6780 attached [pid 6780] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6780] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6780] memfd_create("syzkaller", 0) = 3 [pid 6780] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 86.770242][ T6777] loop0: detected capacity change from 0 to 1024 [pid 6780] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6780] munmap(0x7f15b9a45000, 524288) = 0 [pid 6780] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6780] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6780] close(3) = 0 [pid 6780] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6780] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6780] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6780] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6780] ioctl(4, LOOP_CLR_FD) = 0 [pid 6780] close(4) = 0 [pid 6780] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6779] <... futex resumed>) = 0 [pid 6779] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6779] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6779] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1754]}, 88) = 1754 [pid 6779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6780] <... futex resumed>) = 1 [pid 6779] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6779] <... futex resumed>) = 0 [pid 6779] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6780] <... mknodat resumed>) = 0 [pid 6780] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6780] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6781 attached [pid 6781] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6781] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6781] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6781] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6781] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6781] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6781] chdir(".") = 0 [pid 6781] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6779] <... futex resumed>) = 0 [pid 6779] close(3) = 0 [pid 6779] close(4) = 0 [pid 6779] close(5) = -1 EBADF (Bad file descriptor) [pid 6779] close(6) = -1 EBADF (Bad file descriptor) [pid 6779] close(7) = -1 EBADF (Bad file descriptor) [pid 6779] close(8) = -1 EBADF (Bad file descriptor) [pid 6779] close(9) = -1 EBADF (Bad file descriptor) [pid 6779] close(10) = -1 EBADF (Bad file descriptor) [pid 6779] close(11) = -1 EBADF (Bad file descriptor) [pid 6779] close(12) = -1 EBADF (Bad file descriptor) [pid 6779] close(13) = -1 EBADF (Bad file descriptor) [pid 6779] close(14) = -1 EBADF (Bad file descriptor) [pid 6779] close(15) = -1 EBADF (Bad file descriptor) [pid 6779] close(16) = -1 EBADF (Bad file descriptor) [pid 6779] close(17) = -1 EBADF (Bad file descriptor) [pid 6779] close(18) = -1 EBADF (Bad file descriptor) [pid 6779] close(19) = -1 EBADF (Bad file descriptor) [pid 6779] close(20) = -1 EBADF (Bad file descriptor) [pid 6779] close(21) = -1 EBADF (Bad file descriptor) [pid 6779] close(22) = -1 EBADF (Bad file descriptor) [pid 6779] close(23) = -1 EBADF (Bad file descriptor) [pid 6779] close(24) = -1 EBADF (Bad file descriptor) [pid 6779] close(25) = -1 EBADF (Bad file descriptor) [pid 6779] close(26) = -1 EBADF (Bad file descriptor) [pid 6779] close(27) = -1 EBADF (Bad file descriptor) [pid 6779] close(28) = -1 EBADF (Bad file descriptor) [pid 6779] close(29) = -1 EBADF (Bad file descriptor) [pid 6779] exit_group(0 [pid 6780] <... futex resumed>) = ? [pid 6779] <... exit_group resumed>) = ? [pid 6780] +++ exited with 0 +++ [pid 6781] +++ exited with 0 +++ [pid 6779] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1752, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./584", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./584", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./584/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./584/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./584/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./584") = 0 [pid 5019] mkdir("./585", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1755 ./strace-static-x86_64: Process 6782 attached [pid 6782] set_robust_list(0x555556a426a0, 24) = 0 [pid 6782] chdir("./585") = 0 [pid 6782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6782] setpgid(0, 0) = 0 [pid 6782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6782] write(3, "1000", 4) = 4 [pid 6782] close(3) = 0 [pid 6782] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6782] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6782] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6782] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6783 attached [pid 6783] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6783] set_robust_list(0x7f15c1e659a0, 24 [pid 6782] <... clone3 resumed> => {parent_tid=[1756]}, 88) = 1756 [pid 6783] <... set_robust_list resumed>) = 0 [pid 6783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6783] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6782] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6783] <... futex resumed>) = 0 [pid 6782] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6783] memfd_create("syzkaller", 0) = 3 [pid 6783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 86.836312][ T6780] loop0: detected capacity change from 0 to 1024 [pid 6783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6783] munmap(0x7f15b9a45000, 524288) = 0 [pid 6783] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6783] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6783] close(3) = 0 [pid 6783] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6783] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6783] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6783] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6783] ioctl(4, LOOP_CLR_FD) = 0 [pid 6783] close(4) = 0 [pid 6783] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6782] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6782] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6782] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1757]}, 88) = 1757 ./strace-static-x86_64: Process 6784 attached [pid 6782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6782] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6782] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6783] <... futex resumed>) = 1 [pid 6783] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6784] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6784] set_robust_list(0x7f15b9ac49a0, 24 [pid 6783] <... mknodat resumed>) = 0 [pid 6784] <... set_robust_list resumed>) = 0 [pid 6783] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6783] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6784] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6784] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6784] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6784] chdir(".") = 0 [pid 6784] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 6782] close(3) = 0 [pid 6782] close(4) = 0 [pid 6782] close(5) = -1 EBADF (Bad file descriptor) [pid 6782] close(6) = -1 EBADF (Bad file descriptor) [pid 6782] close(7) = -1 EBADF (Bad file descriptor) [pid 6782] close(8) = -1 EBADF (Bad file descriptor) [pid 6782] close(9) = -1 EBADF (Bad file descriptor) [pid 6782] close(10) = -1 EBADF (Bad file descriptor) [pid 6782] close(11 [pid 6784] <... futex resumed>) = 1 [pid 6782] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6784] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] close(12) = -1 EBADF (Bad file descriptor) [pid 6782] close(13) = -1 EBADF (Bad file descriptor) [pid 6782] close(14) = -1 EBADF (Bad file descriptor) [pid 6782] close(15) = -1 EBADF (Bad file descriptor) [pid 6782] close(16) = -1 EBADF (Bad file descriptor) [pid 6782] close(17) = -1 EBADF (Bad file descriptor) [pid 6782] close(18) = -1 EBADF (Bad file descriptor) [pid 6782] close(19) = -1 EBADF (Bad file descriptor) [pid 6782] close(20) = -1 EBADF (Bad file descriptor) [pid 6782] close(21) = -1 EBADF (Bad file descriptor) [pid 6782] close(22) = -1 EBADF (Bad file descriptor) [pid 6782] close(23) = -1 EBADF (Bad file descriptor) [pid 6782] close(24) = -1 EBADF (Bad file descriptor) [pid 6782] close(25) = -1 EBADF (Bad file descriptor) [pid 6782] close(26) = -1 EBADF (Bad file descriptor) [pid 6782] close(27) = -1 EBADF (Bad file descriptor) [pid 6782] close(28) = -1 EBADF (Bad file descriptor) [pid 6782] close(29) = -1 EBADF (Bad file descriptor) [pid 6782] exit_group(0 [pid 6784] <... futex resumed>) = ? [pid 6783] <... futex resumed>) = ? [pid 6782] <... exit_group resumed>) = ? [pid 6784] +++ exited with 0 +++ [pid 6783] +++ exited with 0 +++ [pid 6782] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1755, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./585", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./585", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./585/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./585/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./585/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./585") = 0 [pid 5019] mkdir("./586", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1758 ./strace-static-x86_64: Process 6785 attached [pid 6785] set_robust_list(0x555556a426a0, 24) = 0 [pid 6785] chdir("./586") = 0 [ 86.902585][ T6783] loop0: detected capacity change from 0 to 1024 [pid 6785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6785] setpgid(0, 0) = 0 [pid 6785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6785] write(3, "1000", 4) = 4 [pid 6785] close(3) = 0 [pid 6785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6785] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6785] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6785] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6786 attached => {parent_tid=[1759]}, 88) = 1759 [pid 6786] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6786] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6786] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6785] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6785] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6786] memfd_create("syzkaller", 0) = 3 [pid 6786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6786] munmap(0x7f15b9a45000, 524288) = 0 [pid 6786] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6786] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6786] close(3) = 0 [pid 6786] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6786] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6786] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6786] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6786] ioctl(4, LOOP_CLR_FD) = 0 [pid 6786] close(4) = 0 [pid 6786] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6785] <... futex resumed>) = 0 [pid 6785] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6785] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6787 attached => {parent_tid=[1760]}, 88) = 1760 [pid 6785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6785] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6785] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6786] <... futex resumed>) = 1 [pid 6786] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6787] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6787] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6787] rt_sigprocmask(SIG_SETMASK, [], [pid 6786] <... mknodat resumed>) = 0 [pid 6787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6786] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6786] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6787] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6787] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6787] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6787] chdir(".") = 0 [pid 6787] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6785] <... futex resumed>) = 0 [pid 6785] close(3) = 0 [pid 6785] close(4) = 0 [pid 6785] close(5) = -1 EBADF (Bad file descriptor) [pid 6785] close(6) = -1 EBADF (Bad file descriptor) [pid 6785] close(7) = -1 EBADF (Bad file descriptor) [pid 6785] close(8) = -1 EBADF (Bad file descriptor) [pid 6785] close(9) = -1 EBADF (Bad file descriptor) [pid 6785] close(10) = -1 EBADF (Bad file descriptor) [pid 6785] close(11) = -1 EBADF (Bad file descriptor) [pid 6785] close(12) = -1 EBADF (Bad file descriptor) [pid 6785] close(13) = -1 EBADF (Bad file descriptor) [pid 6785] close(14) = -1 EBADF (Bad file descriptor) [pid 6785] close(15) = -1 EBADF (Bad file descriptor) [pid 6785] close(16) = -1 EBADF (Bad file descriptor) [pid 6785] close(17) = -1 EBADF (Bad file descriptor) [pid 6785] close(18) = -1 EBADF (Bad file descriptor) [pid 6785] close(19) = -1 EBADF (Bad file descriptor) [pid 6785] close(20) = -1 EBADF (Bad file descriptor) [pid 6785] close(21) = -1 EBADF (Bad file descriptor) [pid 6785] close(22) = -1 EBADF (Bad file descriptor) [pid 6785] close(23) = -1 EBADF (Bad file descriptor) [pid 6785] close(24 [pid 6787] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6785] close(25) = -1 EBADF (Bad file descriptor) [pid 6785] close(26) = -1 EBADF (Bad file descriptor) [pid 6785] close(27) = -1 EBADF (Bad file descriptor) [pid 6785] close(28) = -1 EBADF (Bad file descriptor) [pid 6785] close(29) = -1 EBADF (Bad file descriptor) [pid 6785] exit_group(0 [pid 6786] <... futex resumed>) = ? [pid 6785] <... exit_group resumed>) = ? [pid 6786] +++ exited with 0 +++ [pid 6787] <... futex resumed>) = ? [pid 6787] +++ exited with 0 +++ [pid 6785] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1758, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./586", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./586", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./586/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./586/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./586/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./586") = 0 [pid 5019] mkdir("./587", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 86.979509][ T6786] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1761 ./strace-static-x86_64: Process 6788 attached [pid 6788] set_robust_list(0x555556a426a0, 24) = 0 [pid 6788] chdir("./587") = 0 [pid 6788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6788] setpgid(0, 0) = 0 [pid 6788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6788] write(3, "1000", 4) = 4 [pid 6788] close(3) = 0 [pid 6788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6788] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6788] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6788] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1762]}, 88) = 1762 [pid 6788] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6789 attached [pid 6789] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6789] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6789] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6789] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6788] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6788] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6789] <... futex resumed>) = 0 [pid 6789] memfd_create("syzkaller", 0) = 3 [pid 6789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6789] munmap(0x7f15b9a45000, 524288) = 0 [pid 6789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6789] close(3) = 0 [pid 6789] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6789] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6789] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6789] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6789] ioctl(4, LOOP_CLR_FD) = 0 [pid 6789] close(4) = 0 [pid 6789] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] <... futex resumed>) = 0 [pid 6788] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6788] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6788] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6790 attached => {parent_tid=[1763]}, 88) = 1763 [pid 6788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6788] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6788] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6789] <... futex resumed>) = 1 [pid 6789] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6790] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6790] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6790] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6790] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6789] <... mknodat resumed>) = 0 [pid 6789] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6789] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6790] <... mount resumed>) = 0 [pid 6790] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6790] chdir(".") = 0 [pid 6790] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6788] <... futex resumed>) = 0 [pid 6788] close(3) = 0 [pid 6788] close(4) = 0 [pid 6788] close(5) = -1 EBADF (Bad file descriptor) [pid 6788] close(6) = -1 EBADF (Bad file descriptor) [pid 6788] close(7) = -1 EBADF (Bad file descriptor) [pid 6788] close(8) = -1 EBADF (Bad file descriptor) [pid 6788] close(9) = -1 EBADF (Bad file descriptor) [pid 6790] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6788] close(10) = -1 EBADF (Bad file descriptor) [pid 6788] close(11) = -1 EBADF (Bad file descriptor) [pid 6788] close(12) = -1 EBADF (Bad file descriptor) [pid 6788] close(13) = -1 EBADF (Bad file descriptor) [pid 6788] close(14) = -1 EBADF (Bad file descriptor) [pid 6788] close(15) = -1 EBADF (Bad file descriptor) [pid 6788] close(16) = -1 EBADF (Bad file descriptor) [pid 6788] close(17) = -1 EBADF (Bad file descriptor) [pid 6788] close(18) = -1 EBADF (Bad file descriptor) [pid 6788] close(19) = -1 EBADF (Bad file descriptor) [pid 6788] close(20) = -1 EBADF (Bad file descriptor) [pid 6788] close(21) = -1 EBADF (Bad file descriptor) [pid 6788] close(22) = -1 EBADF (Bad file descriptor) [pid 6788] close(23) = -1 EBADF (Bad file descriptor) [pid 6788] close(24) = -1 EBADF (Bad file descriptor) [pid 6788] close(25) = -1 EBADF (Bad file descriptor) [pid 6788] close(26) = -1 EBADF (Bad file descriptor) [pid 6788] close(27) = -1 EBADF (Bad file descriptor) [pid 6788] close(28) = -1 EBADF (Bad file descriptor) [pid 6788] close(29) = -1 EBADF (Bad file descriptor) [pid 6788] exit_group(0 [pid 6789] <... futex resumed>) = ? [pid 6788] <... exit_group resumed>) = ? [pid 6790] <... futex resumed>) = ? [pid 6789] +++ exited with 0 +++ [pid 6790] +++ exited with 0 +++ [pid 6788] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1761, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./587", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./587", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./587/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./587/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./587/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./587") = 0 [pid 5019] mkdir("./588", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 87.060366][ T6789] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1764 ./strace-static-x86_64: Process 6791 attached [pid 6791] set_robust_list(0x555556a426a0, 24) = 0 [pid 6791] chdir("./588") = 0 [pid 6791] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6791] setpgid(0, 0) = 0 [pid 6791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6791] write(3, "1000", 4) = 4 [pid 6791] close(3) = 0 [pid 6791] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6791] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6791] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6791] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6791] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6791] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1765]}, 88) = 1765 [pid 6791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6791] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6791] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6792 attached [pid 6792] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6792] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6792] memfd_create("syzkaller", 0) = 3 [pid 6792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6792] munmap(0x7f15b9a45000, 524288) = 0 [pid 6792] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6792] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6792] close(3) = 0 [pid 6792] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6792] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6792] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6792] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6792] ioctl(4, LOOP_CLR_FD) = 0 [pid 6792] close(4) = 0 [pid 6792] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6791] <... futex resumed>) = 0 [pid 6791] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6791] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6791] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6791] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1766]}, 88) = 1766 [pid 6791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6791] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6791] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6792] <... futex resumed>) = 1 [pid 6792] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6793 attached [pid 6793] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6793] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6792] <... mknodat resumed>) = 0 [pid 6793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6793] mkdir(".", 0777 [pid 6792] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6793] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6793] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6792] <... futex resumed>) = 0 [pid 6792] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6793] <... mount resumed>) = 0 [pid 6793] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6793] chdir(".") = 0 [pid 6793] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6791] <... futex resumed>) = 0 [pid 6791] close(3) = 0 [pid 6791] close(4) = 0 [pid 6793] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6791] close(5) = -1 EBADF (Bad file descriptor) [pid 6791] close(6) = -1 EBADF (Bad file descriptor) [pid 6791] close(7) = -1 EBADF (Bad file descriptor) [pid 6791] close(8) = -1 EBADF (Bad file descriptor) [pid 6791] close(9) = -1 EBADF (Bad file descriptor) [pid 6791] close(10) = -1 EBADF (Bad file descriptor) [pid 6791] close(11) = -1 EBADF (Bad file descriptor) [pid 6791] close(12) = -1 EBADF (Bad file descriptor) [pid 6791] close(13) = -1 EBADF (Bad file descriptor) [pid 6791] close(14) = -1 EBADF (Bad file descriptor) [pid 6791] close(15) = -1 EBADF (Bad file descriptor) [pid 6791] close(16) = -1 EBADF (Bad file descriptor) [pid 6791] close(17) = -1 EBADF (Bad file descriptor) [pid 6791] close(18) = -1 EBADF (Bad file descriptor) [pid 6791] close(19) = -1 EBADF (Bad file descriptor) [pid 6791] close(20) = -1 EBADF (Bad file descriptor) [pid 6791] close(21) = -1 EBADF (Bad file descriptor) [pid 6791] close(22) = -1 EBADF (Bad file descriptor) [pid 6791] close(23) = -1 EBADF (Bad file descriptor) [pid 6791] close(24) = -1 EBADF (Bad file descriptor) [pid 6791] close(25) = -1 EBADF (Bad file descriptor) [pid 6791] close(26) = -1 EBADF (Bad file descriptor) [pid 6791] close(27) = -1 EBADF (Bad file descriptor) [pid 6791] close(28) = -1 EBADF (Bad file descriptor) [pid 6791] close(29) = -1 EBADF (Bad file descriptor) [pid 6791] exit_group(0 [pid 6792] <... futex resumed>) = ? [pid 6791] <... exit_group resumed>) = ? [pid 6793] <... futex resumed>) = ? [pid 6792] +++ exited with 0 +++ [pid 6793] +++ exited with 0 +++ [pid 6791] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1764, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./588", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./588", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./588/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./588/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./588/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./588") = 0 [pid 5019] mkdir("./589", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1767 ./strace-static-x86_64: Process 6794 attached [pid 6794] set_robust_list(0x555556a426a0, 24) = 0 [pid 6794] chdir("./589") = 0 [pid 6794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6794] setpgid(0, 0) = 0 [pid 6794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6794] write(3, "1000", 4) = 4 [pid 6794] close(3) = 0 [pid 6794] symlink("/dev/binderfs", "./binderfs") = 0 [ 87.137916][ T6792] loop0: detected capacity change from 0 to 1024 [pid 6794] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6794] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6794] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6794] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6795 attached => {parent_tid=[1768]}, 88) = 1768 [pid 6795] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6795] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6795] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6794] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6795] <... futex resumed>) = 0 [pid 6794] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6795] memfd_create("syzkaller", 0) = 3 [pid 6795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6795] munmap(0x7f15b9a45000, 524288) = 0 [pid 6795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6795] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6795] close(3) = 0 [pid 6795] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6795] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6795] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6795] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6795] ioctl(4, LOOP_CLR_FD) = 0 [pid 6795] close(4) = 0 [pid 6795] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6794] <... futex resumed>) = 0 [pid 6794] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6794] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6794] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6796 attached => {parent_tid=[1769]}, 88) = 1769 [pid 6796] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6796] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6796] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6794] rt_sigprocmask(SIG_SETMASK, [], [pid 6796] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6795] <... futex resumed>) = 1 [pid 6794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6795] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6794] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] <... futex resumed>) = 0 [pid 6794] <... futex resumed>) = 1 [pid 6794] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6796] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6796] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6795] <... mknodat resumed>) = 0 [pid 6795] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6795] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6796] <... mount resumed>) = 0 [pid 6796] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6796] chdir(".") = 0 [pid 6796] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6794] <... futex resumed>) = 0 [pid 6794] close(3) = 0 [pid 6794] close(4) = 0 [pid 6794] close(5) = -1 EBADF (Bad file descriptor) [pid 6794] close(6) = -1 EBADF (Bad file descriptor) [pid 6794] close(7) = -1 EBADF (Bad file descriptor) [pid 6794] close(8) = -1 EBADF (Bad file descriptor) [pid 6794] close(9) = -1 EBADF (Bad file descriptor) [pid 6794] close(10) = -1 EBADF (Bad file descriptor) [pid 6794] close(11) = -1 EBADF (Bad file descriptor) [pid 6794] close(12) = -1 EBADF (Bad file descriptor) [pid 6794] close(13) = -1 EBADF (Bad file descriptor) [pid 6794] close(14) = -1 EBADF (Bad file descriptor) [pid 6796] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6794] close(15) = -1 EBADF (Bad file descriptor) [pid 6794] close(16) = -1 EBADF (Bad file descriptor) [pid 6794] close(17) = -1 EBADF (Bad file descriptor) [pid 6794] close(18) = -1 EBADF (Bad file descriptor) [pid 6794] close(19) = -1 EBADF (Bad file descriptor) [pid 6794] close(20) = -1 EBADF (Bad file descriptor) [pid 6794] close(21) = -1 EBADF (Bad file descriptor) [pid 6794] close(22) = -1 EBADF (Bad file descriptor) [pid 6794] close(23) = -1 EBADF (Bad file descriptor) [pid 6794] close(24) = -1 EBADF (Bad file descriptor) [pid 6794] close(25) = -1 EBADF (Bad file descriptor) [pid 6794] close(26) = -1 EBADF (Bad file descriptor) [pid 6794] close(27) = -1 EBADF (Bad file descriptor) [pid 6794] close(28) = -1 EBADF (Bad file descriptor) [pid 6794] close(29) = -1 EBADF (Bad file descriptor) [pid 6794] exit_group(0 [pid 6796] <... futex resumed>) = ? [pid 6795] <... futex resumed>) = ? [pid 6794] <... exit_group resumed>) = ? [pid 6796] +++ exited with 0 +++ [pid 6795] +++ exited with 0 +++ [pid 6794] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1767, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./589", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./589", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./589/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./589/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./589/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./589") = 0 [pid 5019] mkdir("./590", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1770 ./strace-static-x86_64: Process 6797 attached [pid 6797] set_robust_list(0x555556a426a0, 24) = 0 [ 87.209496][ T6795] loop0: detected capacity change from 0 to 1024 [pid 6797] chdir("./590") = 0 [pid 6797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6797] setpgid(0, 0) = 0 [pid 6797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6797] write(3, "1000", 4) = 4 [pid 6797] close(3) = 0 [pid 6797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6797] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6797] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6797] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6798 attached => {parent_tid=[1771]}, 88) = 1771 [pid 6798] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6798] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6798] rt_sigprocmask(SIG_SETMASK, [], [pid 6797] rt_sigprocmask(SIG_SETMASK, [], [pid 6798] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6798] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6797] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6797] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6798] <... futex resumed>) = 0 [pid 6798] memfd_create("syzkaller", 0 [pid 6797] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6798] <... memfd_create resumed>) = 3 [pid 6798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6798] munmap(0x7f15b9a45000, 524288) = 0 [pid 6798] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6798] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6798] close(3) = 0 [pid 6798] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6798] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6798] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6798] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6798] ioctl(4, LOOP_CLR_FD) = 0 [pid 6798] close(4) = 0 [pid 6798] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6797] <... futex resumed>) = 0 [pid 6797] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6797] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6797] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1772]}, 88) = 1772 [pid 6797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6797] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6797] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6798] <... futex resumed>) = 1 [pid 6798] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6799 attached ) = 0 [pid 6798] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6798] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6799] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6799] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6799] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6799] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6799] chdir(".") = 0 [pid 6799] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6797] <... futex resumed>) = 0 [pid 6797] close(3) = 0 [pid 6797] close(4) = 0 [pid 6797] close(5 [pid 6799] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6797] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6797] close(6) = -1 EBADF (Bad file descriptor) [pid 6797] close(7) = -1 EBADF (Bad file descriptor) [pid 6797] close(8) = -1 EBADF (Bad file descriptor) [pid 6797] close(9) = -1 EBADF (Bad file descriptor) [pid 6797] close(10) = -1 EBADF (Bad file descriptor) [pid 6797] close(11) = -1 EBADF (Bad file descriptor) [pid 6797] close(12) = -1 EBADF (Bad file descriptor) [pid 6797] close(13) = -1 EBADF (Bad file descriptor) [pid 6797] close(14) = -1 EBADF (Bad file descriptor) [pid 6797] close(15) = -1 EBADF (Bad file descriptor) [pid 6797] close(16) = -1 EBADF (Bad file descriptor) [pid 6797] close(17) = -1 EBADF (Bad file descriptor) [pid 6797] close(18) = -1 EBADF (Bad file descriptor) [pid 6797] close(19) = -1 EBADF (Bad file descriptor) [pid 6797] close(20) = -1 EBADF (Bad file descriptor) [pid 6797] close(21) = -1 EBADF (Bad file descriptor) [pid 6797] close(22) = -1 EBADF (Bad file descriptor) [pid 6797] close(23) = -1 EBADF (Bad file descriptor) [pid 6797] close(24) = -1 EBADF (Bad file descriptor) [pid 6797] close(25) = -1 EBADF (Bad file descriptor) [pid 6797] close(26) = -1 EBADF (Bad file descriptor) [pid 6797] close(27) = -1 EBADF (Bad file descriptor) [pid 6797] close(28) = -1 EBADF (Bad file descriptor) [pid 6797] close(29) = -1 EBADF (Bad file descriptor) [pid 6797] exit_group(0 [pid 6799] <... futex resumed>) = ? [pid 6798] <... futex resumed>) = ? [pid 6797] <... exit_group resumed>) = ? [pid 6799] +++ exited with 0 +++ [pid 6798] +++ exited with 0 +++ [pid 6797] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1770, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./590", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./590", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./590/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./590/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./590/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./590") = 0 [pid 5019] mkdir("./591", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1773 [ 87.289548][ T6798] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6800 attached [pid 6800] set_robust_list(0x555556a426a0, 24) = 0 [pid 6800] chdir("./591") = 0 [pid 6800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6800] setpgid(0, 0) = 0 [pid 6800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6800] write(3, "1000", 4) = 4 [pid 6800] close(3) = 0 [pid 6800] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6800] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6800] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6800] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6800] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6800] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6801 attached => {parent_tid=[1774]}, 88) = 1774 [pid 6801] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6801] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6801] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6800] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6801] <... futex resumed>) = 0 [pid 6800] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6801] memfd_create("syzkaller", 0) = 3 [pid 6801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6801] munmap(0x7f15b9a45000, 524288) = 0 [pid 6801] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6801] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6801] close(3) = 0 [pid 6801] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6801] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6801] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6801] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6801] ioctl(4, LOOP_CLR_FD) = 0 [pid 6801] close(4) = 0 [pid 6801] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... futex resumed>) = 0 [pid 6800] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6800] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6800] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6800] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1775]}, 88) = 1775 [pid 6800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6800] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6800] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6801] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6802 attached [pid 6801] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6802] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6802] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6802] mkdir(".", 0777 [pid 6801] <... mknodat resumed>) = 0 [pid 6802] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6802] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6801] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6801] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6802] <... mount resumed>) = 0 [pid 6802] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6802] chdir(".") = 0 [pid 6802] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6800] <... futex resumed>) = 0 [pid 6802] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6800] close(3) = 0 [pid 6800] close(4) = 0 [pid 6800] close(5) = -1 EBADF (Bad file descriptor) [pid 6800] close(6) = -1 EBADF (Bad file descriptor) [pid 6800] close(7) = -1 EBADF (Bad file descriptor) [pid 6800] close(8) = -1 EBADF (Bad file descriptor) [pid 6800] close(9) = -1 EBADF (Bad file descriptor) [pid 6800] close(10) = -1 EBADF (Bad file descriptor) [pid 6800] close(11) = -1 EBADF (Bad file descriptor) [pid 6800] close(12) = -1 EBADF (Bad file descriptor) [pid 6800] close(13) = -1 EBADF (Bad file descriptor) [pid 6800] close(14) = -1 EBADF (Bad file descriptor) [pid 6800] close(15) = -1 EBADF (Bad file descriptor) [pid 6800] close(16) = -1 EBADF (Bad file descriptor) [pid 6800] close(17) = -1 EBADF (Bad file descriptor) [pid 6800] close(18) = -1 EBADF (Bad file descriptor) [pid 6800] close(19) = -1 EBADF (Bad file descriptor) [pid 6800] close(20) = -1 EBADF (Bad file descriptor) [pid 6800] close(21) = -1 EBADF (Bad file descriptor) [pid 6800] close(22) = -1 EBADF (Bad file descriptor) [pid 6800] close(23) = -1 EBADF (Bad file descriptor) [pid 6800] close(24) = -1 EBADF (Bad file descriptor) [pid 6800] close(25) = -1 EBADF (Bad file descriptor) [pid 6800] close(26) = -1 EBADF (Bad file descriptor) [pid 6800] close(27) = -1 EBADF (Bad file descriptor) [pid 6800] close(28) = -1 EBADF (Bad file descriptor) [pid 6800] close(29) = -1 EBADF (Bad file descriptor) [pid 6800] exit_group(0 [pid 6802] <... futex resumed>) = ? [pid 6801] <... futex resumed>) = ? [pid 6800] <... exit_group resumed>) = ? [pid 6802] +++ exited with 0 +++ [pid 6801] +++ exited with 0 +++ [pid 6800] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1773, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./591", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./591", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./591/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./591/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./591/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./591") = 0 [pid 5019] mkdir("./592", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 87.369718][ T6801] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1776 ./strace-static-x86_64: Process 6803 attached [pid 6803] set_robust_list(0x555556a426a0, 24) = 0 [pid 6803] chdir("./592") = 0 [pid 6803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6803] setpgid(0, 0) = 0 [pid 6803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6803] write(3, "1000", 4) = 4 [pid 6803] close(3) = 0 [pid 6803] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6803] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6803] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6803] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6803] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6803] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6803] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1777]}, 88) = 1777 [pid 6803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6803] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6803] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6804 attached [pid 6804] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6804] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6804] memfd_create("syzkaller", 0) = 3 [pid 6804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6804] munmap(0x7f15b9a45000, 524288) = 0 [pid 6804] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6804] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6804] close(3) = 0 [pid 6804] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6804] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6804] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6804] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6804] ioctl(4, LOOP_CLR_FD) = 0 [pid 6804] close(4) = 0 [pid 6804] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6803] <... futex resumed>) = 0 [pid 6803] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6803] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6803] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6803] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6803] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1778]}, 88) = 1778 [pid 6803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6803] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6803] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6804] <... futex resumed>) = 1 [pid 6804] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6804] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6805 attached [pid 6805] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6805] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6805] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6805] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6805] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6805] chdir(".") = 0 [pid 6805] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6803] <... futex resumed>) = 0 [pid 6803] close(3) = 0 [pid 6803] close(4) = 0 [pid 6803] close(5) = -1 EBADF (Bad file descriptor) [pid 6803] close(6) = -1 EBADF (Bad file descriptor) [pid 6803] close(7) = -1 EBADF (Bad file descriptor) [pid 6803] close(8) = -1 EBADF (Bad file descriptor) [pid 6803] close(9) = -1 EBADF (Bad file descriptor) [pid 6803] close(10) = -1 EBADF (Bad file descriptor) [pid 6803] close(11) = -1 EBADF (Bad file descriptor) [pid 6803] close(12) = -1 EBADF (Bad file descriptor) [pid 6803] close(13) = -1 EBADF (Bad file descriptor) [pid 6803] close(14) = -1 EBADF (Bad file descriptor) [pid 6803] close(15) = -1 EBADF (Bad file descriptor) [pid 6803] close(16) = -1 EBADF (Bad file descriptor) [pid 6803] close(17) = -1 EBADF (Bad file descriptor) [pid 6803] close(18) = -1 EBADF (Bad file descriptor) [pid 6803] close(19) = -1 EBADF (Bad file descriptor) [pid 6803] close(20) = -1 EBADF (Bad file descriptor) [pid 6803] close(21) = -1 EBADF (Bad file descriptor) [pid 6803] close(22) = -1 EBADF (Bad file descriptor) [pid 6803] close(23) = -1 EBADF (Bad file descriptor) [pid 6803] close(24) = -1 EBADF (Bad file descriptor) [pid 6803] close(25) = -1 EBADF (Bad file descriptor) [pid 6803] close(26) = -1 EBADF (Bad file descriptor) [pid 6803] close(27) = -1 EBADF (Bad file descriptor) [pid 6803] close(28) = -1 EBADF (Bad file descriptor) [pid 6803] close(29) = -1 EBADF (Bad file descriptor) [pid 6803] exit_group(0 [pid 6804] <... futex resumed>) = ? [pid 6803] <... exit_group resumed>) = ? [pid 6805] <... futex resumed>) = ? [pid 6804] +++ exited with 0 +++ [pid 6805] +++ exited with 0 +++ [pid 6803] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1776, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./592", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./592", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./592/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./592/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./592/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./592/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./592") = 0 [pid 5019] mkdir("./593", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1779 ./strace-static-x86_64: Process 6806 attached [pid 6806] set_robust_list(0x555556a426a0, 24) = 0 [pid 6806] chdir("./593") = 0 [pid 6806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6806] setpgid(0, 0) = 0 [pid 6806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6806] write(3, "1000", 4) = 4 [pid 6806] close(3) = 0 [pid 6806] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6806] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.441685][ T6804] loop0: detected capacity change from 0 to 1024 [pid 6806] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6806] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6807 attached [pid 6807] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6807] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6806] <... clone3 resumed> => {parent_tid=[1780]}, 88) = 1780 [pid 6807] rt_sigprocmask(SIG_SETMASK, [], [pid 6806] rt_sigprocmask(SIG_SETMASK, [], [pid 6807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6806] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6807] memfd_create("syzkaller", 0) = 3 [pid 6807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6807] munmap(0x7f15b9a45000, 524288) = 0 [pid 6807] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6807] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6807] close(3) = 0 [pid 6807] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6807] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6807] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6807] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6807] ioctl(4, LOOP_CLR_FD) = 0 [pid 6807] close(4) = 0 [pid 6807] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... futex resumed>) = 0 [pid 6806] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6806] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1781]}, 88) = 1781 [pid 6806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6806] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6806] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6808 attached [pid 6807] <... futex resumed>) = 1 [pid 6807] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6808] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6808] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6808] rt_sigprocmask(SIG_SETMASK, [], [pid 6807] <... mknodat resumed>) = 0 [pid 6807] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6807] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6808] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6808] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6808] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6808] chdir(".") = 0 [pid 6808] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... futex resumed>) = 0 [pid 6806] close(3) = 0 [pid 6806] close(4) = 0 [pid 6808] <... futex resumed>) = 1 [pid 6806] close(5 [pid 6808] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6806] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6806] close(6) = -1 EBADF (Bad file descriptor) [pid 6806] close(7) = -1 EBADF (Bad file descriptor) [pid 6806] close(8) = -1 EBADF (Bad file descriptor) [pid 6806] close(9) = -1 EBADF (Bad file descriptor) [pid 6806] close(10) = -1 EBADF (Bad file descriptor) [pid 6806] close(11) = -1 EBADF (Bad file descriptor) [pid 6806] close(12) = -1 EBADF (Bad file descriptor) [pid 6806] close(13) = -1 EBADF (Bad file descriptor) [pid 6806] close(14) = -1 EBADF (Bad file descriptor) [pid 6806] close(15) = -1 EBADF (Bad file descriptor) [pid 6806] close(16) = -1 EBADF (Bad file descriptor) [pid 6806] close(17) = -1 EBADF (Bad file descriptor) [pid 6806] close(18) = -1 EBADF (Bad file descriptor) [pid 6806] close(19) = -1 EBADF (Bad file descriptor) [pid 6806] close(20) = -1 EBADF (Bad file descriptor) [pid 6806] close(21) = -1 EBADF (Bad file descriptor) [pid 6806] close(22) = -1 EBADF (Bad file descriptor) [pid 6806] close(23) = -1 EBADF (Bad file descriptor) [pid 6806] close(24) = -1 EBADF (Bad file descriptor) [pid 6806] close(25) = -1 EBADF (Bad file descriptor) [pid 6806] close(26) = -1 EBADF (Bad file descriptor) [pid 6806] close(27) = -1 EBADF (Bad file descriptor) [pid 6806] close(28) = -1 EBADF (Bad file descriptor) [pid 6806] close(29) = -1 EBADF (Bad file descriptor) [pid 6806] exit_group(0 [pid 6808] <... futex resumed>) = ? [pid 6807] <... futex resumed>) = ? [pid 6806] <... exit_group resumed>) = ? [pid 6808] +++ exited with 0 +++ [pid 6807] +++ exited with 0 +++ [pid 6806] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1779, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./593", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./593", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./593/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./593/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./593/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./593/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./593") = 0 [pid 5019] mkdir("./594", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1782 ./strace-static-x86_64: Process 6809 attached [pid 6809] set_robust_list(0x555556a426a0, 24) = 0 [pid 6809] chdir("./594") = 0 [pid 6809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6809] setpgid(0, 0) = 0 [pid 6809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6809] write(3, "1000", 4) = 4 [pid 6809] close(3) = 0 [pid 6809] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6809] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6809] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6809] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6810 attached => {parent_tid=[1783]}, 88) = 1783 [pid 6810] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6810] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6809] rt_sigprocmask(SIG_SETMASK, [], [pid 6810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6810] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6809] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6810] <... futex resumed>) = 0 [pid 6809] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6810] memfd_create("syzkaller", 0) = 3 [pid 6810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 87.513915][ T6807] loop0: detected capacity change from 0 to 1024 [pid 6810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6810] munmap(0x7f15b9a45000, 524288) = 0 [pid 6810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6810] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6810] close(3) = 0 [pid 6810] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6810] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6810] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6810] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6810] ioctl(4, LOOP_CLR_FD) = 0 [pid 6810] close(4) = 0 [pid 6810] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6809] <... futex resumed>) = 0 [pid 6809] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6809] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6809] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1784]}, 88) = 1784 [pid 6809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6809] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6809] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6810] <... futex resumed>) = 1 [pid 6810] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6810] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6810] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6811 attached [pid 6811] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6811] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6811] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6811] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6811] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6811] chdir(".") = 0 [pid 6811] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6809] <... futex resumed>) = 0 [pid 6809] close(3) = 0 [pid 6809] close(4) = 0 [pid 6809] close(5 [pid 6811] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6809] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6809] close(6) = -1 EBADF (Bad file descriptor) [pid 6809] close(7) = -1 EBADF (Bad file descriptor) [pid 6809] close(8) = -1 EBADF (Bad file descriptor) [pid 6809] close(9) = -1 EBADF (Bad file descriptor) [pid 6809] close(10) = -1 EBADF (Bad file descriptor) [pid 6809] close(11) = -1 EBADF (Bad file descriptor) [pid 6809] close(12) = -1 EBADF (Bad file descriptor) [pid 6809] close(13) = -1 EBADF (Bad file descriptor) [pid 6809] close(14) = -1 EBADF (Bad file descriptor) [pid 6809] close(15) = -1 EBADF (Bad file descriptor) [pid 6809] close(16) = -1 EBADF (Bad file descriptor) [pid 6809] close(17) = -1 EBADF (Bad file descriptor) [pid 6809] close(18) = -1 EBADF (Bad file descriptor) [pid 6809] close(19) = -1 EBADF (Bad file descriptor) [pid 6809] close(20) = -1 EBADF (Bad file descriptor) [pid 6809] close(21) = -1 EBADF (Bad file descriptor) [pid 6809] close(22) = -1 EBADF (Bad file descriptor) [pid 6809] close(23) = -1 EBADF (Bad file descriptor) [pid 6809] close(24) = -1 EBADF (Bad file descriptor) [pid 6809] close(25) = -1 EBADF (Bad file descriptor) [pid 6809] close(26) = -1 EBADF (Bad file descriptor) [pid 6809] close(27) = -1 EBADF (Bad file descriptor) [pid 6809] close(28) = -1 EBADF (Bad file descriptor) [pid 6809] close(29) = -1 EBADF (Bad file descriptor) [pid 6809] exit_group(0 [pid 6810] <... futex resumed>) = ? [pid 6809] <... exit_group resumed>) = ? [pid 6811] <... futex resumed>) = ? [pid 6810] +++ exited with 0 +++ [pid 6811] +++ exited with 0 +++ [pid 6809] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1782, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./594", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./594", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./594/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./594/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./594/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./594") = 0 [pid 5019] mkdir("./595", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6812 attached [pid 6812] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1785 [pid 6812] <... set_robust_list resumed>) = 0 [pid 6812] chdir("./595") = 0 [pid 6812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6812] setpgid(0, 0) = 0 [ 87.579741][ T6810] loop0: detected capacity change from 0 to 1024 [pid 6812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6812] write(3, "1000", 4) = 4 [pid 6812] close(3) = 0 [pid 6812] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6812] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6812] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6812] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6812] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6812] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1786]}, 88) = 1786 ./strace-static-x86_64: Process 6813 attached [pid 6812] rt_sigprocmask(SIG_SETMASK, [], [pid 6813] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6812] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6812] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6812] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6813] <... rseq resumed>) = 0 [pid 6813] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6813] memfd_create("syzkaller", 0) = 3 [pid 6813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6813] munmap(0x7f15b9a45000, 524288) = 0 [pid 6813] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6813] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6813] close(3) = 0 [pid 6813] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6813] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6813] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6813] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6813] ioctl(4, LOOP_CLR_FD) = 0 [pid 6813] close(4) = 0 [pid 6813] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6813] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6812] <... futex resumed>) = 0 [pid 6812] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6813] <... futex resumed>) = 0 [pid 6812] <... futex resumed>) = 1 [pid 6813] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6812] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6812] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6812] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6813] <... mknodat resumed>) = 0 [pid 6812] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6813] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6813] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1787]}, 88) = 1787 ./strace-static-x86_64: Process 6814 attached [pid 6812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6812] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6812] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6814] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6814] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6814] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6814] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6814] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6814] chdir(".") = 0 [pid 6814] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6812] <... futex resumed>) = 0 [pid 6812] close(3) = 0 [pid 6812] close(4) = 0 [pid 6814] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6812] close(5) = -1 EBADF (Bad file descriptor) [pid 6812] close(6) = -1 EBADF (Bad file descriptor) [pid 6812] close(7) = -1 EBADF (Bad file descriptor) [pid 6812] close(8) = -1 EBADF (Bad file descriptor) [pid 6812] close(9) = -1 EBADF (Bad file descriptor) [pid 6812] close(10) = -1 EBADF (Bad file descriptor) [pid 6812] close(11) = -1 EBADF (Bad file descriptor) [pid 6812] close(12) = -1 EBADF (Bad file descriptor) [pid 6812] close(13) = -1 EBADF (Bad file descriptor) [pid 6812] close(14) = -1 EBADF (Bad file descriptor) [pid 6812] close(15) = -1 EBADF (Bad file descriptor) [pid 6812] close(16) = -1 EBADF (Bad file descriptor) [pid 6812] close(17) = -1 EBADF (Bad file descriptor) [pid 6812] close(18) = -1 EBADF (Bad file descriptor) [pid 6812] close(19) = -1 EBADF (Bad file descriptor) [pid 6812] close(20) = -1 EBADF (Bad file descriptor) [pid 6812] close(21) = -1 EBADF (Bad file descriptor) [pid 6812] close(22) = -1 EBADF (Bad file descriptor) [pid 6812] close(23) = -1 EBADF (Bad file descriptor) [pid 6812] close(24) = -1 EBADF (Bad file descriptor) [pid 6812] close(25) = -1 EBADF (Bad file descriptor) [pid 6812] close(26) = -1 EBADF (Bad file descriptor) [pid 6812] close(27) = -1 EBADF (Bad file descriptor) [pid 6812] close(28) = -1 EBADF (Bad file descriptor) [pid 6812] close(29) = -1 EBADF (Bad file descriptor) [pid 6812] exit_group(0 [pid 6813] <... futex resumed>) = ? [pid 6812] <... exit_group resumed>) = ? [pid 6813] +++ exited with 0 +++ [pid 6814] <... futex resumed>) = ? [pid 6814] +++ exited with 0 +++ [pid 6812] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1785, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./595", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./595", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./595/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./595/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./595/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./595") = 0 [pid 5019] mkdir("./596", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 87.652467][ T6813] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6815 attached , child_tidptr=0x555556a42690) = 1788 [pid 6815] set_robust_list(0x555556a426a0, 24) = 0 [pid 6815] chdir("./596") = 0 [pid 6815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6815] setpgid(0, 0) = 0 [pid 6815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6815] write(3, "1000", 4) = 4 [pid 6815] close(3) = 0 [pid 6815] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6815] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6815] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6815] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6815] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6815] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6816 attached => {parent_tid=[1789]}, 88) = 1789 [pid 6816] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6816] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6816] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6816] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6815] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6816] <... futex resumed>) = 0 [pid 6815] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6816] memfd_create("syzkaller", 0) = 3 [pid 6816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6816] munmap(0x7f15b9a45000, 524288) = 0 [pid 6816] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6816] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6816] close(3) = 0 [pid 6816] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6816] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6816] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6816] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6816] ioctl(4, LOOP_CLR_FD) = 0 [pid 6816] close(4) = 0 [pid 6816] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6815] <... futex resumed>) = 0 [pid 6816] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6815] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6815] <... futex resumed>) = 0 [pid 6816] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6815] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6815] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6815] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6817 attached [pid 6816] <... mknodat resumed>) = 0 [pid 6816] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6815] <... clone3 resumed> => {parent_tid=[1790]}, 88) = 1790 [pid 6816] <... futex resumed>) = 0 [pid 6815] rt_sigprocmask(SIG_SETMASK, [], [pid 6816] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6815] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6815] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6817] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6817] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6817] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6817] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6817] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6817] chdir(".") = 0 [pid 6817] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6815] <... futex resumed>) = 0 [pid 6817] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6815] close(3) = 0 [pid 6815] close(4) = 0 [pid 6815] close(5) = -1 EBADF (Bad file descriptor) [pid 6815] close(6) = -1 EBADF (Bad file descriptor) [pid 6815] close(7) = -1 EBADF (Bad file descriptor) [pid 6815] close(8) = -1 EBADF (Bad file descriptor) [pid 6815] close(9) = -1 EBADF (Bad file descriptor) [pid 6815] close(10) = -1 EBADF (Bad file descriptor) [pid 6815] close(11) = -1 EBADF (Bad file descriptor) [pid 6815] close(12) = -1 EBADF (Bad file descriptor) [pid 6815] close(13) = -1 EBADF (Bad file descriptor) [pid 6815] close(14) = -1 EBADF (Bad file descriptor) [pid 6815] close(15) = -1 EBADF (Bad file descriptor) [pid 6815] close(16) = -1 EBADF (Bad file descriptor) [pid 6815] close(17) = -1 EBADF (Bad file descriptor) [pid 6815] close(18) = -1 EBADF (Bad file descriptor) [pid 6815] close(19) = -1 EBADF (Bad file descriptor) [pid 6815] close(20) = -1 EBADF (Bad file descriptor) [pid 6815] close(21) = -1 EBADF (Bad file descriptor) [pid 6815] close(22) = -1 EBADF (Bad file descriptor) [pid 6815] close(23) = -1 EBADF (Bad file descriptor) [pid 6815] close(24) = -1 EBADF (Bad file descriptor) [pid 6815] close(25) = -1 EBADF (Bad file descriptor) [pid 6815] close(26) = -1 EBADF (Bad file descriptor) [pid 6815] close(27) = -1 EBADF (Bad file descriptor) [pid 6815] close(28) = -1 EBADF (Bad file descriptor) [pid 6815] close(29) = -1 EBADF (Bad file descriptor) [pid 6815] exit_group(0 [pid 6817] <... futex resumed>) = ? [pid 6816] <... futex resumed>) = ? [pid 6815] <... exit_group resumed>) = ? [pid 6817] +++ exited with 0 +++ [pid 6816] +++ exited with 0 +++ [pid 6815] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1788, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./596", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./596", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./596/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./596/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./596/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./596") = 0 [pid 5019] mkdir("./597", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1791 ./strace-static-x86_64: Process 6818 attached [pid 6818] set_robust_list(0x555556a426a0, 24) = 0 [pid 6818] chdir("./597") = 0 [pid 6818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6818] setpgid(0, 0) = 0 [pid 6818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6818] write(3, "1000", 4) = 4 [pid 6818] close(3) = 0 [pid 6818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6818] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6818] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6818] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6818] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6819 attached => {parent_tid=[1792]}, 88) = 1792 [pid 6819] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6819] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6819] rt_sigprocmask(SIG_SETMASK, [], [pid 6818] rt_sigprocmask(SIG_SETMASK, [], [pid 6819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6819] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6818] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... futex resumed>) = 0 [pid 6818] <... futex resumed>) = 1 [pid 6818] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6819] memfd_create("syzkaller", 0) = 3 [pid 6819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 87.736518][ T6816] loop0: detected capacity change from 0 to 1024 [pid 6819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6819] munmap(0x7f15b9a45000, 524288) = 0 [pid 6819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6819] close(3) = 0 [pid 6819] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6819] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6819] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6819] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6819] ioctl(4, LOOP_CLR_FD) = 0 [pid 6819] close(4) = 0 [pid 6819] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... futex resumed>) = 0 [pid 6818] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6818] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6818] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1793]}, 88) = 1793 [pid 6818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6818] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6818] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6819] <... futex resumed>) = 1 [pid 6819] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6820 attached [pid 6820] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6820] set_robust_list(0x7f15b9ac49a0, 24 [pid 6819] <... mknodat resumed>) = 0 [pid 6819] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6819] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6820] <... set_robust_list resumed>) = 0 [pid 6820] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6820] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6820] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6820] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6820] chdir(".") = 0 [pid 6820] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6818] <... futex resumed>) = 0 [pid 6818] close(3) = 0 [pid 6818] close(4 [pid 6820] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6818] <... close resumed>) = 0 [pid 6818] close(5) = -1 EBADF (Bad file descriptor) [pid 6818] close(6) = -1 EBADF (Bad file descriptor) [pid 6818] close(7) = -1 EBADF (Bad file descriptor) [pid 6818] close(8) = -1 EBADF (Bad file descriptor) [pid 6818] close(9) = -1 EBADF (Bad file descriptor) [pid 6818] close(10) = -1 EBADF (Bad file descriptor) [pid 6818] close(11) = -1 EBADF (Bad file descriptor) [pid 6818] close(12) = -1 EBADF (Bad file descriptor) [pid 6818] close(13) = -1 EBADF (Bad file descriptor) [pid 6818] close(14) = -1 EBADF (Bad file descriptor) [pid 6818] close(15) = -1 EBADF (Bad file descriptor) [pid 6818] close(16) = -1 EBADF (Bad file descriptor) [pid 6818] close(17) = -1 EBADF (Bad file descriptor) [pid 6818] close(18) = -1 EBADF (Bad file descriptor) [pid 6818] close(19) = -1 EBADF (Bad file descriptor) [pid 6818] close(20) = -1 EBADF (Bad file descriptor) [pid 6818] close(21) = -1 EBADF (Bad file descriptor) [pid 6818] close(22) = -1 EBADF (Bad file descriptor) [pid 6818] close(23) = -1 EBADF (Bad file descriptor) [pid 6818] close(24) = -1 EBADF (Bad file descriptor) [pid 6818] close(25) = -1 EBADF (Bad file descriptor) [pid 6818] close(26) = -1 EBADF (Bad file descriptor) [pid 6818] close(27) = -1 EBADF (Bad file descriptor) [pid 6818] close(28) = -1 EBADF (Bad file descriptor) [pid 6818] close(29) = -1 EBADF (Bad file descriptor) [pid 6818] exit_group(0 [pid 6820] <... futex resumed>) = ? [pid 6819] <... futex resumed>) = ? [pid 6818] <... exit_group resumed>) = ? [pid 6820] +++ exited with 0 +++ [pid 6819] +++ exited with 0 +++ [pid 6818] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1791, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./597", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./597", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./597/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./597/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./597/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./597") = 0 [pid 5019] mkdir("./598", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 87.799832][ T6819] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6821 attached [pid 6821] set_robust_list(0x555556a426a0, 24) = 0 [pid 6821] chdir("./598" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1794 [pid 6821] <... chdir resumed>) = 0 [pid 6821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6821] setpgid(0, 0) = 0 [pid 6821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6821] write(3, "1000", 4) = 4 [pid 6821] close(3) = 0 [pid 6821] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6821] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6821] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6821] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6821] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1795]}, 88) = 1795 [pid 6821] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6821] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6822 attached [pid 6822] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6822] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6822] memfd_create("syzkaller", 0) = 3 [pid 6822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6822] munmap(0x7f15b9a45000, 524288) = 0 [pid 6822] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6822] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6822] close(3) = 0 [pid 6822] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6822] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6822] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6822] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6822] ioctl(4, LOOP_CLR_FD) = 0 [pid 6822] close(4) = 0 [pid 6822] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... futex resumed>) = 0 [pid 6822] <... futex resumed>) = 1 [pid 6821] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6822] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6821] <... futex resumed>) = 0 [pid 6821] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6821] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6822] <... mknodat resumed>) = 0 [pid 6821] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1796]}, 88) = 1796 [pid 6821] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6821] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6821] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6822] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6822] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6823 attached [pid 6823] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6823] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6823] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6823] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6823] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6823] chdir(".") = 0 [pid 6823] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... futex resumed>) = 0 [pid 6821] close(3) = 0 [pid 6821] close(4) = 0 [pid 6821] close(5) = -1 EBADF (Bad file descriptor) [pid 6821] close(6) = -1 EBADF (Bad file descriptor) [pid 6821] close(7) = -1 EBADF (Bad file descriptor) [pid 6821] close(8) = -1 EBADF (Bad file descriptor) [pid 6821] close(9) = -1 EBADF (Bad file descriptor) [pid 6821] close(10) = -1 EBADF (Bad file descriptor) [pid 6821] close(11) = -1 EBADF (Bad file descriptor) [pid 6821] close(12) = -1 EBADF (Bad file descriptor) [pid 6821] close(13) = -1 EBADF (Bad file descriptor) [pid 6821] close(14) = -1 EBADF (Bad file descriptor) [pid 6821] close(15) = -1 EBADF (Bad file descriptor) [pid 6821] close(16) = -1 EBADF (Bad file descriptor) [pid 6821] close(17 [pid 6823] <... futex resumed>) = 1 [pid 6821] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6823] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] close(18) = -1 EBADF (Bad file descriptor) [pid 6821] close(19) = -1 EBADF (Bad file descriptor) [pid 6821] close(20) = -1 EBADF (Bad file descriptor) [pid 6821] close(21) = -1 EBADF (Bad file descriptor) [pid 6821] close(22) = -1 EBADF (Bad file descriptor) [pid 6821] close(23) = -1 EBADF (Bad file descriptor) [pid 6821] close(24) = -1 EBADF (Bad file descriptor) [pid 6821] close(25) = -1 EBADF (Bad file descriptor) [pid 6821] close(26) = -1 EBADF (Bad file descriptor) [pid 6821] close(27) = -1 EBADF (Bad file descriptor) [pid 6821] close(28) = -1 EBADF (Bad file descriptor) [pid 6821] close(29) = -1 EBADF (Bad file descriptor) [pid 6821] exit_group(0 [pid 6823] <... futex resumed>) = ? [pid 6822] <... futex resumed>) = ? [pid 6821] <... exit_group resumed>) = ? [pid 6823] +++ exited with 0 +++ [pid 6822] +++ exited with 0 +++ [pid 6821] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1794, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5019] umount2("./598", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./598", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./598/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./598/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./598/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./598") = 0 [pid 5019] mkdir("./599", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 87.873919][ T6822] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6824 attached [pid 6824] set_robust_list(0x555556a426a0, 24) = 0 [pid 6824] chdir("./599" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1797 [pid 6824] <... chdir resumed>) = 0 [pid 6824] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6824] setpgid(0, 0) = 0 [pid 6824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6824] write(3, "1000", 4) = 4 [pid 6824] close(3) = 0 [pid 6824] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6824] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6824] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6824] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6824] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6824] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1798]}, 88) = 1798 [pid 6824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6824] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6825 attached [pid 6825] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6825] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6825] memfd_create("syzkaller", 0) = 3 [pid 6825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6825] munmap(0x7f15b9a45000, 524288) = 0 [pid 6825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6825] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6825] close(3) = 0 [pid 6825] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6825] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6825] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6825] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6825] ioctl(4, LOOP_CLR_FD) = 0 [pid 6825] close(4) = 0 [pid 6825] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] <... futex resumed>) = 0 [pid 6824] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6824] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6824] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6824] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1799]}, 88) = 1799 [pid 6824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6824] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6825] <... futex resumed>) = 1 [pid 6825] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6826 attached [pid 6826] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6826] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6826] mkdir(".", 0777 [pid 6825] <... mknodat resumed>) = 0 [pid 6826] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6826] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6825] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6825] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6826] <... mount resumed>) = 0 [pid 6826] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6826] chdir(".") = 0 [pid 6826] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6824] <... futex resumed>) = 0 [pid 6826] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6824] close(3) = 0 [pid 6824] close(4) = 0 [pid 6824] close(5) = -1 EBADF (Bad file descriptor) [pid 6824] close(6) = -1 EBADF (Bad file descriptor) [pid 6824] close(7) = -1 EBADF (Bad file descriptor) [pid 6824] close(8) = -1 EBADF (Bad file descriptor) [pid 6824] close(9) = -1 EBADF (Bad file descriptor) [pid 6824] close(10) = -1 EBADF (Bad file descriptor) [pid 6824] close(11) = -1 EBADF (Bad file descriptor) [pid 6824] close(12) = -1 EBADF (Bad file descriptor) [pid 6824] close(13) = -1 EBADF (Bad file descriptor) [pid 6824] close(14) = -1 EBADF (Bad file descriptor) [pid 6824] close(15) = -1 EBADF (Bad file descriptor) [pid 6824] close(16) = -1 EBADF (Bad file descriptor) [pid 6824] close(17) = -1 EBADF (Bad file descriptor) [pid 6824] close(18) = -1 EBADF (Bad file descriptor) [pid 6824] close(19) = -1 EBADF (Bad file descriptor) [pid 6824] close(20) = -1 EBADF (Bad file descriptor) [pid 6824] close(21) = -1 EBADF (Bad file descriptor) [pid 6824] close(22) = -1 EBADF (Bad file descriptor) [pid 6824] close(23) = -1 EBADF (Bad file descriptor) [pid 6824] close(24) = -1 EBADF (Bad file descriptor) [pid 6824] close(25) = -1 EBADF (Bad file descriptor) [pid 6824] close(26) = -1 EBADF (Bad file descriptor) [pid 6824] close(27) = -1 EBADF (Bad file descriptor) [pid 6824] close(28) = -1 EBADF (Bad file descriptor) [pid 6824] close(29) = -1 EBADF (Bad file descriptor) [pid 6824] exit_group(0 [pid 6826] <... futex resumed>) = ? [pid 6825] <... futex resumed>) = ? [pid 6824] <... exit_group resumed>) = ? [pid 6825] +++ exited with 0 +++ [pid 6826] +++ exited with 0 +++ [pid 6824] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1797, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./599", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./599", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./599/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./599/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./599/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./599") = 0 [pid 5019] mkdir("./600", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1800 ./strace-static-x86_64: Process 6827 attached [pid 6827] set_robust_list(0x555556a426a0, 24) = 0 [pid 6827] chdir("./600") = 0 [pid 6827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6827] setpgid(0, 0) = 0 [pid 6827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6827] write(3, "1000", 4) = 4 [ 87.950368][ T6825] loop0: detected capacity change from 0 to 1024 [pid 6827] close(3) = 0 [pid 6827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6827] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6827] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6827] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6828 attached => {parent_tid=[1801]}, 88) = 1801 [pid 6828] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6828] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6828] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6827] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6828] <... futex resumed>) = 0 [pid 6827] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6828] memfd_create("syzkaller", 0) = 3 [pid 6828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6828] munmap(0x7f15b9a45000, 524288) = 0 [pid 6828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6828] close(3) = 0 [pid 6828] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6828] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6828] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6828] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6828] ioctl(4, LOOP_CLR_FD) = 0 [pid 6828] close(4) = 0 [pid 6828] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6827] <... futex resumed>) = 0 [pid 6827] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6827] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6827] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6828] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6829 attached [pid 6828] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6827] <... clone3 resumed> => {parent_tid=[1802]}, 88) = 1802 [pid 6829] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6827] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6827] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6829] <... rseq resumed>) = 0 [pid 6829] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6829] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6829] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6828] <... mknodat resumed>) = 0 [pid 6828] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6828] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6829] <... mount resumed>) = 0 [pid 6829] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6829] chdir(".") = 0 [pid 6829] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6827] <... futex resumed>) = 0 [pid 6827] close(3) = 0 [pid 6827] close(4) = 0 [pid 6827] close(5) = -1 EBADF (Bad file descriptor) [pid 6827] close(6) = -1 EBADF (Bad file descriptor) [pid 6827] close(7) = -1 EBADF (Bad file descriptor) [pid 6827] close(8) = -1 EBADF (Bad file descriptor) [pid 6827] close(9) = -1 EBADF (Bad file descriptor) [pid 6827] close(10 [pid 6829] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6827] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6827] close(11) = -1 EBADF (Bad file descriptor) [pid 6827] close(12) = -1 EBADF (Bad file descriptor) [pid 6827] close(13) = -1 EBADF (Bad file descriptor) [pid 6827] close(14) = -1 EBADF (Bad file descriptor) [pid 6827] close(15) = -1 EBADF (Bad file descriptor) [pid 6827] close(16) = -1 EBADF (Bad file descriptor) [pid 6827] close(17) = -1 EBADF (Bad file descriptor) [pid 6827] close(18) = -1 EBADF (Bad file descriptor) [pid 6827] close(19) = -1 EBADF (Bad file descriptor) [pid 6827] close(20) = -1 EBADF (Bad file descriptor) [pid 6827] close(21) = -1 EBADF (Bad file descriptor) [pid 6827] close(22) = -1 EBADF (Bad file descriptor) [pid 6827] close(23) = -1 EBADF (Bad file descriptor) [pid 6827] close(24) = -1 EBADF (Bad file descriptor) [pid 6827] close(25) = -1 EBADF (Bad file descriptor) [pid 6827] close(26) = -1 EBADF (Bad file descriptor) [pid 6827] close(27) = -1 EBADF (Bad file descriptor) [pid 6827] close(28) = -1 EBADF (Bad file descriptor) [pid 6827] close(29) = -1 EBADF (Bad file descriptor) [pid 6827] exit_group(0 [pid 6828] <... futex resumed>) = ? [pid 6827] <... exit_group resumed>) = ? [pid 6829] <... futex resumed>) = ? [pid 6828] +++ exited with 0 +++ [pid 6829] +++ exited with 0 +++ [pid 6827] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1800, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./600", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./600", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./600/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./600/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./600/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./600/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./600") = 0 [pid 5019] mkdir("./601", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1803 ./strace-static-x86_64: Process 6830 attached [pid 6830] set_robust_list(0x555556a426a0, 24) = 0 [pid 6830] chdir("./601") = 0 [pid 6830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6830] setpgid(0, 0) = 0 [pid 6830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6830] write(3, "1000", 4) = 4 [pid 6830] close(3) = 0 [pid 6830] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6830] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6830] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6830] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6830] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6830] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6830] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6831 attached => {parent_tid=[1804]}, 88) = 1804 [pid 6830] rt_sigprocmask(SIG_SETMASK, [], [pid 6831] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6831] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 88.029871][ T6828] loop0: detected capacity change from 0 to 1024 [pid 6831] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6830] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6830] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6831] <... futex resumed>) = 0 [pid 6830] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6831] memfd_create("syzkaller", 0) = 3 [pid 6831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6831] munmap(0x7f15b9a45000, 524288) = 0 [pid 6831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6831] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6831] close(3) = 0 [pid 6831] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6831] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6831] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6831] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6831] ioctl(4, LOOP_CLR_FD) = 0 [pid 6831] close(4) = 0 [pid 6831] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6831] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6830] <... futex resumed>) = 0 [pid 6830] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] <... futex resumed>) = 0 [pid 6830] <... futex resumed>) = 1 [pid 6830] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6831] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6831] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6831] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6830] <... futex resumed>) = 0 [pid 6830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6830] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6830] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6830] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1805]}, 88) = 1805 [pid 6830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6830] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6830] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6832 attached [pid 6832] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6832] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6832] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6832] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6832] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6832] chdir(".") = 0 [pid 6832] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6830] <... futex resumed>) = 0 [pid 6830] close(3) = 0 [pid 6830] close(4) = 0 [pid 6830] close(5) = -1 EBADF (Bad file descriptor) [pid 6832] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6830] close(6) = -1 EBADF (Bad file descriptor) [pid 6830] close(7) = -1 EBADF (Bad file descriptor) [pid 6830] close(8) = -1 EBADF (Bad file descriptor) [pid 6830] close(9) = -1 EBADF (Bad file descriptor) [pid 6830] close(10) = -1 EBADF (Bad file descriptor) [pid 6830] close(11) = -1 EBADF (Bad file descriptor) [pid 6830] close(12) = -1 EBADF (Bad file descriptor) [pid 6830] close(13) = -1 EBADF (Bad file descriptor) [pid 6830] close(14) = -1 EBADF (Bad file descriptor) [pid 6830] close(15) = -1 EBADF (Bad file descriptor) [pid 6830] close(16) = -1 EBADF (Bad file descriptor) [pid 6830] close(17) = -1 EBADF (Bad file descriptor) [pid 6830] close(18) = -1 EBADF (Bad file descriptor) [pid 6830] close(19) = -1 EBADF (Bad file descriptor) [pid 6830] close(20) = -1 EBADF (Bad file descriptor) [pid 6830] close(21) = -1 EBADF (Bad file descriptor) [pid 6830] close(22) = -1 EBADF (Bad file descriptor) [pid 6830] close(23) = -1 EBADF (Bad file descriptor) [pid 6830] close(24) = -1 EBADF (Bad file descriptor) [pid 6830] close(25) = -1 EBADF (Bad file descriptor) [pid 6830] close(26) = -1 EBADF (Bad file descriptor) [pid 6830] close(27) = -1 EBADF (Bad file descriptor) [pid 6830] close(28) = -1 EBADF (Bad file descriptor) [pid 6830] close(29) = -1 EBADF (Bad file descriptor) [pid 6830] exit_group(0 [pid 6831] <... futex resumed>) = ? [pid 6830] <... exit_group resumed>) = ? [pid 6832] <... futex resumed>) = ? [pid 6831] +++ exited with 0 +++ [pid 6832] +++ exited with 0 +++ [pid 6830] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1803, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./601", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./601", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./601/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./601/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./601/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./601/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./601/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./601/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./601/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./601/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./601/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./601") = 0 [pid 5019] mkdir("./602", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1806 ./strace-static-x86_64: Process 6833 attached [pid 6833] set_robust_list(0x555556a426a0, 24) = 0 [pid 6833] chdir("./602") = 0 [pid 6833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6833] setpgid(0, 0) = 0 [pid 6833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 88.096723][ T6831] loop0: detected capacity change from 0 to 1024 [pid 6833] write(3, "1000", 4) = 4 [pid 6833] close(3) = 0 [pid 6833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6833] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6833] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6833] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6833] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6833] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1807]}, 88) = 1807 ./strace-static-x86_64: Process 6834 attached [pid 6833] rt_sigprocmask(SIG_SETMASK, [], [pid 6834] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6834] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6834] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6834] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6833] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6834] <... futex resumed>) = 0 [pid 6833] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6834] memfd_create("syzkaller", 0) = 3 [pid 6834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6834] munmap(0x7f15b9a45000, 524288) = 0 [pid 6834] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6834] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6834] close(3) = 0 [pid 6834] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6834] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6834] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6834] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6834] ioctl(4, LOOP_CLR_FD) = 0 [pid 6834] close(4) = 0 [pid 6834] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6833] <... futex resumed>) = 0 [pid 6833] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6833] <... futex resumed>) = 0 [pid 6833] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6834] <... mknodat resumed>) = 0 [pid 6833] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6833] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6834] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] <... mprotect resumed>) = 0 [pid 6834] <... futex resumed>) = 0 [pid 6833] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6834] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6835 attached => {parent_tid=[1808]}, 88) = 1808 [pid 6835] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6835] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6833] rt_sigprocmask(SIG_SETMASK, [], [pid 6835] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6833] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6833] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6835] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6835] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6835] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6835] chdir(".") = 0 [pid 6835] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6833] <... futex resumed>) = 0 [pid 6833] close(3) = 0 [pid 6833] close(4) = 0 [pid 6833] close(5) = -1 EBADF (Bad file descriptor) [pid 6833] close(6) = -1 EBADF (Bad file descriptor) [pid 6833] close(7) = -1 EBADF (Bad file descriptor) [pid 6833] close(8) = -1 EBADF (Bad file descriptor) [pid 6833] close(9) = -1 EBADF (Bad file descriptor) [pid 6833] close(10) = -1 EBADF (Bad file descriptor) [pid 6833] close(11) = -1 EBADF (Bad file descriptor) [pid 6833] close(12) = -1 EBADF (Bad file descriptor) [pid 6833] close(13) = -1 EBADF (Bad file descriptor) [pid 6833] close(14) = -1 EBADF (Bad file descriptor) [pid 6833] close(15) = -1 EBADF (Bad file descriptor) [pid 6833] close(16) = -1 EBADF (Bad file descriptor) [pid 6833] close(17) = -1 EBADF (Bad file descriptor) [pid 6833] close(18) = -1 EBADF (Bad file descriptor) [pid 6833] close(19) = -1 EBADF (Bad file descriptor) [pid 6833] close(20) = -1 EBADF (Bad file descriptor) [pid 6833] close(21) = -1 EBADF (Bad file descriptor) [pid 6833] close(22 [pid 6835] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6833] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6833] close(23) = -1 EBADF (Bad file descriptor) [pid 6833] close(24) = -1 EBADF (Bad file descriptor) [pid 6833] close(25) = -1 EBADF (Bad file descriptor) [pid 6833] close(26) = -1 EBADF (Bad file descriptor) [pid 6833] close(27) = -1 EBADF (Bad file descriptor) [pid 6833] close(28) = -1 EBADF (Bad file descriptor) [pid 6833] close(29) = -1 EBADF (Bad file descriptor) [pid 6833] exit_group(0) = ? [pid 6834] <... futex resumed>) = ? [pid 6835] <... futex resumed>) = ? [pid 6834] +++ exited with 0 +++ [pid 6835] +++ exited with 0 +++ [pid 6833] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1806, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./602", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./602", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./602/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./602/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./602/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./602/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./602") = 0 [pid 5019] mkdir("./603", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1809 ./strace-static-x86_64: Process 6836 attached [pid 6836] set_robust_list(0x555556a426a0, 24) = 0 [pid 6836] chdir("./603") = 0 [pid 6836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6836] setpgid(0, 0) = 0 [pid 6836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6836] write(3, "1000", 4) = 4 [pid 6836] close(3) = 0 [pid 6836] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6836] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6836] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6836] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 88.174450][ T6834] loop0: detected capacity change from 0 to 1024 [pid 6836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6837 attached => {parent_tid=[1810]}, 88) = 1810 [pid 6836] rt_sigprocmask(SIG_SETMASK, [], [pid 6837] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6837] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6836] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] rt_sigprocmask(SIG_SETMASK, [], [pid 6836] <... futex resumed>) = 0 [pid 6837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6836] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6837] memfd_create("syzkaller", 0) = 3 [pid 6837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6837] munmap(0x7f15b9a45000, 524288) = 0 [pid 6837] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6837] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6837] close(3) = 0 [pid 6837] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6837] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6837] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6837] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6837] ioctl(4, LOOP_CLR_FD) = 0 [pid 6837] close(4) = 0 [pid 6837] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6836] <... futex resumed>) = 0 [pid 6836] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6836] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6837] <... futex resumed>) = 1 [pid 6836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6837] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6836] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6836] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1811]}, 88) = 1811 [pid 6836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6836] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6836] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6837] <... mknodat resumed>) = 0 ./strace-static-x86_64: Process 6838 attached [pid 6838] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6838] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6838] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6838] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6837] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6837] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6838] <... mount resumed>) = 0 [pid 6838] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6838] chdir(".") = 0 [pid 6838] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6836] <... futex resumed>) = 0 [pid 6836] close(3) = 0 [pid 6836] close(4 [pid 6838] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6836] <... close resumed>) = 0 [pid 6836] close(5) = -1 EBADF (Bad file descriptor) [pid 6836] close(6) = -1 EBADF (Bad file descriptor) [pid 6836] close(7) = -1 EBADF (Bad file descriptor) [pid 6836] close(8) = -1 EBADF (Bad file descriptor) [pid 6836] close(9) = -1 EBADF (Bad file descriptor) [pid 6836] close(10) = -1 EBADF (Bad file descriptor) [pid 6836] close(11) = -1 EBADF (Bad file descriptor) [pid 6836] close(12) = -1 EBADF (Bad file descriptor) [pid 6836] close(13) = -1 EBADF (Bad file descriptor) [pid 6836] close(14) = -1 EBADF (Bad file descriptor) [pid 6836] close(15) = -1 EBADF (Bad file descriptor) [pid 6836] close(16) = -1 EBADF (Bad file descriptor) [pid 6836] close(17) = -1 EBADF (Bad file descriptor) [pid 6836] close(18) = -1 EBADF (Bad file descriptor) [pid 6836] close(19) = -1 EBADF (Bad file descriptor) [pid 6836] close(20) = -1 EBADF (Bad file descriptor) [pid 6836] close(21) = -1 EBADF (Bad file descriptor) [pid 6836] close(22) = -1 EBADF (Bad file descriptor) [pid 6836] close(23) = -1 EBADF (Bad file descriptor) [pid 6836] close(24) = -1 EBADF (Bad file descriptor) [pid 6836] close(25) = -1 EBADF (Bad file descriptor) [pid 6836] close(26) = -1 EBADF (Bad file descriptor) [pid 6836] close(27) = -1 EBADF (Bad file descriptor) [pid 6836] close(28) = -1 EBADF (Bad file descriptor) [pid 6836] close(29) = -1 EBADF (Bad file descriptor) [pid 6836] exit_group(0 [pid 6838] <... futex resumed>) = ? [pid 6837] <... futex resumed>) = ? [pid 6836] <... exit_group resumed>) = ? [pid 6838] +++ exited with 0 +++ [pid 6837] +++ exited with 0 +++ [pid 6836] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1809, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./603", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./603", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./603/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./603/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./603/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./603") = 0 [pid 5019] mkdir("./604", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 88.244316][ T6837] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1812 ./strace-static-x86_64: Process 6839 attached [pid 6839] set_robust_list(0x555556a426a0, 24) = 0 [pid 6839] chdir("./604") = 0 [pid 6839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6839] setpgid(0, 0) = 0 [pid 6839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6839] write(3, "1000", 4) = 4 [pid 6839] close(3) = 0 [pid 6839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6839] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6839] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1813]}, 88) = 1813 [pid 6839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6839] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6839] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6840 attached [pid 6840] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6840] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6840] memfd_create("syzkaller", 0) = 3 [pid 6840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6840] munmap(0x7f15b9a45000, 524288) = 0 [pid 6840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6840] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6840] close(3) = 0 [pid 6840] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6840] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6840] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6840] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6840] ioctl(4, LOOP_CLR_FD) = 0 [pid 6840] close(4) = 0 [pid 6840] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6840] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6839] <... futex resumed>) = 0 [pid 6839] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] <... futex resumed>) = 0 [pid 6839] <... futex resumed>) = 1 [pid 6840] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6839] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] <... mknodat resumed>) = 0 [pid 6839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6840] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6840] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6839] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6839] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6841 attached [pid 6841] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6839] <... clone3 resumed> => {parent_tid=[1814]}, 88) = 1814 [pid 6841] <... rseq resumed>) = 0 [pid 6839] rt_sigprocmask(SIG_SETMASK, [], [pid 6841] set_robust_list(0x7f15b9ac49a0, 24 [pid 6839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6839] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6841] <... set_robust_list resumed>) = 0 [pid 6839] <... futex resumed>) = 0 [pid 6841] rt_sigprocmask(SIG_SETMASK, [], [pid 6839] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6841] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6841] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6841] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6841] chdir(".") = 0 [pid 6841] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6839] <... futex resumed>) = 0 [pid 6841] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6839] close(3) = 0 [pid 6839] close(4) = 0 [pid 6839] close(5) = -1 EBADF (Bad file descriptor) [pid 6839] close(6) = -1 EBADF (Bad file descriptor) [pid 6839] close(7) = -1 EBADF (Bad file descriptor) [pid 6839] close(8) = -1 EBADF (Bad file descriptor) [pid 6839] close(9) = -1 EBADF (Bad file descriptor) [pid 6839] close(10) = -1 EBADF (Bad file descriptor) [pid 6839] close(11) = -1 EBADF (Bad file descriptor) [pid 6839] close(12) = -1 EBADF (Bad file descriptor) [pid 6839] close(13) = -1 EBADF (Bad file descriptor) [pid 6839] close(14) = -1 EBADF (Bad file descriptor) [pid 6839] close(15) = -1 EBADF (Bad file descriptor) [pid 6839] close(16) = -1 EBADF (Bad file descriptor) [pid 6839] close(17) = -1 EBADF (Bad file descriptor) [pid 6839] close(18) = -1 EBADF (Bad file descriptor) [pid 6839] close(19) = -1 EBADF (Bad file descriptor) [pid 6839] close(20) = -1 EBADF (Bad file descriptor) [pid 6839] close(21) = -1 EBADF (Bad file descriptor) [pid 6839] close(22) = -1 EBADF (Bad file descriptor) [pid 6839] close(23) = -1 EBADF (Bad file descriptor) [pid 6839] close(24) = -1 EBADF (Bad file descriptor) [pid 6839] close(25) = -1 EBADF (Bad file descriptor) [pid 6839] close(26) = -1 EBADF (Bad file descriptor) [pid 6839] close(27) = -1 EBADF (Bad file descriptor) [pid 6839] close(28) = -1 EBADF (Bad file descriptor) [pid 6839] close(29) = -1 EBADF (Bad file descriptor) [pid 6839] exit_group(0 [pid 6841] <... futex resumed>) = ? [pid 6840] <... futex resumed>) = ? [pid 6839] <... exit_group resumed>) = ? [pid 6841] +++ exited with 0 +++ [pid 6840] +++ exited with 0 +++ [pid 6839] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1812, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./604", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./604", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./604/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./604/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./604/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./604") = 0 [pid 5019] mkdir("./605", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1815 ./strace-static-x86_64: Process 6842 attached [pid 6842] set_robust_list(0x555556a426a0, 24) = 0 [pid 6842] chdir("./605") = 0 [pid 6842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6842] setpgid(0, 0) = 0 [pid 6842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6842] write(3, "1000", 4) = 4 [pid 6842] close(3) = 0 [pid 6842] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6842] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6842] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 88.318884][ T6840] loop0: detected capacity change from 0 to 1024 [pid 6842] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6842] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6843 attached [pid 6843] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6843] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6843] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6842] <... clone3 resumed> => {parent_tid=[1816]}, 88) = 1816 [pid 6842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6842] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6843] <... futex resumed>) = 0 [pid 6842] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6843] memfd_create("syzkaller", 0) = 3 [pid 6843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6843] munmap(0x7f15b9a45000, 524288) = 0 [pid 6843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6843] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6843] close(3) = 0 [pid 6843] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6843] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6843] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6843] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6843] ioctl(4, LOOP_CLR_FD) = 0 [pid 6843] close(4) = 0 [pid 6843] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... futex resumed>) = 0 [pid 6842] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6842] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6842] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6842] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6843] <... futex resumed>) = 1 [pid 6842] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6843] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6844 attached [pid 6844] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6844] set_robust_list(0x7f15b9ac49a0, 24 [pid 6842] <... clone3 resumed> => {parent_tid=[1817]}, 88) = 1817 [pid 6844] <... set_robust_list resumed>) = 0 [pid 6844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6844] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6842] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6844] <... futex resumed>) = 0 [pid 6844] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6844] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6842] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6843] <... mknodat resumed>) = 0 [pid 6843] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6843] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6844] <... mount resumed>) = 0 [pid 6844] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6844] chdir(".") = 0 [pid 6844] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6842] <... futex resumed>) = 0 [pid 6842] close(3) = 0 [pid 6842] close(4) = 0 [pid 6842] close(5) = -1 EBADF (Bad file descriptor) [pid 6844] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6842] close(6) = -1 EBADF (Bad file descriptor) [pid 6842] close(7) = -1 EBADF (Bad file descriptor) [pid 6842] close(8) = -1 EBADF (Bad file descriptor) [pid 6842] close(9) = -1 EBADF (Bad file descriptor) [pid 6842] close(10) = -1 EBADF (Bad file descriptor) [pid 6842] close(11) = -1 EBADF (Bad file descriptor) [pid 6842] close(12) = -1 EBADF (Bad file descriptor) [pid 6842] close(13) = -1 EBADF (Bad file descriptor) [pid 6842] close(14) = -1 EBADF (Bad file descriptor) [pid 6842] close(15) = -1 EBADF (Bad file descriptor) [pid 6842] close(16) = -1 EBADF (Bad file descriptor) [pid 6842] close(17) = -1 EBADF (Bad file descriptor) [pid 6842] close(18) = -1 EBADF (Bad file descriptor) [pid 6842] close(19) = -1 EBADF (Bad file descriptor) [pid 6842] close(20) = -1 EBADF (Bad file descriptor) [pid 6842] close(21) = -1 EBADF (Bad file descriptor) [pid 6842] close(22) = -1 EBADF (Bad file descriptor) [pid 6842] close(23) = -1 EBADF (Bad file descriptor) [pid 6842] close(24) = -1 EBADF (Bad file descriptor) [pid 6842] close(25) = -1 EBADF (Bad file descriptor) [pid 6842] close(26) = -1 EBADF (Bad file descriptor) [pid 6842] close(27) = -1 EBADF (Bad file descriptor) [pid 6842] close(28) = -1 EBADF (Bad file descriptor) [pid 6842] close(29) = -1 EBADF (Bad file descriptor) [pid 6842] exit_group(0 [pid 6843] <... futex resumed>) = ? [pid 6844] <... futex resumed>) = ? [pid 6842] <... exit_group resumed>) = ? [pid 6844] +++ exited with 0 +++ [pid 6843] +++ exited with 0 +++ [pid 6842] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1815, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./605", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./605", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./605/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./605/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./605/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./605/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./605") = 0 [pid 5019] mkdir("./606", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1818 ./strace-static-x86_64: Process 6845 attached [pid 6845] set_robust_list(0x555556a426a0, 24) = 0 [pid 6845] chdir("./606") = 0 [pid 6845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6845] setpgid(0, 0) = 0 [pid 6845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6845] write(3, "1000", 4) = 4 [ 88.390501][ T6843] loop0: detected capacity change from 0 to 1024 [pid 6845] close(3) = 0 [pid 6845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6845] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6845] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6845] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1819]}, 88) = 1819 ./strace-static-x86_64: Process 6846 attached [pid 6846] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6846] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6846] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6845] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6846] <... futex resumed>) = 0 [pid 6845] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6846] memfd_create("syzkaller", 0) = 3 [pid 6846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6846] munmap(0x7f15b9a45000, 524288) = 0 [pid 6846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6846] close(3) = 0 [pid 6846] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6846] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6846] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6846] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6846] ioctl(4, LOOP_CLR_FD) = 0 [pid 6846] close(4) = 0 [pid 6846] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6845] <... futex resumed>) = 0 [pid 6845] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6845] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6845] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1820]}, 88) = 1820 [pid 6845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6845] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6847 attached [pid 6847] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6847] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6847] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6847] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6846] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6847] <... mount resumed>) = 0 [pid 6847] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6847] chdir(".") = 0 [pid 6847] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... futex resumed>) = 0 [pid 6847] <... futex resumed>) = 1 [pid 6847] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6846] <... mknodat resumed>) = 0 [pid 6846] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6845] close(3) = 0 [pid 6845] close(4) = 0 [pid 6845] close(5) = -1 EBADF (Bad file descriptor) [pid 6845] close(6) = -1 EBADF (Bad file descriptor) [pid 6845] close(7) = -1 EBADF (Bad file descriptor) [pid 6845] close(8) = -1 EBADF (Bad file descriptor) [pid 6845] close(9) = -1 EBADF (Bad file descriptor) [pid 6845] close(10) = -1 EBADF (Bad file descriptor) [pid 6845] close(11) = -1 EBADF (Bad file descriptor) [pid 6845] close(12) = -1 EBADF (Bad file descriptor) [pid 6845] close(13) = -1 EBADF (Bad file descriptor) [pid 6845] close(14) = -1 EBADF (Bad file descriptor) [pid 6845] close(15) = -1 EBADF (Bad file descriptor) [pid 6845] close(16) = -1 EBADF (Bad file descriptor) [pid 6845] close(17) = -1 EBADF (Bad file descriptor) [pid 6845] close(18) = -1 EBADF (Bad file descriptor) [pid 6845] close(19) = -1 EBADF (Bad file descriptor) [pid 6845] close(20) = -1 EBADF (Bad file descriptor) [pid 6845] close(21) = -1 EBADF (Bad file descriptor) [pid 6845] close(22) = -1 EBADF (Bad file descriptor) [pid 6845] close(23) = -1 EBADF (Bad file descriptor) [pid 6845] close(24) = -1 EBADF (Bad file descriptor) [pid 6845] close(25) = -1 EBADF (Bad file descriptor) [pid 6845] close(26) = -1 EBADF (Bad file descriptor) [pid 6845] close(27) = -1 EBADF (Bad file descriptor) [pid 6845] close(28) = -1 EBADF (Bad file descriptor) [pid 6845] close(29) = -1 EBADF (Bad file descriptor) [pid 6845] exit_group(0 [pid 6847] <... futex resumed>) = ? [pid 6845] <... exit_group resumed>) = ? [pid 6847] +++ exited with 0 +++ [pid 6846] +++ exited with 0 +++ [pid 6845] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1818, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./606", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./606", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./606/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./606/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./606/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./606/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./606") = 0 [pid 5019] mkdir("./607", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 88.472356][ T6846] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1821 ./strace-static-x86_64: Process 6848 attached [pid 6848] set_robust_list(0x555556a426a0, 24) = 0 [pid 6848] chdir("./607") = 0 [pid 6848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6848] setpgid(0, 0) = 0 [pid 6848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6848] write(3, "1000", 4) = 4 [pid 6848] close(3) = 0 [pid 6848] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6848] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6848] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6848] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6848] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6848] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1822]}, 88) = 1822 [pid 6848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6848] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6848] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6849 attached [pid 6849] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6849] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6849] memfd_create("syzkaller", 0) = 3 [pid 6849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6849] munmap(0x7f15b9a45000, 524288) = 0 [pid 6849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6849] close(3) = 0 [pid 6849] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6849] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6849] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6849] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6849] ioctl(4, LOOP_CLR_FD) = 0 [pid 6849] close(4) = 0 [pid 6849] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6848] <... futex resumed>) = 0 [pid 6848] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6848] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6848] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6848] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1823]}, 88) = 1823 [pid 6849] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6848] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6848] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6849] <... mknodat resumed>) = 0 [pid 6849] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6849] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6850 attached [pid 6850] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6850] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6850] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6850] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6850] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6850] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6850] chdir(".") = 0 [pid 6850] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6848] <... futex resumed>) = 0 [pid 6848] close(3) = 0 [pid 6848] close(4) = 0 [pid 6848] close(5) = -1 EBADF (Bad file descriptor) [pid 6848] close(6) = -1 EBADF (Bad file descriptor) [pid 6848] close(7) = -1 EBADF (Bad file descriptor) [pid 6848] close(8) = -1 EBADF (Bad file descriptor) [pid 6848] close(9) = -1 EBADF (Bad file descriptor) [pid 6848] close(10) = -1 EBADF (Bad file descriptor) [pid 6848] close(11) = -1 EBADF (Bad file descriptor) [pid 6848] close(12) = -1 EBADF (Bad file descriptor) [pid 6848] close(13) = -1 EBADF (Bad file descriptor) [pid 6848] close(14) = -1 EBADF (Bad file descriptor) [pid 6848] close(15) = -1 EBADF (Bad file descriptor) [pid 6848] close(16) = -1 EBADF (Bad file descriptor) [pid 6848] close(17) = -1 EBADF (Bad file descriptor) [pid 6848] close(18) = -1 EBADF (Bad file descriptor) [pid 6848] close(19) = -1 EBADF (Bad file descriptor) [pid 6848] close(20) = -1 EBADF (Bad file descriptor) [pid 6850] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6848] close(21) = -1 EBADF (Bad file descriptor) [pid 6848] close(22) = -1 EBADF (Bad file descriptor) [pid 6848] close(23) = -1 EBADF (Bad file descriptor) [pid 6848] close(24) = -1 EBADF (Bad file descriptor) [pid 6848] close(25) = -1 EBADF (Bad file descriptor) [pid 6848] close(26) = -1 EBADF (Bad file descriptor) [pid 6848] close(27) = -1 EBADF (Bad file descriptor) [pid 6848] close(28) = -1 EBADF (Bad file descriptor) [pid 6848] close(29) = -1 EBADF (Bad file descriptor) [pid 6848] exit_group(0) = ? [pid 6850] <... futex resumed>) = ? [pid 6849] <... futex resumed>) = ? [pid 6849] +++ exited with 0 +++ [pid 6850] +++ exited with 0 +++ [pid 6848] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1821, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./607", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./607", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./607/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./607/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./607/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./607/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./607") = 0 [pid 5019] mkdir("./608", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1824 ./strace-static-x86_64: Process 6851 attached [ 88.547832][ T6849] loop0: detected capacity change from 0 to 1024 [pid 6851] set_robust_list(0x555556a426a0, 24) = 0 [pid 6851] chdir("./608") = 0 [pid 6851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6851] setpgid(0, 0) = 0 [pid 6851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6851] write(3, "1000", 4) = 4 [pid 6851] close(3) = 0 [pid 6851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6851] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6851] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6851] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6851] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6852 attached => {parent_tid=[1825]}, 88) = 1825 [pid 6852] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6852] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6852] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6851] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6852] <... futex resumed>) = 0 [pid 6851] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6852] memfd_create("syzkaller", 0) = 3 [pid 6852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6852] munmap(0x7f15b9a45000, 524288) = 0 [pid 6852] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6852] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6852] close(3) = 0 [pid 6852] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6852] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6852] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6852] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6852] ioctl(4, LOOP_CLR_FD) = 0 [pid 6852] close(4) = 0 [pid 6852] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6851] <... futex resumed>) = 0 [pid 6851] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6851] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6852] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6851] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1826]}, 88) = 1826 [pid 6851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6851] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6852] <... mknodat resumed>) = 0 [pid 6851] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6852] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6852] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6853 attached [pid 6853] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6853] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6853] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6853] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6853] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6853] chdir(".") = 0 [pid 6853] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6851] <... futex resumed>) = 0 [pid 6851] close(3) = 0 [pid 6851] close(4) = 0 [pid 6851] close(5) = -1 EBADF (Bad file descriptor) [pid 6851] close(6) = -1 EBADF (Bad file descriptor) [pid 6851] close(7) = -1 EBADF (Bad file descriptor) [pid 6851] close(8) = -1 EBADF (Bad file descriptor) [pid 6851] close(9) = -1 EBADF (Bad file descriptor) [pid 6851] close(10) = -1 EBADF (Bad file descriptor) [pid 6851] close(11) = -1 EBADF (Bad file descriptor) [pid 6851] close(12) = -1 EBADF (Bad file descriptor) [pid 6851] close(13) = -1 EBADF (Bad file descriptor) [pid 6851] close(14) = -1 EBADF (Bad file descriptor) [pid 6853] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6851] close(15) = -1 EBADF (Bad file descriptor) [pid 6851] close(16) = -1 EBADF (Bad file descriptor) [pid 6851] close(17) = -1 EBADF (Bad file descriptor) [pid 6851] close(18) = -1 EBADF (Bad file descriptor) [pid 6851] close(19) = -1 EBADF (Bad file descriptor) [pid 6851] close(20) = -1 EBADF (Bad file descriptor) [pid 6851] close(21) = -1 EBADF (Bad file descriptor) [pid 6851] close(22) = -1 EBADF (Bad file descriptor) [pid 6851] close(23) = -1 EBADF (Bad file descriptor) [pid 6851] close(24) = -1 EBADF (Bad file descriptor) [pid 6851] close(25) = -1 EBADF (Bad file descriptor) [pid 6851] close(26) = -1 EBADF (Bad file descriptor) [pid 6851] close(27) = -1 EBADF (Bad file descriptor) [pid 6851] close(28) = -1 EBADF (Bad file descriptor) [pid 6851] close(29) = -1 EBADF (Bad file descriptor) [pid 6851] exit_group(0 [pid 6852] <... futex resumed>) = ? [pid 6853] <... futex resumed>) = ? [pid 6851] <... exit_group resumed>) = ? [pid 6852] +++ exited with 0 +++ [pid 6853] +++ exited with 0 +++ [pid 6851] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1824, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./608", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./608", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 88.629565][ T6852] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./608/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./608/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./608/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./608") = 0 [pid 5019] mkdir("./609", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1827 ./strace-static-x86_64: Process 6854 attached [pid 6854] set_robust_list(0x555556a426a0, 24) = 0 [pid 6854] chdir("./609") = 0 [pid 6854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6854] setpgid(0, 0) = 0 [pid 6854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6854] write(3, "1000", 4) = 4 [pid 6854] close(3) = 0 [pid 6854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6854] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6854] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6854] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1828]}, 88) = 1828 [pid 6854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6855 attached [pid 6854] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6855] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6855] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6855] memfd_create("syzkaller", 0) = 3 [pid 6855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6855] munmap(0x7f15b9a45000, 524288) = 0 [pid 6855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6855] close(3) = 0 [pid 6855] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6855] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6855] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6855] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6855] ioctl(4, LOOP_CLR_FD) = 0 [pid 6855] close(4) = 0 [pid 6855] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6854] <... futex resumed>) = 0 [pid 6854] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6855] <... futex resumed>) = 1 [pid 6854] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6854] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6856 attached [pid 6855] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6854] <... clone3 resumed> => {parent_tid=[1829]}, 88) = 1829 [pid 6854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6854] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6856] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6856] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6856] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6856] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6856] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6856] chdir(".") = 0 [pid 6856] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6854] <... futex resumed>) = 0 [pid 6856] <... futex resumed>) = 1 [pid 6856] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6855] <... mknodat resumed>) = 0 [pid 6855] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6854] close(3) = 0 [pid 6854] close(4) = 0 [pid 6854] close(5) = -1 EBADF (Bad file descriptor) [pid 6854] close(6) = -1 EBADF (Bad file descriptor) [pid 6854] close(7) = -1 EBADF (Bad file descriptor) [pid 6854] close(8) = -1 EBADF (Bad file descriptor) [pid 6854] close(9) = -1 EBADF (Bad file descriptor) [pid 6854] close(10) = -1 EBADF (Bad file descriptor) [pid 6854] close(11) = -1 EBADF (Bad file descriptor) [pid 6854] close(12) = -1 EBADF (Bad file descriptor) [pid 6854] close(13 [pid 6855] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6854] close(14) = -1 EBADF (Bad file descriptor) [pid 6854] close(15) = -1 EBADF (Bad file descriptor) [pid 6854] close(16) = -1 EBADF (Bad file descriptor) [pid 6854] close(17) = -1 EBADF (Bad file descriptor) [pid 6854] close(18) = -1 EBADF (Bad file descriptor) [pid 6854] close(19) = -1 EBADF (Bad file descriptor) [pid 6854] close(20) = -1 EBADF (Bad file descriptor) [pid 6854] close(21) = -1 EBADF (Bad file descriptor) [pid 6854] close(22) = -1 EBADF (Bad file descriptor) [pid 6854] close(23) = -1 EBADF (Bad file descriptor) [pid 6854] close(24) = -1 EBADF (Bad file descriptor) [pid 6854] close(25) = -1 EBADF (Bad file descriptor) [pid 6854] close(26) = -1 EBADF (Bad file descriptor) [pid 6854] close(27) = -1 EBADF (Bad file descriptor) [pid 6854] close(28) = -1 EBADF (Bad file descriptor) [pid 6854] close(29) = -1 EBADF (Bad file descriptor) [pid 6854] exit_group(0 [pid 6856] <... futex resumed>) = ? [pid 6854] <... exit_group resumed>) = ? [pid 6856] +++ exited with 0 +++ [pid 6855] <... futex resumed>) = ? [pid 6855] +++ exited with 0 +++ [pid 6854] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1827, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./609", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./609", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./609/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./609/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./609/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./609") = 0 [pid 5019] mkdir("./610", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1830 ./strace-static-x86_64: Process 6857 attached [pid 6857] set_robust_list(0x555556a426a0, 24) = 0 [pid 6857] chdir("./610") = 0 [pid 6857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6857] setpgid(0, 0) = 0 [pid 6857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6857] write(3, "1000", 4) = 4 [pid 6857] close(3) = 0 [pid 6857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6857] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6857] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6857] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1831]}, 88) = 1831 [pid 6857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6857] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6858 attached [pid 6858] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6858] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6858] memfd_create("syzkaller", 0) = 3 [pid 6858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 88.723199][ T6855] loop0: detected capacity change from 0 to 1024 [pid 6858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6858] munmap(0x7f15b9a45000, 524288) = 0 [pid 6858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6858] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6858] close(3) = 0 [pid 6858] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6858] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6858] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6858] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6858] ioctl(4, LOOP_CLR_FD) = 0 [pid 6858] close(4) = 0 [pid 6858] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6857] <... futex resumed>) = 0 [pid 6858] <... futex resumed>) = 1 [pid 6858] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6857] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6857] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1832]}, 88) = 1832 [pid 6857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6857] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6857] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6859 attached [pid 6858] <... mknodat resumed>) = 0 [pid 6858] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6859] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6858] <... futex resumed>) = 0 [pid 6859] <... rseq resumed>) = 0 [pid 6858] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6859] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6859] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6859] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6859] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6859] chdir(".") = 0 [pid 6859] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6857] <... futex resumed>) = 0 [pid 6857] close(3) = 0 [pid 6857] close(4) = 0 [pid 6857] close(5) = -1 EBADF (Bad file descriptor) [pid 6857] close(6) = -1 EBADF (Bad file descriptor) [pid 6857] close(7) = -1 EBADF (Bad file descriptor) [pid 6857] close(8) = -1 EBADF (Bad file descriptor) [pid 6857] close(9) = -1 EBADF (Bad file descriptor) [pid 6857] close(10) = -1 EBADF (Bad file descriptor) [pid 6857] close(11) = -1 EBADF (Bad file descriptor) [pid 6857] close(12) = -1 EBADF (Bad file descriptor) [pid 6857] close(13) = -1 EBADF (Bad file descriptor) [pid 6857] close(14) = -1 EBADF (Bad file descriptor) [pid 6857] close(15) = -1 EBADF (Bad file descriptor) [pid 6857] close(16) = -1 EBADF (Bad file descriptor) [pid 6857] close(17) = -1 EBADF (Bad file descriptor) [pid 6857] close(18) = -1 EBADF (Bad file descriptor) [pid 6857] close(19) = -1 EBADF (Bad file descriptor) [pid 6857] close(20) = -1 EBADF (Bad file descriptor) [pid 6859] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6857] close(21) = -1 EBADF (Bad file descriptor) [pid 6857] close(22) = -1 EBADF (Bad file descriptor) [pid 6857] close(23) = -1 EBADF (Bad file descriptor) [pid 6857] close(24) = -1 EBADF (Bad file descriptor) [pid 6857] close(25) = -1 EBADF (Bad file descriptor) [pid 6857] close(26) = -1 EBADF (Bad file descriptor) [pid 6857] close(27) = -1 EBADF (Bad file descriptor) [pid 6857] close(28) = -1 EBADF (Bad file descriptor) [pid 6857] close(29) = -1 EBADF (Bad file descriptor) [pid 6857] exit_group(0 [pid 6859] <... futex resumed>) = ? [pid 6858] <... futex resumed>) = ? [pid 6857] <... exit_group resumed>) = ? [pid 6858] +++ exited with 0 +++ [pid 6859] +++ exited with 0 +++ [pid 6857] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1830, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5019] umount2("./610", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./610", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./610/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./610/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./610/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./610/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./610/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./610/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./610/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./610/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./610/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./610") = 0 [pid 5019] mkdir("./611", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1833 ./strace-static-x86_64: Process 6860 attached [pid 6860] set_robust_list(0x555556a426a0, 24) = 0 [pid 6860] chdir("./611") = 0 [pid 6860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6860] setpgid(0, 0) = 0 [pid 6860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6860] write(3, "1000", 4) = 4 [pid 6860] close(3) = 0 [pid 6860] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6860] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6860] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6860] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6860] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1834]}, 88) = 1834 [pid 6860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6860] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6861 attached [pid 6861] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [ 88.785788][ T6858] loop0: detected capacity change from 0 to 1024 [pid 6861] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6861] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6861] memfd_create("syzkaller", 0) = 3 [pid 6861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6861] munmap(0x7f15b9a45000, 524288) = 0 [pid 6861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6861] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6861] close(3) = 0 [pid 6861] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6861] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6861] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6861] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6861] ioctl(4, LOOP_CLR_FD) = 0 [pid 6861] close(4) = 0 [pid 6861] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6860] <... futex resumed>) = 0 [pid 6860] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6860] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6860] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1835]}, 88) = 1835 [pid 6860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6860] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6860] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6862 attached [pid 6862] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6862] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6862] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6862] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6861] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6861] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6861] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6862] <... mount resumed>) = 0 [pid 6862] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6862] chdir(".") = 0 [pid 6862] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6860] <... futex resumed>) = 0 [pid 6862] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6860] close(3) = 0 [pid 6860] close(4) = 0 [pid 6860] close(5) = -1 EBADF (Bad file descriptor) [pid 6860] close(6) = -1 EBADF (Bad file descriptor) [pid 6860] close(7) = -1 EBADF (Bad file descriptor) [pid 6860] close(8) = -1 EBADF (Bad file descriptor) [pid 6860] close(9) = -1 EBADF (Bad file descriptor) [pid 6860] close(10) = -1 EBADF (Bad file descriptor) [pid 6860] close(11) = -1 EBADF (Bad file descriptor) [pid 6860] close(12) = -1 EBADF (Bad file descriptor) [pid 6860] close(13) = -1 EBADF (Bad file descriptor) [pid 6860] close(14) = -1 EBADF (Bad file descriptor) [pid 6860] close(15) = -1 EBADF (Bad file descriptor) [pid 6860] close(16) = -1 EBADF (Bad file descriptor) [pid 6860] close(17) = -1 EBADF (Bad file descriptor) [pid 6860] close(18) = -1 EBADF (Bad file descriptor) [pid 6860] close(19) = -1 EBADF (Bad file descriptor) [pid 6860] close(20) = -1 EBADF (Bad file descriptor) [pid 6860] close(21) = -1 EBADF (Bad file descriptor) [pid 6860] close(22) = -1 EBADF (Bad file descriptor) [pid 6860] close(23) = -1 EBADF (Bad file descriptor) [pid 6860] close(24) = -1 EBADF (Bad file descriptor) [pid 6860] close(25) = -1 EBADF (Bad file descriptor) [pid 6860] close(26) = -1 EBADF (Bad file descriptor) [pid 6860] close(27) = -1 EBADF (Bad file descriptor) [pid 6860] close(28) = -1 EBADF (Bad file descriptor) [pid 6860] close(29) = -1 EBADF (Bad file descriptor) [pid 6860] exit_group(0) = ? [pid 6861] <... futex resumed>) = ? [pid 6862] <... futex resumed>) = ? [pid 6862] +++ exited with 0 +++ [pid 6861] +++ exited with 0 +++ [pid 6860] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1833, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./611", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./611", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./611/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./611/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./611/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./611") = 0 [pid 5019] mkdir("./612", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1836 ./strace-static-x86_64: Process 6863 attached [pid 6863] set_robust_list(0x555556a426a0, 24) = 0 [pid 6863] chdir("./612") = 0 [pid 6863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6863] setpgid(0, 0) = 0 [ 88.857265][ T6861] loop0: detected capacity change from 0 to 1024 [pid 6863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6863] write(3, "1000", 4) = 4 [pid 6863] close(3) = 0 [pid 6863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6863] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6863] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6863] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6863] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6864 attached [pid 6864] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6864] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6864] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6863] <... clone3 resumed> => {parent_tid=[1837]}, 88) = 1837 [pid 6863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6863] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6864] <... futex resumed>) = 0 [pid 6864] memfd_create("syzkaller", 0 [pid 6863] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6864] <... memfd_create resumed>) = 3 [pid 6864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6864] munmap(0x7f15b9a45000, 524288) = 0 [pid 6864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6864] close(3) = 0 [pid 6864] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6864] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6864] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6864] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6864] ioctl(4, LOOP_CLR_FD) = 0 [pid 6864] close(4) = 0 [pid 6864] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6863] <... futex resumed>) = 0 [pid 6863] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6863] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6863] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1838]}, 88) = 1838 [pid 6863] rt_sigprocmask(SIG_SETMASK, [], [pid 6864] <... futex resumed>) = 1 [pid 6863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6864] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6863] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6865 attached ) = 0 [pid 6863] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6865] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6865] set_robust_list(0x7f15b9ac49a0, 24 [pid 6864] <... mknodat resumed>) = 0 [pid 6864] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6865] <... set_robust_list resumed>) = 0 [pid 6864] <... futex resumed>) = 0 [pid 6864] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6865] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6865] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6865] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6865] chdir(".") = 0 [pid 6865] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6863] <... futex resumed>) = 0 [pid 6863] close(3) = 0 [pid 6863] close(4 [pid 6865] <... futex resumed>) = 1 [pid 6863] <... close resumed>) = 0 [pid 6865] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6863] close(5) = -1 EBADF (Bad file descriptor) [pid 6863] close(6) = -1 EBADF (Bad file descriptor) [pid 6863] close(7) = -1 EBADF (Bad file descriptor) [pid 6863] close(8) = -1 EBADF (Bad file descriptor) [pid 6863] close(9) = -1 EBADF (Bad file descriptor) [pid 6863] close(10) = -1 EBADF (Bad file descriptor) [pid 6863] close(11) = -1 EBADF (Bad file descriptor) [pid 6863] close(12) = -1 EBADF (Bad file descriptor) [pid 6863] close(13) = -1 EBADF (Bad file descriptor) [pid 6863] close(14) = -1 EBADF (Bad file descriptor) [pid 6863] close(15) = -1 EBADF (Bad file descriptor) [pid 6863] close(16) = -1 EBADF (Bad file descriptor) [pid 6863] close(17) = -1 EBADF (Bad file descriptor) [pid 6863] close(18) = -1 EBADF (Bad file descriptor) [pid 6863] close(19) = -1 EBADF (Bad file descriptor) [pid 6863] close(20) = -1 EBADF (Bad file descriptor) [pid 6863] close(21) = -1 EBADF (Bad file descriptor) [pid 6863] close(22) = -1 EBADF (Bad file descriptor) [pid 6863] close(23) = -1 EBADF (Bad file descriptor) [pid 6863] close(24) = -1 EBADF (Bad file descriptor) [pid 6863] close(25) = -1 EBADF (Bad file descriptor) [pid 6863] close(26) = -1 EBADF (Bad file descriptor) [pid 6863] close(27) = -1 EBADF (Bad file descriptor) [pid 6863] close(28) = -1 EBADF (Bad file descriptor) [pid 6863] close(29) = -1 EBADF (Bad file descriptor) [pid 6863] exit_group(0 [pid 6865] <... futex resumed>) = ? [pid 6864] <... futex resumed>) = ? [pid 6863] <... exit_group resumed>) = ? [pid 6865] +++ exited with 0 +++ [pid 6864] +++ exited with 0 +++ [pid 6863] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1836, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./612", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./612", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./612/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./612/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./612/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./612/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./612/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./612/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./612/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./612/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./612/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./612") = 0 [pid 5019] mkdir("./613", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1839 ./strace-static-x86_64: Process 6866 attached [pid 6866] set_robust_list(0x555556a426a0, 24) = 0 [pid 6866] chdir("./613") = 0 [pid 6866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6866] setpgid(0, 0) = 0 [pid 6866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6866] write(3, "1000", 4) = 4 [pid 6866] close(3) = 0 [pid 6866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6866] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6866] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6866] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6866] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6867 attached [pid 6867] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6866] <... clone3 resumed> => {parent_tid=[1840]}, 88) = 1840 [pid 6867] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6867] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6866] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6867] <... futex resumed>) = 0 [pid 6866] <... futex resumed>) = 1 [pid 6866] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6867] memfd_create("syzkaller", 0) = 3 [pid 6867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 88.935173][ T6864] loop0: detected capacity change from 0 to 1024 [pid 6867] munmap(0x7f15b9a45000, 524288) = 0 [pid 6867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6867] close(3) = 0 [pid 6867] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6867] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6867] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6867] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6867] ioctl(4, LOOP_CLR_FD) = 0 [pid 6867] close(4) = 0 [pid 6867] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6866] <... futex resumed>) = 0 [pid 6866] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6866] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6866] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6868 attached => {parent_tid=[1841]}, 88) = 1841 [pid 6866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6866] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6866] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6867] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6868] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6868] set_robust_list(0x7f15b9ac49a0, 24 [pid 6867] <... mknodat resumed>) = 0 [pid 6868] <... set_robust_list resumed>) = 0 [pid 6868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6868] mkdir(".", 0777 [pid 6867] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6868] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6867] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6868] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6868] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6868] chdir(".") = 0 [pid 6868] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6866] <... futex resumed>) = 0 [pid 6866] close(3) = 0 [pid 6866] close(4) = 0 [pid 6866] close(5) = -1 EBADF (Bad file descriptor) [pid 6866] close(6) = -1 EBADF (Bad file descriptor) [pid 6866] close(7) = -1 EBADF (Bad file descriptor) [pid 6866] close(8) = -1 EBADF (Bad file descriptor) [pid 6866] close(9) = -1 EBADF (Bad file descriptor) [pid 6866] close(10) = -1 EBADF (Bad file descriptor) [pid 6866] close(11) = -1 EBADF (Bad file descriptor) [pid 6866] close(12) = -1 EBADF (Bad file descriptor) [pid 6866] close(13) = -1 EBADF (Bad file descriptor) [pid 6866] close(14) = -1 EBADF (Bad file descriptor) [pid 6866] close(15) = -1 EBADF (Bad file descriptor) [pid 6866] close(16 [pid 6868] <... futex resumed>) = 1 [pid 6866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6868] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6866] close(17) = -1 EBADF (Bad file descriptor) [pid 6866] close(18) = -1 EBADF (Bad file descriptor) [pid 6866] close(19) = -1 EBADF (Bad file descriptor) [pid 6866] close(20) = -1 EBADF (Bad file descriptor) [pid 6866] close(21) = -1 EBADF (Bad file descriptor) [pid 6866] close(22) = -1 EBADF (Bad file descriptor) [pid 6866] close(23) = -1 EBADF (Bad file descriptor) [pid 6866] close(24) = -1 EBADF (Bad file descriptor) [pid 6866] close(25) = -1 EBADF (Bad file descriptor) [pid 6866] close(26) = -1 EBADF (Bad file descriptor) [pid 6866] close(27) = -1 EBADF (Bad file descriptor) [pid 6866] close(28) = -1 EBADF (Bad file descriptor) [pid 6866] close(29) = -1 EBADF (Bad file descriptor) [pid 6866] exit_group(0 [pid 6868] <... futex resumed>) = ? [pid 6867] <... futex resumed>) = ? [pid 6866] <... exit_group resumed>) = ? [pid 6868] +++ exited with 0 +++ [pid 6867] +++ exited with 0 +++ [pid 6866] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1839, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./613", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./613", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./613/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./613/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./613/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./613/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./613") = 0 [pid 5019] mkdir("./614", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [ 88.997973][ T6867] loop0: detected capacity change from 0 to 1024 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6869 attached [pid 6869] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1842 [pid 6869] <... set_robust_list resumed>) = 0 [pid 6869] chdir("./614") = 0 [pid 6869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6869] setpgid(0, 0) = 0 [pid 6869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6869] write(3, "1000", 4) = 4 [pid 6869] close(3) = 0 [pid 6869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6869] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6869] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6869] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6869] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6869] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6870 attached [pid 6870] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6869] <... clone3 resumed> => {parent_tid=[1843]}, 88) = 1843 [pid 6870] <... rseq resumed>) = 0 [pid 6869] rt_sigprocmask(SIG_SETMASK, [], [pid 6870] set_robust_list(0x7f15c1e659a0, 24 [pid 6869] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6870] <... set_robust_list resumed>) = 0 [pid 6869] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6870] memfd_create("syzkaller", 0 [pid 6869] <... futex resumed>) = 0 [pid 6870] <... memfd_create resumed>) = 3 [pid 6870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6869] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6870] <... mmap resumed>) = 0x7f15b9a45000 [pid 6870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6870] munmap(0x7f15b9a45000, 524288) = 0 [pid 6870] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6870] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6870] close(3) = 0 [pid 6870] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6870] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6870] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6870] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6870] ioctl(4, LOOP_CLR_FD) = 0 [pid 6870] close(4) = 0 [pid 6870] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6869] <... futex resumed>) = 0 [pid 6870] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6869] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6869] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6870] <... mknodat resumed>) = 0 [pid 6869] <... mprotect resumed>) = 0 [pid 6870] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6869] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6870] <... futex resumed>) = 0 [pid 6869] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6869] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6870] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6869] <... clone3 resumed> => {parent_tid=[1844]}, 88) = 1844 [pid 6869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6869] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6871 attached [pid 6871] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6869] <... futex resumed>) = 0 [pid 6871] <... rseq resumed>) = 0 [pid 6871] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6869] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6871] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6871] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6871] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6871] chdir(".") = 0 [pid 6871] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6869] <... futex resumed>) = 0 [pid 6869] close(3) = 0 [pid 6869] close(4) = 0 [pid 6869] close(5) = -1 EBADF (Bad file descriptor) [pid 6869] close(6) = -1 EBADF (Bad file descriptor) [pid 6869] close(7) = -1 EBADF (Bad file descriptor) [pid 6869] close(8) = -1 EBADF (Bad file descriptor) [pid 6869] close(9) = -1 EBADF (Bad file descriptor) [pid 6869] close(10 [pid 6871] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6869] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6869] close(11) = -1 EBADF (Bad file descriptor) [pid 6869] close(12) = -1 EBADF (Bad file descriptor) [pid 6869] close(13) = -1 EBADF (Bad file descriptor) [pid 6869] close(14) = -1 EBADF (Bad file descriptor) [pid 6869] close(15) = -1 EBADF (Bad file descriptor) [pid 6869] close(16) = -1 EBADF (Bad file descriptor) [pid 6869] close(17) = -1 EBADF (Bad file descriptor) [pid 6869] close(18) = -1 EBADF (Bad file descriptor) [pid 6869] close(19) = -1 EBADF (Bad file descriptor) [pid 6869] close(20) = -1 EBADF (Bad file descriptor) [pid 6869] close(21) = -1 EBADF (Bad file descriptor) [pid 6869] close(22) = -1 EBADF (Bad file descriptor) [pid 6869] close(23) = -1 EBADF (Bad file descriptor) [pid 6869] close(24) = -1 EBADF (Bad file descriptor) [pid 6869] close(25) = -1 EBADF (Bad file descriptor) [pid 6869] close(26) = -1 EBADF (Bad file descriptor) [pid 6869] close(27) = -1 EBADF (Bad file descriptor) [pid 6869] close(28) = -1 EBADF (Bad file descriptor) [pid 6869] close(29) = -1 EBADF (Bad file descriptor) [pid 6869] exit_group(0 [pid 6871] <... futex resumed>) = ? [pid 6869] <... exit_group resumed>) = ? [pid 6871] +++ exited with 0 +++ [pid 6870] <... futex resumed>) = ? [pid 6870] +++ exited with 0 +++ [pid 6869] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1842, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./614", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./614", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./614/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./614/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./614/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./614/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./614/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./614/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./614/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./614/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./614/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./614") = 0 [pid 5019] mkdir("./615", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1845 ./strace-static-x86_64: Process 6872 attached [pid 6872] set_robust_list(0x555556a426a0, 24) = 0 [pid 6872] chdir("./615") = 0 [pid 6872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6872] setpgid(0, 0) = 0 [pid 6872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6872] write(3, "1000", 4) = 4 [pid 6872] close(3) = 0 [pid 6872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6872] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6872] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6872] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6872] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6872] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6873 attached [pid 6873] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6872] <... clone3 resumed> => {parent_tid=[1846]}, 88) = 1846 [pid 6872] rt_sigprocmask(SIG_SETMASK, [], [pid 6873] <... rseq resumed>) = 0 [pid 6872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6873] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6873] rt_sigprocmask(SIG_SETMASK, [], [pid 6872] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6872] <... futex resumed>) = 0 [pid 6873] memfd_create("syzkaller", 0) = 3 [pid 6872] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 89.074292][ T6870] loop0: detected capacity change from 0 to 1024 [pid 6873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6873] munmap(0x7f15b9a45000, 524288) = 0 [pid 6873] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6873] close(3) = 0 [pid 6873] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6873] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6873] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6873] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6873] ioctl(4, LOOP_CLR_FD) = 0 [pid 6873] close(4) = 0 [pid 6873] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6872] <... futex resumed>) = 0 [pid 6873] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6872] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6872] <... futex resumed>) = 0 [pid 6872] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6873] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6872] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6872] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6873] <... mknodat resumed>) = 0 [pid 6873] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6872] <... mprotect resumed>) = 0 [pid 6873] <... futex resumed>) = 0 [pid 6873] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6872] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6874 attached [pid 6874] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6874] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6874] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6872] <... clone3 resumed> => {parent_tid=[1847]}, 88) = 1847 [pid 6872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6872] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6874] <... futex resumed>) = 0 [pid 6874] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6874] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6872] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6874] <... mount resumed>) = 0 [pid 6874] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6874] chdir(".") = 0 [pid 6874] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6872] <... futex resumed>) = 0 [pid 6872] close(3) = 0 [pid 6872] close(4) = 0 [pid 6872] close(5 [pid 6874] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6872] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6872] close(6) = -1 EBADF (Bad file descriptor) [pid 6872] close(7) = -1 EBADF (Bad file descriptor) [pid 6872] close(8) = -1 EBADF (Bad file descriptor) [pid 6872] close(9) = -1 EBADF (Bad file descriptor) [pid 6872] close(10) = -1 EBADF (Bad file descriptor) [pid 6872] close(11) = -1 EBADF (Bad file descriptor) [pid 6872] close(12) = -1 EBADF (Bad file descriptor) [pid 6872] close(13) = -1 EBADF (Bad file descriptor) [pid 6872] close(14) = -1 EBADF (Bad file descriptor) [pid 6872] close(15) = -1 EBADF (Bad file descriptor) [pid 6872] close(16) = -1 EBADF (Bad file descriptor) [pid 6872] close(17) = -1 EBADF (Bad file descriptor) [pid 6872] close(18) = -1 EBADF (Bad file descriptor) [pid 6872] close(19) = -1 EBADF (Bad file descriptor) [pid 6872] close(20) = -1 EBADF (Bad file descriptor) [pid 6872] close(21) = -1 EBADF (Bad file descriptor) [pid 6872] close(22) = -1 EBADF (Bad file descriptor) [pid 6872] close(23) = -1 EBADF (Bad file descriptor) [pid 6872] close(24) = -1 EBADF (Bad file descriptor) [pid 6872] close(25) = -1 EBADF (Bad file descriptor) [pid 6872] close(26) = -1 EBADF (Bad file descriptor) [pid 6872] close(27) = -1 EBADF (Bad file descriptor) [pid 6872] close(28) = -1 EBADF (Bad file descriptor) [pid 6872] close(29) = -1 EBADF (Bad file descriptor) [pid 6872] exit_group(0 [pid 6874] <... futex resumed>) = ? [pid 6873] <... futex resumed>) = ? [pid 6872] <... exit_group resumed>) = ? [pid 6874] +++ exited with 0 +++ [pid 6873] +++ exited with 0 +++ [pid 6872] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1845, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./615", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./615", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./615/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./615/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./615/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./615/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./615/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./615/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./615/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./615/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./615/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [ 89.138633][ T6873] loop0: detected capacity change from 0 to 1024 [pid 5019] rmdir("./615") = 0 [pid 5019] mkdir("./616", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1848 ./strace-static-x86_64: Process 6875 attached [pid 6875] set_robust_list(0x555556a426a0, 24) = 0 [pid 6875] chdir("./616") = 0 [pid 6875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6875] setpgid(0, 0) = 0 [pid 6875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6875] write(3, "1000", 4) = 4 [pid 6875] close(3) = 0 [pid 6875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6875] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6875] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6875] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6875] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6876 attached => {parent_tid=[1849]}, 88) = 1849 [pid 6876] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6876] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6876] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6875] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6876] <... futex resumed>) = 0 [pid 6876] memfd_create("syzkaller", 0 [pid 6875] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6876] <... memfd_create resumed>) = 3 [pid 6876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6876] munmap(0x7f15b9a45000, 524288) = 0 [pid 6876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6876] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6876] close(3) = 0 [pid 6876] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6876] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6876] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6876] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6876] ioctl(4, LOOP_CLR_FD) = 0 [pid 6876] close(4) = 0 [pid 6876] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6876] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6875] <... futex resumed>) = 0 [pid 6875] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6875] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6876] <... futex resumed>) = 0 [pid 6875] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6875] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6876] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6875] <... mprotect resumed>) = 0 [pid 6875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6877 attached => {parent_tid=[1850]}, 88) = 1850 [pid 6875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6875] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6875] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6877] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6877] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6877] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6877] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6876] <... mknodat resumed>) = 0 [pid 6876] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6876] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6877] <... mount resumed>) = 0 [pid 6877] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6877] chdir(".") = 0 [pid 6877] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6875] <... futex resumed>) = 0 [pid 6875] close(3) = 0 [pid 6875] close(4) = 0 [pid 6875] close(5) = -1 EBADF (Bad file descriptor) [pid 6875] close(6) = -1 EBADF (Bad file descriptor) [pid 6875] close(7) = -1 EBADF (Bad file descriptor) [pid 6875] close(8) = -1 EBADF (Bad file descriptor) [pid 6875] close(9) = -1 EBADF (Bad file descriptor) [pid 6875] close(10) = -1 EBADF (Bad file descriptor) [pid 6875] close(11) = -1 EBADF (Bad file descriptor) [pid 6875] close(12) = -1 EBADF (Bad file descriptor) [pid 6875] close(13) = -1 EBADF (Bad file descriptor) [pid 6875] close(14) = -1 EBADF (Bad file descriptor) [pid 6875] close(15) = -1 EBADF (Bad file descriptor) [pid 6875] close(16) = -1 EBADF (Bad file descriptor) [pid 6875] close(17) = -1 EBADF (Bad file descriptor) [pid 6875] close(18) = -1 EBADF (Bad file descriptor) [pid 6875] close(19) = -1 EBADF (Bad file descriptor) [pid 6877] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6875] close(20) = -1 EBADF (Bad file descriptor) [pid 6875] close(21) = -1 EBADF (Bad file descriptor) [pid 6875] close(22) = -1 EBADF (Bad file descriptor) [pid 6875] close(23) = -1 EBADF (Bad file descriptor) [pid 6875] close(24) = -1 EBADF (Bad file descriptor) [pid 6875] close(25) = -1 EBADF (Bad file descriptor) [pid 6875] close(26) = -1 EBADF (Bad file descriptor) [pid 6875] close(27) = -1 EBADF (Bad file descriptor) [pid 6875] close(28) = -1 EBADF (Bad file descriptor) [pid 6875] close(29) = -1 EBADF (Bad file descriptor) [pid 6875] exit_group(0 [pid 6876] <... futex resumed>) = ? [pid 6875] <... exit_group resumed>) = ? [pid 6877] <... futex resumed>) = ? [pid 6876] +++ exited with 0 +++ [pid 6877] +++ exited with 0 +++ [pid 6875] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1848, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./616", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./616", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./616/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./616/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./616/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./616/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./616") = 0 [pid 5019] mkdir("./617", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 89.224099][ T6876] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1851 ./strace-static-x86_64: Process 6878 attached [pid 6878] set_robust_list(0x555556a426a0, 24) = 0 [pid 6878] chdir("./617") = 0 [pid 6878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6878] setpgid(0, 0) = 0 [pid 6878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6878] write(3, "1000", 4) = 4 [pid 6878] close(3) = 0 [pid 6878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6878] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6878] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6878] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6878] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6878] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6879 attached => {parent_tid=[1852]}, 88) = 1852 [pid 6879] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6879] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6879] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6878] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6879] <... futex resumed>) = 0 [pid 6878] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6879] memfd_create("syzkaller", 0) = 3 [pid 6879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6879] munmap(0x7f15b9a45000, 524288) = 0 [pid 6879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6879] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6879] close(3) = 0 [pid 6879] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6879] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6879] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6879] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6879] ioctl(4, LOOP_CLR_FD) = 0 [pid 6879] close(4) = 0 [pid 6879] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6878] <... futex resumed>) = 0 [pid 6878] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6879] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6878] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6878] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6878] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6878] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6880 attached => {parent_tid=[1853]}, 88) = 1853 [pid 6878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6878] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6878] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6879] <... mknodat resumed>) = 0 [pid 6879] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6879] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6880] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6880] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6880] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6880] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6880] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6880] chdir(".") = 0 [pid 6880] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6878] <... futex resumed>) = 0 [pid 6878] close(3) = 0 [pid 6878] close(4) = 0 [pid 6878] close(5) = -1 EBADF (Bad file descriptor) [pid 6878] close(6) = -1 EBADF (Bad file descriptor) [pid 6878] close(7) = -1 EBADF (Bad file descriptor) [pid 6878] close(8) = -1 EBADF (Bad file descriptor) [pid 6878] close(9) = -1 EBADF (Bad file descriptor) [pid 6878] close(10) = -1 EBADF (Bad file descriptor) [pid 6878] close(11) = -1 EBADF (Bad file descriptor) [pid 6878] close(12) = -1 EBADF (Bad file descriptor) [pid 6878] close(13) = -1 EBADF (Bad file descriptor) [pid 6878] close(14 [pid 6880] <... futex resumed>) = 1 [pid 6878] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6880] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6878] close(15) = -1 EBADF (Bad file descriptor) [pid 6878] close(16) = -1 EBADF (Bad file descriptor) [pid 6878] close(17) = -1 EBADF (Bad file descriptor) [pid 6878] close(18) = -1 EBADF (Bad file descriptor) [pid 6878] close(19) = -1 EBADF (Bad file descriptor) [pid 6878] close(20) = -1 EBADF (Bad file descriptor) [pid 6878] close(21) = -1 EBADF (Bad file descriptor) [pid 6878] close(22) = -1 EBADF (Bad file descriptor) [pid 6878] close(23) = -1 EBADF (Bad file descriptor) [pid 6878] close(24) = -1 EBADF (Bad file descriptor) [pid 6878] close(25) = -1 EBADF (Bad file descriptor) [pid 6878] close(26) = -1 EBADF (Bad file descriptor) [pid 6878] close(27) = -1 EBADF (Bad file descriptor) [pid 6878] close(28) = -1 EBADF (Bad file descriptor) [pid 6878] close(29) = -1 EBADF (Bad file descriptor) [pid 6878] exit_group(0 [pid 6880] <... futex resumed>) = ? [pid 6879] <... futex resumed>) = ? [pid 6878] <... exit_group resumed>) = ? [pid 6880] +++ exited with 0 +++ [pid 6879] +++ exited with 0 +++ [pid 6878] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1851, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./617", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./617", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./617/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./617/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./617/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./617/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./617/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./617/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./617/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./617/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./617/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./617") = 0 [pid 5019] mkdir("./618", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 89.304198][ T6879] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6881 attached [pid 6881] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1854 [pid 6881] chdir("./618") = 0 [pid 6881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6881] setpgid(0, 0) = 0 [pid 6881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6881] write(3, "1000", 4) = 4 [pid 6881] close(3) = 0 [pid 6881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6881] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6881] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6881] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6882 attached => {parent_tid=[1855]}, 88) = 1855 [pid 6882] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6882] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6882] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6881] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6882] <... futex resumed>) = 0 [pid 6882] memfd_create("syzkaller", 0 [pid 6881] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6882] <... memfd_create resumed>) = 3 [pid 6882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6882] munmap(0x7f15b9a45000, 524288) = 0 [pid 6882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6882] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6882] close(3) = 0 [pid 6882] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6882] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6882] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6882] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6882] ioctl(4, LOOP_CLR_FD) = 0 [pid 6882] close(4) = 0 [pid 6882] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6881] <... futex resumed>) = 0 [pid 6882] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6881] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6881] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6882] <... mknodat resumed>) = 0 [pid 6881] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6882] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6881] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6882] <... futex resumed>) = 0 [pid 6881] <... mprotect resumed>) = 0 [pid 6882] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6883 attached => {parent_tid=[1856]}, 88) = 1856 [pid 6883] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6883] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6883] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6883] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6881] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6883] <... futex resumed>) = 0 [pid 6883] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6883] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6881] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6883] <... mount resumed>) = 0 [pid 6883] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6883] chdir(".") = 0 [pid 6883] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6881] <... futex resumed>) = 0 [pid 6881] close(3) = 0 [pid 6881] close(4) = 0 [pid 6883] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6881] close(5) = -1 EBADF (Bad file descriptor) [pid 6881] close(6) = -1 EBADF (Bad file descriptor) [pid 6881] close(7) = -1 EBADF (Bad file descriptor) [pid 6881] close(8) = -1 EBADF (Bad file descriptor) [pid 6881] close(9) = -1 EBADF (Bad file descriptor) [pid 6881] close(10) = -1 EBADF (Bad file descriptor) [pid 6881] close(11) = -1 EBADF (Bad file descriptor) [pid 6881] close(12) = -1 EBADF (Bad file descriptor) [pid 6881] close(13) = -1 EBADF (Bad file descriptor) [pid 6881] close(14) = -1 EBADF (Bad file descriptor) [pid 6881] close(15) = -1 EBADF (Bad file descriptor) [pid 6881] close(16) = -1 EBADF (Bad file descriptor) [pid 6881] close(17) = -1 EBADF (Bad file descriptor) [pid 6881] close(18) = -1 EBADF (Bad file descriptor) [pid 6881] close(19) = -1 EBADF (Bad file descriptor) [pid 6881] close(20) = -1 EBADF (Bad file descriptor) [pid 6881] close(21) = -1 EBADF (Bad file descriptor) [pid 6881] close(22) = -1 EBADF (Bad file descriptor) [pid 6881] close(23) = -1 EBADF (Bad file descriptor) [pid 6881] close(24) = -1 EBADF (Bad file descriptor) [pid 6881] close(25) = -1 EBADF (Bad file descriptor) [pid 6881] close(26) = -1 EBADF (Bad file descriptor) [pid 6881] close(27) = -1 EBADF (Bad file descriptor) [pid 6881] close(28) = -1 EBADF (Bad file descriptor) [pid 6881] close(29) = -1 EBADF (Bad file descriptor) [pid 6881] exit_group(0) = ? [pid 6882] <... futex resumed>) = ? [pid 6883] <... futex resumed>) = ? [pid 6882] +++ exited with 0 +++ [pid 6883] +++ exited with 0 +++ [pid 6881] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1854, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./618", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./618", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./618/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./618/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./618/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./618") = 0 [pid 5019] mkdir("./619", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1857 ./strace-static-x86_64: Process 6884 attached [pid 6884] set_robust_list(0x555556a426a0, 24) = 0 [pid 6884] chdir("./619") = 0 [pid 6884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6884] setpgid(0, 0) = 0 [pid 6884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6884] write(3, "1000", 4) = 4 [pid 6884] close(3) = 0 [pid 6884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6884] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6884] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6884] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 89.385575][ T6882] loop0: detected capacity change from 0 to 1024 [pid 6884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6885 attached [pid 6885] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6885] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6885] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6884] <... clone3 resumed> => {parent_tid=[1858]}, 88) = 1858 [pid 6884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6884] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6885] <... futex resumed>) = 0 [pid 6884] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6885] memfd_create("syzkaller", 0) = 3 [pid 6885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6885] munmap(0x7f15b9a45000, 524288) = 0 [pid 6885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6885] close(3) = 0 [pid 6885] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6885] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6885] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6885] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6885] ioctl(4, LOOP_CLR_FD) = 0 [pid 6885] close(4) = 0 [pid 6885] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6884] <... futex resumed>) = 0 [pid 6884] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6884] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1859]}, 88) = 1859 [pid 6884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6884] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6884] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6885] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6886 attached [pid 6886] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6885] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6886] <... rseq resumed>) = 0 [pid 6886] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6885] <... mknodat resumed>) = 0 [pid 6886] rt_sigprocmask(SIG_SETMASK, [], [pid 6885] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6885] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6886] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6886] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6886] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6886] chdir(".") = 0 [pid 6886] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6884] <... futex resumed>) = 0 [pid 6884] close(3) = 0 [pid 6884] close(4) = 0 [pid 6884] close(5) = -1 EBADF (Bad file descriptor) [pid 6884] close(6) = -1 EBADF (Bad file descriptor) [pid 6884] close(7 [pid 6886] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6884] close(8) = -1 EBADF (Bad file descriptor) [pid 6884] close(9) = -1 EBADF (Bad file descriptor) [pid 6884] close(10) = -1 EBADF (Bad file descriptor) [pid 6884] close(11) = -1 EBADF (Bad file descriptor) [pid 6884] close(12) = -1 EBADF (Bad file descriptor) [pid 6884] close(13) = -1 EBADF (Bad file descriptor) [pid 6884] close(14) = -1 EBADF (Bad file descriptor) [pid 6884] close(15) = -1 EBADF (Bad file descriptor) [pid 6884] close(16) = -1 EBADF (Bad file descriptor) [pid 6884] close(17) = -1 EBADF (Bad file descriptor) [pid 6884] close(18) = -1 EBADF (Bad file descriptor) [pid 6884] close(19) = -1 EBADF (Bad file descriptor) [pid 6884] close(20) = -1 EBADF (Bad file descriptor) [pid 6884] close(21) = -1 EBADF (Bad file descriptor) [pid 6884] close(22) = -1 EBADF (Bad file descriptor) [pid 6884] close(23) = -1 EBADF (Bad file descriptor) [pid 6884] close(24) = -1 EBADF (Bad file descriptor) [pid 6884] close(25) = -1 EBADF (Bad file descriptor) [pid 6884] close(26) = -1 EBADF (Bad file descriptor) [pid 6884] close(27) = -1 EBADF (Bad file descriptor) [pid 6884] close(28) = -1 EBADF (Bad file descriptor) [pid 6884] close(29) = -1 EBADF (Bad file descriptor) [pid 6884] exit_group(0 [pid 6886] <... futex resumed>) = ? [pid 6885] <... futex resumed>) = ? [pid 6884] <... exit_group resumed>) = ? [pid 6886] +++ exited with 0 +++ [pid 6885] +++ exited with 0 +++ [pid 6884] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1857, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./619", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./619", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./619/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./619/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./619/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./619/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./619/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./619/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./619/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./619/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./619/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./619") = 0 [pid 5019] mkdir("./620", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 89.457169][ T6885] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1860 ./strace-static-x86_64: Process 6887 attached [pid 6887] set_robust_list(0x555556a426a0, 24) = 0 [pid 6887] chdir("./620") = 0 [pid 6887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6887] setpgid(0, 0) = 0 [pid 6887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6887] write(3, "1000", 4) = 4 [pid 6887] close(3) = 0 [pid 6887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6887] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6887] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6887] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6887] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1861]}, 88) = 1861 [pid 6887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6887] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6887] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6888 attached [pid 6888] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6888] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6888] memfd_create("syzkaller", 0) = 3 [pid 6888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6888] munmap(0x7f15b9a45000, 524288) = 0 [pid 6888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6888] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6888] close(3) = 0 [pid 6888] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6888] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6888] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6888] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6888] ioctl(4, LOOP_CLR_FD) = 0 [pid 6888] close(4) = 0 [pid 6888] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6887] <... futex resumed>) = 0 [pid 6887] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6887] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6887] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1862]}, 88) = 1862 [pid 6887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6887] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6887] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6889 attached [pid 6889] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6889] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6889] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6889] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6888] <... futex resumed>) = 1 [pid 6889] <... mount resumed>) = 0 [pid 6889] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6889] chdir(".") = 0 [pid 6889] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6887] <... futex resumed>) = 0 [pid 6889] <... futex resumed>) = 1 [pid 6889] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6888] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6888] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6888] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6887] close(3) = 0 [pid 6887] close(4) = 0 [pid 6887] close(5) = -1 EBADF (Bad file descriptor) [pid 6887] close(6) = -1 EBADF (Bad file descriptor) [pid 6887] close(7) = -1 EBADF (Bad file descriptor) [pid 6887] close(8) = -1 EBADF (Bad file descriptor) [pid 6887] close(9) = -1 EBADF (Bad file descriptor) [pid 6887] close(10) = -1 EBADF (Bad file descriptor) [pid 6887] close(11) = -1 EBADF (Bad file descriptor) [pid 6887] close(12) = -1 EBADF (Bad file descriptor) [pid 6887] close(13) = -1 EBADF (Bad file descriptor) [pid 6887] close(14) = -1 EBADF (Bad file descriptor) [pid 6887] close(15) = -1 EBADF (Bad file descriptor) [pid 6887] close(16) = -1 EBADF (Bad file descriptor) [pid 6887] close(17) = -1 EBADF (Bad file descriptor) [pid 6887] close(18) = -1 EBADF (Bad file descriptor) [pid 6887] close(19) = -1 EBADF (Bad file descriptor) [pid 6887] close(20) = -1 EBADF (Bad file descriptor) [pid 6887] close(21) = -1 EBADF (Bad file descriptor) [pid 6887] close(22) = -1 EBADF (Bad file descriptor) [pid 6887] close(23) = -1 EBADF (Bad file descriptor) [pid 6887] close(24) = -1 EBADF (Bad file descriptor) [pid 6887] close(25) = -1 EBADF (Bad file descriptor) [pid 6887] close(26) = -1 EBADF (Bad file descriptor) [pid 6887] close(27) = -1 EBADF (Bad file descriptor) [pid 6887] close(28) = -1 EBADF (Bad file descriptor) [pid 6887] close(29) = -1 EBADF (Bad file descriptor) [pid 6887] exit_group(0 [pid 6889] <... futex resumed>) = ? [pid 6888] <... futex resumed>) = ? [pid 6887] <... exit_group resumed>) = ? [pid 6889] +++ exited with 0 +++ [pid 6888] +++ exited with 0 +++ [pid 6887] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1860, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./620", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./620", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 89.535876][ T6888] loop0: detected capacity change from 0 to 1024 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./620/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./620/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./620/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./620") = 0 [pid 5019] mkdir("./621", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6890 attached [pid 6890] set_robust_list(0x555556a426a0, 24) = 0 [pid 6890] chdir("./621" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1863 [pid 6890] <... chdir resumed>) = 0 [pid 6890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6890] setpgid(0, 0) = 0 [pid 6890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6890] write(3, "1000", 4) = 4 [pid 6890] close(3) = 0 [pid 6890] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6890] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6890] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6890] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6890] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6890] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1864]}, 88) = 1864 [pid 6890] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6890] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6890] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6891 attached [pid 6891] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6891] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6891] memfd_create("syzkaller", 0) = 3 [pid 6891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6891] munmap(0x7f15b9a45000, 524288) = 0 [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6891] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6891] close(3) = 0 [pid 6891] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6891] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6891] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6891] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6891] ioctl(4, LOOP_CLR_FD) = 0 [pid 6891] close(4) = 0 [pid 6891] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6890] <... futex resumed>) = 0 [pid 6890] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6890] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6890] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6890] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1865]}, 88) = 1865 [pid 6890] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6890] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6890] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6892 attached [pid 6892] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6892] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6892] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6892] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6891] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6892] <... mount resumed>) = 0 [pid 6892] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6892] chdir(".") = 0 [pid 6892] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6890] <... futex resumed>) = 0 [pid 6892] <... futex resumed>) = 1 [pid 6892] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6891] <... mknodat resumed>) = 0 [pid 6891] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6891] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6890] close(3) = 0 [pid 6890] close(4) = 0 [pid 6890] close(5) = -1 EBADF (Bad file descriptor) [pid 6890] close(6) = -1 EBADF (Bad file descriptor) [pid 6890] close(7) = -1 EBADF (Bad file descriptor) [pid 6890] close(8) = -1 EBADF (Bad file descriptor) [pid 6890] close(9) = -1 EBADF (Bad file descriptor) [pid 6890] close(10) = -1 EBADF (Bad file descriptor) [pid 6890] close(11) = -1 EBADF (Bad file descriptor) [pid 6890] close(12) = -1 EBADF (Bad file descriptor) [pid 6890] close(13) = -1 EBADF (Bad file descriptor) [pid 6890] close(14) = -1 EBADF (Bad file descriptor) [pid 6890] close(15) = -1 EBADF (Bad file descriptor) [pid 6890] close(16) = -1 EBADF (Bad file descriptor) [pid 6890] close(17) = -1 EBADF (Bad file descriptor) [pid 6890] close(18) = -1 EBADF (Bad file descriptor) [pid 6890] close(19) = -1 EBADF (Bad file descriptor) [pid 6890] close(20) = -1 EBADF (Bad file descriptor) [pid 6890] close(21) = -1 EBADF (Bad file descriptor) [pid 6890] close(22) = -1 EBADF (Bad file descriptor) [pid 6890] close(23) = -1 EBADF (Bad file descriptor) [pid 6890] close(24) = -1 EBADF (Bad file descriptor) [pid 6890] close(25) = -1 EBADF (Bad file descriptor) [pid 6890] close(26) = -1 EBADF (Bad file descriptor) [pid 6890] close(27) = -1 EBADF (Bad file descriptor) [pid 6890] close(28) = -1 EBADF (Bad file descriptor) [pid 6890] close(29) = -1 EBADF (Bad file descriptor) [pid 6890] exit_group(0) = ? [pid 6892] <... futex resumed>) = ? [pid 6892] +++ exited with 0 +++ [pid 6891] <... futex resumed>) = ? [pid 6891] +++ exited with 0 +++ [pid 6890] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1863, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./621", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./621", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./621/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./621/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./621/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./621/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./621/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./621/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./621/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./621/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./621/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./621") = 0 [pid 5019] mkdir("./622", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1866 ./strace-static-x86_64: Process 6893 attached [pid 6893] set_robust_list(0x555556a426a0, 24) = 0 [pid 6893] chdir("./622") = 0 [pid 6893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6893] setpgid(0, 0) = 0 [pid 6893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6893] write(3, "1000", 4) = 4 [pid 6893] close(3) = 0 [pid 6893] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6893] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6893] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6893] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6893] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6893] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6893] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1867]}, 88) = 1867 [pid 6893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6893] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6893] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6894 attached [pid 6894] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6894] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6894] memfd_create("syzkaller", 0) = 3 [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6894] munmap(0x7f15b9a45000, 524288) = 0 [ 89.610952][ T6891] loop0: detected capacity change from 0 to 1024 [pid 6894] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6894] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6894] close(3) = 0 [pid 6894] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6894] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6894] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6894] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6894] ioctl(4, LOOP_CLR_FD) = 0 [pid 6894] close(4) = 0 [pid 6894] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6893] <... futex resumed>) = 0 [pid 6893] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6893] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6893] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6893] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6893] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1868]}, 88) = 1868 [pid 6893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6893] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6893] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6894] <... futex resumed>) = 1 [pid 6894] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6895 attached [pid 6895] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6895] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6894] <... mknodat resumed>) = 0 [pid 6894] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6894] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6895] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6895] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6895] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6895] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6895] chdir(".") = 0 [pid 6895] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6893] <... futex resumed>) = 0 [pid 6893] close(3) = 0 [pid 6893] close(4) = 0 [pid 6893] close(5) = -1 EBADF (Bad file descriptor) [pid 6893] close(6) = -1 EBADF (Bad file descriptor) [pid 6893] close(7) = -1 EBADF (Bad file descriptor) [pid 6893] close(8) = -1 EBADF (Bad file descriptor) [pid 6893] close(9) = -1 EBADF (Bad file descriptor) [pid 6893] close(10) = -1 EBADF (Bad file descriptor) [pid 6893] close(11) = -1 EBADF (Bad file descriptor) [pid 6893] close(12) = -1 EBADF (Bad file descriptor) [pid 6893] close(13) = -1 EBADF (Bad file descriptor) [pid 6893] close(14) = -1 EBADF (Bad file descriptor) [pid 6893] close(15) = -1 EBADF (Bad file descriptor) [pid 6893] close(16) = -1 EBADF (Bad file descriptor) [pid 6893] close(17) = -1 EBADF (Bad file descriptor) [pid 6893] close(18) = -1 EBADF (Bad file descriptor) [pid 6893] close(19) = -1 EBADF (Bad file descriptor) [pid 6893] close(20) = -1 EBADF (Bad file descriptor) [pid 6893] close(21) = -1 EBADF (Bad file descriptor) [pid 6893] close(22) = -1 EBADF (Bad file descriptor) [pid 6893] close(23) = -1 EBADF (Bad file descriptor) [pid 6893] close(24) = -1 EBADF (Bad file descriptor) [pid 6893] close(25) = -1 EBADF (Bad file descriptor) [pid 6893] close(26) = -1 EBADF (Bad file descriptor) [pid 6893] close(27) = -1 EBADF (Bad file descriptor) [pid 6893] close(28) = -1 EBADF (Bad file descriptor) [pid 6893] close(29) = -1 EBADF (Bad file descriptor) [pid 6893] exit_group(0 [pid 6894] <... futex resumed>) = ? [pid 6893] <... exit_group resumed>) = ? [pid 6894] +++ exited with 0 +++ [pid 6895] <... futex resumed>) = ? [pid 6895] +++ exited with 0 +++ [pid 6893] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1866, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./622", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./622", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./622/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./622/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./622/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./622") = 0 [pid 5019] mkdir("./623", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1869 ./strace-static-x86_64: Process 6896 attached [pid 6896] set_robust_list(0x555556a426a0, 24) = 0 [pid 6896] chdir("./623") = 0 [pid 6896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6896] setpgid(0, 0) = 0 [pid 6896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6896] write(3, "1000", 4) = 4 [pid 6896] close(3) = 0 [pid 6896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6896] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6896] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6896] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6896] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6896] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6896] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1870]}, 88) = 1870 [pid 6896] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6896] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6896] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6897 attached [pid 6897] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6897] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6897] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6897] memfd_create("syzkaller", 0) = 3 [pid 6897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6897] munmap(0x7f15b9a45000, 524288) = 0 [pid 6897] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 89.670899][ T6894] loop0: detected capacity change from 0 to 1024 [pid 6897] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6897] close(3) = 0 [pid 6897] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6897] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6897] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6897] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6897] ioctl(4, LOOP_CLR_FD) = 0 [pid 6897] close(4) = 0 [pid 6897] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6896] <... futex resumed>) = 0 [pid 6896] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6896] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6896] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6896] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6896] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1871]}, 88) = 1871 [pid 6896] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6896] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6896] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6898 attached [pid 6898] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6898] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6898] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6898] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6897] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6898] <... mount resumed>) = 0 [pid 6898] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6898] chdir(".") = 0 [pid 6898] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6896] <... futex resumed>) = 0 [pid 6898] <... futex resumed>) = 1 [pid 6898] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] <... mknodat resumed>) = 0 [pid 6897] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6896] close(3 [pid 6897] <... futex resumed>) = 0 [pid 6896] <... close resumed>) = 0 [pid 6896] close(4) = 0 [pid 6896] close(5) = -1 EBADF (Bad file descriptor) [pid 6896] close(6) = -1 EBADF (Bad file descriptor) [pid 6896] close(7) = -1 EBADF (Bad file descriptor) [pid 6896] close(8) = -1 EBADF (Bad file descriptor) [pid 6896] close(9) = -1 EBADF (Bad file descriptor) [pid 6896] close(10) = -1 EBADF (Bad file descriptor) [pid 6896] close(11) = -1 EBADF (Bad file descriptor) [pid 6896] close(12) = -1 EBADF (Bad file descriptor) [pid 6896] close(13) = -1 EBADF (Bad file descriptor) [pid 6896] close(14) = -1 EBADF (Bad file descriptor) [pid 6896] close(15) = -1 EBADF (Bad file descriptor) [pid 6896] close(16) = -1 EBADF (Bad file descriptor) [pid 6896] close(17) = -1 EBADF (Bad file descriptor) [pid 6896] close(18) = -1 EBADF (Bad file descriptor) [pid 6896] close(19) = -1 EBADF (Bad file descriptor) [pid 6896] close(20) = -1 EBADF (Bad file descriptor) [pid 6896] close(21) = -1 EBADF (Bad file descriptor) [pid 6896] close(22) = -1 EBADF (Bad file descriptor) [pid 6896] close(23) = -1 EBADF (Bad file descriptor) [pid 6896] close(24) = -1 EBADF (Bad file descriptor) [pid 6896] close(25) = -1 EBADF (Bad file descriptor) [pid 6896] close(26) = -1 EBADF (Bad file descriptor) [pid 6896] close(27) = -1 EBADF (Bad file descriptor) [pid 6896] close(28) = -1 EBADF (Bad file descriptor) [pid 6896] close(29) = -1 EBADF (Bad file descriptor) [pid 6896] exit_group(0) = ? [pid 6898] <... futex resumed>) = ? [pid 6898] +++ exited with 0 +++ [pid 6897] +++ exited with 0 +++ [pid 6896] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1869, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./623", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./623", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./623/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./623/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./623/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./623") = 0 [pid 5019] mkdir("./624", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 89.729502][ T6897] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1872 ./strace-static-x86_64: Process 6899 attached [pid 6899] set_robust_list(0x555556a426a0, 24) = 0 [pid 6899] chdir("./624") = 0 [pid 6899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6899] setpgid(0, 0) = 0 [pid 6899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6899] write(3, "1000", 4) = 4 [pid 6899] close(3) = 0 [pid 6899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6899] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6899] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6899] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6899] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6899] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1873]}, 88) = 1873 [pid 6899] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6899] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6900 attached [pid 6900] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6900] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6900] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6900] memfd_create("syzkaller", 0) = 3 [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6900] munmap(0x7f15b9a45000, 524288) = 0 [pid 6900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6900] close(3) = 0 [pid 6900] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6900] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6900] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6900] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6900] ioctl(4, LOOP_CLR_FD) = 0 [pid 6900] close(4) = 0 [pid 6900] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6899] <... futex resumed>) = 0 [pid 6899] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6900] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6899] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6899] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6899] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6899] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1874]}, 88) = 1874 [pid 6899] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6899] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6899] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6901 attached [pid 6901] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6901] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6901] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6901] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6901] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6901] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6901] chdir(".") = 0 [pid 6901] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6899] <... futex resumed>) = 0 [pid 6901] <... futex resumed>) = 1 [pid 6901] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6900] <... mknodat resumed>) = 0 [pid 6900] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6900] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] close(3) = 0 [pid 6899] close(4) = 0 [pid 6899] close(5) = -1 EBADF (Bad file descriptor) [pid 6899] close(6) = -1 EBADF (Bad file descriptor) [pid 6899] close(7) = -1 EBADF (Bad file descriptor) [pid 6899] close(8) = -1 EBADF (Bad file descriptor) [pid 6899] close(9) = -1 EBADF (Bad file descriptor) [pid 6899] close(10) = -1 EBADF (Bad file descriptor) [pid 6899] close(11) = -1 EBADF (Bad file descriptor) [pid 6899] close(12) = -1 EBADF (Bad file descriptor) [pid 6899] close(13) = -1 EBADF (Bad file descriptor) [pid 6899] close(14) = -1 EBADF (Bad file descriptor) [pid 6899] close(15) = -1 EBADF (Bad file descriptor) [pid 6899] close(16) = -1 EBADF (Bad file descriptor) [pid 6899] close(17) = -1 EBADF (Bad file descriptor) [pid 6899] close(18) = -1 EBADF (Bad file descriptor) [pid 6899] close(19) = -1 EBADF (Bad file descriptor) [pid 6899] close(20) = -1 EBADF (Bad file descriptor) [pid 6899] close(21) = -1 EBADF (Bad file descriptor) [pid 6899] close(22) = -1 EBADF (Bad file descriptor) [pid 6899] close(23) = -1 EBADF (Bad file descriptor) [pid 6899] close(24) = -1 EBADF (Bad file descriptor) [pid 6899] close(25) = -1 EBADF (Bad file descriptor) [pid 6899] close(26) = -1 EBADF (Bad file descriptor) [pid 6899] close(27) = -1 EBADF (Bad file descriptor) [pid 6899] close(28) = -1 EBADF (Bad file descriptor) [pid 6899] close(29) = -1 EBADF (Bad file descriptor) [pid 6899] exit_group(0) = ? [pid 6900] <... futex resumed>) = ? [pid 6900] +++ exited with 0 +++ [pid 6901] <... futex resumed>) = ? [pid 6901] +++ exited with 0 +++ [pid 6899] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1872, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./624", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./624", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./624/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./624/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./624/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./624") = 0 [pid 5019] mkdir("./625", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1875 ./strace-static-x86_64: Process 6902 attached [pid 6902] set_robust_list(0x555556a426a0, 24) = 0 [ 89.799283][ T6900] loop0: detected capacity change from 0 to 1024 [pid 6902] chdir("./625") = 0 [pid 6902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6902] setpgid(0, 0) = 0 [pid 6902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6902] write(3, "1000", 4) = 4 [pid 6902] close(3) = 0 [pid 6902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6902] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6902] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6902] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6903 attached => {parent_tid=[1876]}, 88) = 1876 [pid 6903] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6903] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6903] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6902] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6902] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6903] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6903] memfd_create("syzkaller", 0) = 3 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6903] munmap(0x7f15b9a45000, 524288) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6903] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6903] close(3) = 0 [pid 6903] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6903] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6903] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6903] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6903] ioctl(4, LOOP_CLR_FD) = 0 [pid 6903] close(4) = 0 [pid 6903] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6902] <... futex resumed>) = 0 [pid 6902] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6902] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6902] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1877]}, 88) = 1877 [pid 6902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6902] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6904 attached [pid 6902] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6903] <... futex resumed>) = 1 [pid 6904] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6903] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6904] <... rseq resumed>) = 0 [pid 6904] set_robust_list(0x7f15b9ac49a0, 24 [pid 6903] <... mknodat resumed>) = 0 [pid 6904] <... set_robust_list resumed>) = 0 [pid 6903] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6903] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6904] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6904] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6904] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6904] chdir(".") = 0 [pid 6904] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6902] <... futex resumed>) = 0 [pid 6902] close(3) = 0 [pid 6902] close(4) = 0 [pid 6902] close(5) = -1 EBADF (Bad file descriptor) [pid 6902] close(6 [pid 6904] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6902] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6902] close(7) = -1 EBADF (Bad file descriptor) [pid 6902] close(8) = -1 EBADF (Bad file descriptor) [pid 6902] close(9) = -1 EBADF (Bad file descriptor) [pid 6902] close(10) = -1 EBADF (Bad file descriptor) [pid 6902] close(11) = -1 EBADF (Bad file descriptor) [pid 6902] close(12) = -1 EBADF (Bad file descriptor) [pid 6902] close(13) = -1 EBADF (Bad file descriptor) [pid 6902] close(14) = -1 EBADF (Bad file descriptor) [pid 6902] close(15) = -1 EBADF (Bad file descriptor) [pid 6902] close(16) = -1 EBADF (Bad file descriptor) [pid 6902] close(17) = -1 EBADF (Bad file descriptor) [pid 6902] close(18) = -1 EBADF (Bad file descriptor) [pid 6902] close(19) = -1 EBADF (Bad file descriptor) [pid 6902] close(20) = -1 EBADF (Bad file descriptor) [pid 6902] close(21) = -1 EBADF (Bad file descriptor) [pid 6902] close(22) = -1 EBADF (Bad file descriptor) [pid 6902] close(23) = -1 EBADF (Bad file descriptor) [pid 6902] close(24) = -1 EBADF (Bad file descriptor) [pid 6902] close(25) = -1 EBADF (Bad file descriptor) [pid 6902] close(26) = -1 EBADF (Bad file descriptor) [pid 6902] close(27) = -1 EBADF (Bad file descriptor) [pid 6902] close(28) = -1 EBADF (Bad file descriptor) [pid 6902] close(29) = -1 EBADF (Bad file descriptor) [pid 6902] exit_group(0 [pid 6903] <... futex resumed>) = ? [pid 6904] <... futex resumed>) = ? [pid 6902] <... exit_group resumed>) = ? [pid 6903] +++ exited with 0 +++ [pid 6904] +++ exited with 0 +++ [pid 6902] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1875, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./625", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./625", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./625/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./625/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./625/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./625/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./625/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./625/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./625/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./625/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./625/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./625") = 0 [pid 5019] mkdir("./626", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 89.876817][ T6903] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6905 attached [pid 6905] set_robust_list(0x555556a426a0, 24) = 0 [pid 6905] chdir("./626") = 0 [pid 6905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6905] setpgid(0, 0) = 0 [pid 6905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6905] write(3, "1000", 4) = 4 [pid 6905] close(3 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1878 [pid 6905] <... close resumed>) = 0 [pid 6905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6905] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6905] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6905] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6905] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6906 attached => {parent_tid=[1879]}, 88) = 1879 [pid 6906] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 6905] rt_sigprocmask(SIG_SETMASK, [], [pid 6906] <... rseq resumed>) = 0 [pid 6905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6906] set_robust_list(0x7f15c1e659a0, 24 [pid 6905] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6906] <... set_robust_list resumed>) = 0 [pid 6905] <... futex resumed>) = 0 [pid 6906] rt_sigprocmask(SIG_SETMASK, [], [pid 6905] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6906] memfd_create("syzkaller", 0) = 3 [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6906] munmap(0x7f15b9a45000, 524288) = 0 [pid 6906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6906] close(3) = 0 [pid 6906] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6906] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6906] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6906] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6906] ioctl(4, LOOP_CLR_FD) = 0 [pid 6906] close(4) = 0 [pid 6906] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] <... futex resumed>) = 0 [pid 6906] <... futex resumed>) = 1 [pid 6905] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6906] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6905] <... futex resumed>) = 0 [pid 6905] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6905] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6905] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6905] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6907 attached [pid 6907] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6905] <... clone3 resumed> => {parent_tid=[1880]}, 88) = 1880 [pid 6907] <... rseq resumed>) = 0 [pid 6905] rt_sigprocmask(SIG_SETMASK, [], [pid 6907] set_robust_list(0x7f15b9ac49a0, 24 [pid 6905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6907] <... set_robust_list resumed>) = 0 [pid 6905] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6905] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6907] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6907] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6906] <... mknodat resumed>) = 0 [pid 6906] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6907] <... mount resumed>) = 0 [pid 6906] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6907] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6907] chdir(".") = 0 [pid 6907] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] <... futex resumed>) = 0 [pid 6905] close(3) = 0 [pid 6905] close(4) = 0 [pid 6905] close(5) = -1 EBADF (Bad file descriptor) [pid 6905] close(6) = -1 EBADF (Bad file descriptor) [pid 6905] close(7) = -1 EBADF (Bad file descriptor) [pid 6905] close(8) = -1 EBADF (Bad file descriptor) [pid 6905] close(9) = -1 EBADF (Bad file descriptor) [pid 6905] close(10) = -1 EBADF (Bad file descriptor) [pid 6905] close(11) = -1 EBADF (Bad file descriptor) [pid 6905] close(12) = -1 EBADF (Bad file descriptor) [pid 6905] close(13) = -1 EBADF (Bad file descriptor) [pid 6905] close(14) = -1 EBADF (Bad file descriptor) [pid 6905] close(15 [pid 6907] <... futex resumed>) = 1 [pid 6905] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6907] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6905] close(16) = -1 EBADF (Bad file descriptor) [pid 6905] close(17) = -1 EBADF (Bad file descriptor) [pid 6905] close(18) = -1 EBADF (Bad file descriptor) [pid 6905] close(19) = -1 EBADF (Bad file descriptor) [pid 6905] close(20) = -1 EBADF (Bad file descriptor) [pid 6905] close(21) = -1 EBADF (Bad file descriptor) [pid 6905] close(22) = -1 EBADF (Bad file descriptor) [pid 6905] close(23) = -1 EBADF (Bad file descriptor) [pid 6905] close(24) = -1 EBADF (Bad file descriptor) [pid 6905] close(25) = -1 EBADF (Bad file descriptor) [pid 6905] close(26) = -1 EBADF (Bad file descriptor) [pid 6905] close(27) = -1 EBADF (Bad file descriptor) [pid 6905] close(28) = -1 EBADF (Bad file descriptor) [pid 6905] close(29) = -1 EBADF (Bad file descriptor) [pid 6905] exit_group(0 [pid 6907] <... futex resumed>) = ? [pid 6906] <... futex resumed>) = ? [pid 6905] <... exit_group resumed>) = ? [pid 6907] +++ exited with 0 +++ [pid 6906] +++ exited with 0 +++ [pid 6905] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1878, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./626", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./626", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./626/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./626/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./626/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./626/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./626/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./626/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./626/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./626/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./626/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./626") = 0 [pid 5019] mkdir("./627", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 89.954141][ T6906] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1881 ./strace-static-x86_64: Process 6908 attached [pid 6908] set_robust_list(0x555556a426a0, 24) = 0 [pid 6908] chdir("./627") = 0 [pid 6908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6908] setpgid(0, 0) = 0 [pid 6908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6908] write(3, "1000", 4) = 4 [pid 6908] close(3) = 0 [pid 6908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6908] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6908] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6908] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6908] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6908] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6908] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6909 attached => {parent_tid=[1882]}, 88) = 1882 [pid 6909] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6909] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6909] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6908] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6909] <... futex resumed>) = 0 [pid 6908] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6909] memfd_create("syzkaller", 0) = 3 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6909] munmap(0x7f15b9a45000, 524288) = 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6909] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6909] close(3) = 0 [pid 6909] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6909] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6909] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6909] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6909] ioctl(4, LOOP_CLR_FD) = 0 [pid 6909] close(4) = 0 [pid 6909] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6908] <... futex resumed>) = 0 [pid 6908] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6908] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6909] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6908] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6908] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6908] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6908] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1883]}, 88) = 1883 [pid 6908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6908] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6908] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6910 attached [pid 6910] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6910] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6910] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6910] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6910] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6910] chdir("." [pid 6909] <... mknodat resumed>) = 0 [pid 6909] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] <... chdir resumed>) = 0 [pid 6910] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6908] <... futex resumed>) = 0 [pid 6908] close(3) = 0 [pid 6908] close(4 [pid 6910] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6908] <... close resumed>) = 0 [pid 6908] close(5) = -1 EBADF (Bad file descriptor) [pid 6908] close(6) = -1 EBADF (Bad file descriptor) [pid 6908] close(7) = -1 EBADF (Bad file descriptor) [pid 6908] close(8) = -1 EBADF (Bad file descriptor) [pid 6908] close(9) = -1 EBADF (Bad file descriptor) [pid 6908] close(10) = -1 EBADF (Bad file descriptor) [pid 6908] close(11) = -1 EBADF (Bad file descriptor) [pid 6908] close(12) = -1 EBADF (Bad file descriptor) [pid 6908] close(13) = -1 EBADF (Bad file descriptor) [pid 6908] close(14) = -1 EBADF (Bad file descriptor) [pid 6908] close(15) = -1 EBADF (Bad file descriptor) [pid 6908] close(16) = -1 EBADF (Bad file descriptor) [pid 6908] close(17) = -1 EBADF (Bad file descriptor) [pid 6908] close(18) = -1 EBADF (Bad file descriptor) [pid 6908] close(19) = -1 EBADF (Bad file descriptor) [pid 6908] close(20) = -1 EBADF (Bad file descriptor) [pid 6908] close(21) = -1 EBADF (Bad file descriptor) [pid 6908] close(22) = -1 EBADF (Bad file descriptor) [pid 6908] close(23) = -1 EBADF (Bad file descriptor) [pid 6908] close(24) = -1 EBADF (Bad file descriptor) [pid 6908] close(25) = -1 EBADF (Bad file descriptor) [pid 6908] close(26) = -1 EBADF (Bad file descriptor) [pid 6908] close(27) = -1 EBADF (Bad file descriptor) [pid 6908] close(28) = -1 EBADF (Bad file descriptor) [pid 6908] close(29) = -1 EBADF (Bad file descriptor) [pid 6908] exit_group(0) = ? [pid 6910] <... futex resumed>) = ? [pid 6909] <... futex resumed>) = ? [pid 6910] +++ exited with 0 +++ [pid 6909] +++ exited with 0 +++ [pid 6908] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1881, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./627", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./627", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./627/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./627/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./627/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./627") = 0 [pid 5019] mkdir("./628", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1884 ./strace-static-x86_64: Process 6911 attached [pid 6911] set_robust_list(0x555556a426a0, 24) = 0 [pid 6911] chdir("./628") = 0 [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6911] setpgid(0, 0) = 0 [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6911] write(3, "1000", 4) = 4 [pid 6911] close(3) = 0 [pid 6911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6911] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6911] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6911] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1885]}, 88) = 1885 [pid 6911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6911] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6911] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6912 attached [pid 6912] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6912] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6912] memfd_create("syzkaller", 0) = 3 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 90.030759][ T6909] loop0: detected capacity change from 0 to 1024 [pid 6912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6912] munmap(0x7f15b9a45000, 524288) = 0 [pid 6912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6912] close(3) = 0 [pid 6912] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6912] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6912] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6912] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6912] ioctl(4, LOOP_CLR_FD) = 0 [pid 6912] close(4) = 0 [pid 6912] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6911] <... futex resumed>) = 0 [pid 6911] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6911] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6911] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6912] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6911] <... clone3 resumed> => {parent_tid=[1886]}, 88) = 1886 [pid 6911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6911] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6911] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6913 attached [pid 6913] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6913] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6913] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6913] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6913] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6913] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6913] chdir(".") = 0 [pid 6913] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = 0 [pid 6913] <... futex resumed>) = 1 [pid 6913] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6912] <... mknodat resumed>) = 0 [pid 6912] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6912] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6911] close(3) = 0 [pid 6911] close(4) = 0 [pid 6911] close(5) = -1 EBADF (Bad file descriptor) [pid 6911] close(6) = -1 EBADF (Bad file descriptor) [pid 6911] close(7) = -1 EBADF (Bad file descriptor) [pid 6911] close(8) = -1 EBADF (Bad file descriptor) [pid 6911] close(9) = -1 EBADF (Bad file descriptor) [pid 6911] close(10) = -1 EBADF (Bad file descriptor) [pid 6911] close(11) = -1 EBADF (Bad file descriptor) [pid 6911] close(12) = -1 EBADF (Bad file descriptor) [pid 6911] close(13) = -1 EBADF (Bad file descriptor) [pid 6911] close(14) = -1 EBADF (Bad file descriptor) [pid 6911] close(15) = -1 EBADF (Bad file descriptor) [pid 6911] close(16) = -1 EBADF (Bad file descriptor) [pid 6911] close(17) = -1 EBADF (Bad file descriptor) [pid 6911] close(18) = -1 EBADF (Bad file descriptor) [pid 6911] close(19) = -1 EBADF (Bad file descriptor) [pid 6911] close(20) = -1 EBADF (Bad file descriptor) [pid 6911] close(21) = -1 EBADF (Bad file descriptor) [pid 6911] close(22) = -1 EBADF (Bad file descriptor) [pid 6911] close(23) = -1 EBADF (Bad file descriptor) [pid 6911] close(24) = -1 EBADF (Bad file descriptor) [pid 6911] close(25) = -1 EBADF (Bad file descriptor) [pid 6911] close(26) = -1 EBADF (Bad file descriptor) [pid 6911] close(27) = -1 EBADF (Bad file descriptor) [pid 6911] close(28) = -1 EBADF (Bad file descriptor) [pid 6911] close(29) = -1 EBADF (Bad file descriptor) [pid 6911] exit_group(0 [pid 6912] <... futex resumed>) = ? [pid 6911] <... exit_group resumed>) = ? [pid 6912] +++ exited with 0 +++ [pid 6913] <... futex resumed>) = ? [pid 6913] +++ exited with 0 +++ [pid 6911] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1884, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./628", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./628", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./628/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./628/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./628/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./628/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./628/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./628/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./628/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./628/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./628/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./628") = 0 [pid 5019] mkdir("./629", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1887 ./strace-static-x86_64: Process 6914 attached [pid 6914] set_robust_list(0x555556a426a0, 24) = 0 [pid 6914] chdir("./629") = 0 [pid 6914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6914] setpgid(0, 0) = 0 [pid 6914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6914] write(3, "1000", 4) = 4 [pid 6914] close(3) = 0 [pid 6914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6914] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6914] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6914] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6914] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6914] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6915 attached => {parent_tid=[1888]}, 88) = 1888 [pid 6915] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6914] rt_sigprocmask(SIG_SETMASK, [], [pid 6915] set_robust_list(0x7f15c1e659a0, 24) = 0 [ 90.096901][ T6912] loop0: detected capacity change from 0 to 1024 [pid 6915] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6915] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6914] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6915] <... futex resumed>) = 0 [pid 6914] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6915] memfd_create("syzkaller", 0) = 3 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6915] munmap(0x7f15b9a45000, 524288) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6915] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6915] close(3) = 0 [pid 6915] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6915] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6915] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6915] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6915] ioctl(4, LOOP_CLR_FD) = 0 [pid 6915] close(4) = 0 [pid 6915] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6915] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... futex resumed>) = 0 [pid 6914] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6915] <... futex resumed>) = 0 [pid 6914] <... futex resumed>) = 1 [pid 6915] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6914] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6915] <... mknodat resumed>) = 0 [pid 6915] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6915] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6914] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6914] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6914] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6916 attached [pid 6916] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6916] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6916] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... clone3 resumed> => {parent_tid=[1889]}, 88) = 1889 [pid 6914] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6914] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6916] mkdir(".", 0777 [pid 6914] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6916] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6916] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6916] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6916] chdir(".") = 0 [pid 6916] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6914] <... futex resumed>) = 0 [pid 6914] close(3) = 0 [pid 6914] close(4) = 0 [pid 6914] close(5) = -1 EBADF (Bad file descriptor) [pid 6916] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] close(6) = -1 EBADF (Bad file descriptor) [pid 6914] close(7) = -1 EBADF (Bad file descriptor) [pid 6914] close(8) = -1 EBADF (Bad file descriptor) [pid 6914] close(9) = -1 EBADF (Bad file descriptor) [pid 6914] close(10) = -1 EBADF (Bad file descriptor) [pid 6914] close(11) = -1 EBADF (Bad file descriptor) [pid 6914] close(12) = -1 EBADF (Bad file descriptor) [pid 6914] close(13) = -1 EBADF (Bad file descriptor) [pid 6914] close(14) = -1 EBADF (Bad file descriptor) [pid 6914] close(15) = -1 EBADF (Bad file descriptor) [pid 6914] close(16) = -1 EBADF (Bad file descriptor) [pid 6914] close(17) = -1 EBADF (Bad file descriptor) [pid 6914] close(18) = -1 EBADF (Bad file descriptor) [pid 6914] close(19) = -1 EBADF (Bad file descriptor) [pid 6914] close(20) = -1 EBADF (Bad file descriptor) [pid 6914] close(21) = -1 EBADF (Bad file descriptor) [pid 6914] close(22) = -1 EBADF (Bad file descriptor) [pid 6914] close(23) = -1 EBADF (Bad file descriptor) [pid 6914] close(24) = -1 EBADF (Bad file descriptor) [pid 6914] close(25) = -1 EBADF (Bad file descriptor) [pid 6914] close(26) = -1 EBADF (Bad file descriptor) [pid 6914] close(27) = -1 EBADF (Bad file descriptor) [pid 6914] close(28) = -1 EBADF (Bad file descriptor) [pid 6914] close(29) = -1 EBADF (Bad file descriptor) [pid 6914] exit_group(0 [pid 6916] <... futex resumed>) = ? [pid 6915] <... futex resumed>) = ? [pid 6914] <... exit_group resumed>) = ? [pid 6916] +++ exited with 0 +++ [pid 6915] +++ exited with 0 +++ [pid 6914] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1887, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./629", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./629", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./629/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./629/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./629/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./629") = 0 [pid 5019] mkdir("./630", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1890 ./strace-static-x86_64: Process 6917 attached [pid 6917] set_robust_list(0x555556a426a0, 24) = 0 [pid 6917] chdir("./630") = 0 [pid 6917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6917] setpgid(0, 0) = 0 [pid 6917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6917] write(3, "1000", 4) = 4 [pid 6917] close(3) = 0 [pid 6917] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6917] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6917] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6917] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6917] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6917] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6917] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6917] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1891]}, 88) = 1891 [pid 6917] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6917] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6917] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6918 attached [pid 6918] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6918] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6918] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6918] memfd_create("syzkaller", 0) = 3 [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 90.165697][ T6915] loop0: detected capacity change from 0 to 1024 [pid 6918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6918] munmap(0x7f15b9a45000, 524288) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6918] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6918] close(3) = 0 [pid 6918] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6918] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6918] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6918] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6918] ioctl(4, LOOP_CLR_FD) = 0 [pid 6918] close(4) = 0 [pid 6918] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] <... futex resumed>) = 0 [pid 6917] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6917] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6917] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6917] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6917] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6917] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1892]}, 88) = 1892 [pid 6917] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6917] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6917] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6918] <... futex resumed>) = 1 [pid 6918] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6919 attached [pid 6919] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6919] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6918] <... mknodat resumed>) = 0 [pid 6919] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6918] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6919] mkdir(".", 0777 [pid 6918] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6919] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6919] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6919] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6919] chdir(".") = 0 [pid 6919] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6917] <... futex resumed>) = 0 [pid 6917] close(3) = 0 [pid 6917] close(4) = 0 [pid 6917] close(5) = -1 EBADF (Bad file descriptor) [pid 6917] close(6) = -1 EBADF (Bad file descriptor) [pid 6917] close(7) = -1 EBADF (Bad file descriptor) [pid 6917] close(8) = -1 EBADF (Bad file descriptor) [pid 6917] close(9) = -1 EBADF (Bad file descriptor) [pid 6917] close(10) = -1 EBADF (Bad file descriptor) [pid 6917] close(11 [pid 6919] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6917] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6917] close(12) = -1 EBADF (Bad file descriptor) [pid 6917] close(13) = -1 EBADF (Bad file descriptor) [pid 6917] close(14) = -1 EBADF (Bad file descriptor) [pid 6917] close(15) = -1 EBADF (Bad file descriptor) [pid 6917] close(16) = -1 EBADF (Bad file descriptor) [pid 6917] close(17) = -1 EBADF (Bad file descriptor) [pid 6917] close(18) = -1 EBADF (Bad file descriptor) [pid 6917] close(19) = -1 EBADF (Bad file descriptor) [pid 6917] close(20) = -1 EBADF (Bad file descriptor) [pid 6917] close(21) = -1 EBADF (Bad file descriptor) [pid 6917] close(22) = -1 EBADF (Bad file descriptor) [pid 6917] close(23) = -1 EBADF (Bad file descriptor) [pid 6917] close(24) = -1 EBADF (Bad file descriptor) [pid 6917] close(25) = -1 EBADF (Bad file descriptor) [pid 6917] close(26) = -1 EBADF (Bad file descriptor) [pid 6917] close(27) = -1 EBADF (Bad file descriptor) [pid 6917] close(28) = -1 EBADF (Bad file descriptor) [pid 6917] close(29) = -1 EBADF (Bad file descriptor) [pid 6917] exit_group(0 [pid 6919] <... futex resumed>) = ? [pid 6918] <... futex resumed>) = ? [pid 6917] <... exit_group resumed>) = ? [pid 6919] +++ exited with 0 +++ [pid 6918] +++ exited with 0 +++ [pid 6917] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1890, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./630", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./630", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [ 90.232996][ T6918] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./630/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./630/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./630/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./630/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./630/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./630/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./630/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./630/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./630/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./630") = 0 [pid 5019] mkdir("./631", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1893 ./strace-static-x86_64: Process 6920 attached [pid 6920] set_robust_list(0x555556a426a0, 24) = 0 [pid 6920] chdir("./631") = 0 [pid 6920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6920] setpgid(0, 0) = 0 [pid 6920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6920] write(3, "1000", 4) = 4 [pid 6920] close(3) = 0 [pid 6920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6920] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6920] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6920] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6920] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6920] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1894]}, 88) = 1894 [pid 6920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6920] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6921 attached [pid 6921] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6921] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6921] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6921] memfd_create("syzkaller", 0) = 3 [pid 6921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6921] munmap(0x7f15b9a45000, 524288) = 0 [pid 6921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6921] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6921] close(3) = 0 [pid 6921] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6921] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6921] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6921] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6921] ioctl(4, LOOP_CLR_FD) = 0 [pid 6921] close(4) = 0 [pid 6921] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6920] <... futex resumed>) = 0 [pid 6920] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6920] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 6921] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6920] <... mprotect resumed>) = 0 [pid 6920] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6920] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1895]}, 88) = 1895 [pid 6920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6920] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6922 attached [pid 6922] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6922] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6922] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6922] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6921] <... mknodat resumed>) = 0 [pid 6921] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6922] <... mount resumed>) = 0 [pid 6922] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY [pid 6921] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6922] <... openat resumed>) = 4 [pid 6922] chdir(".") = 0 [pid 6922] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... futex resumed>) = 0 [pid 6920] close(3) = 0 [pid 6920] close(4) = 0 [pid 6920] close(5) = -1 EBADF (Bad file descriptor) [pid 6920] close(6) = -1 EBADF (Bad file descriptor) [pid 6920] close(7) = -1 EBADF (Bad file descriptor) [pid 6920] close(8) = -1 EBADF (Bad file descriptor) [pid 6920] close(9) = -1 EBADF (Bad file descriptor) [pid 6920] close(10) = -1 EBADF (Bad file descriptor) [pid 6920] close(11) = -1 EBADF (Bad file descriptor) [pid 6920] close(12) = -1 EBADF (Bad file descriptor) [pid 6920] close(13) = -1 EBADF (Bad file descriptor) [pid 6920] close(14) = -1 EBADF (Bad file descriptor) [pid 6920] close(15) = -1 EBADF (Bad file descriptor) [pid 6920] close(16) = -1 EBADF (Bad file descriptor) [pid 6920] close(17) = -1 EBADF (Bad file descriptor) [pid 6920] close(18) = -1 EBADF (Bad file descriptor) [pid 6920] close(19) = -1 EBADF (Bad file descriptor) [pid 6920] close(20) = -1 EBADF (Bad file descriptor) [pid 6920] close(21) = -1 EBADF (Bad file descriptor) [pid 6920] close(22) = -1 EBADF (Bad file descriptor) [pid 6920] close(23) = -1 EBADF (Bad file descriptor) [pid 6920] close(24) = -1 EBADF (Bad file descriptor) [pid 6920] close(25) = -1 EBADF (Bad file descriptor) [pid 6920] close(26) = -1 EBADF (Bad file descriptor) [pid 6920] close(27) = -1 EBADF (Bad file descriptor) [pid 6920] close(28) = -1 EBADF (Bad file descriptor) [pid 6920] close(29) = -1 EBADF (Bad file descriptor) [pid 6920] exit_group(0) = ? [pid 6922] <... futex resumed>) = ? [pid 6922] +++ exited with 0 +++ [pid 6921] <... futex resumed>) = ? [pid 6921] +++ exited with 0 +++ [pid 6920] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1893, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./631", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./631", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./631/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./631/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./631/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./631") = 0 [pid 5019] mkdir("./632", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1896 ./strace-static-x86_64: Process 6923 attached [pid 6923] set_robust_list(0x555556a426a0, 24) = 0 [pid 6923] chdir("./632") = 0 [pid 6923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6923] setpgid(0, 0) = 0 [pid 6923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6923] write(3, "1000", 4) = 4 [pid 6923] close(3) = 0 [pid 6923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6923] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6923] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6923] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6923] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6923] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1897]}, 88) = 1897 [pid 6923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6923] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6923] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6924 attached [pid 6924] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6924] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6924] memfd_create("syzkaller", 0) = 3 [pid 6924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 90.308406][ T6921] loop0: detected capacity change from 0 to 1024 [pid 6924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6924] munmap(0x7f15b9a45000, 524288) = 0 [pid 6924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6924] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6924] close(3) = 0 [pid 6924] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6924] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6924] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6924] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6924] ioctl(4, LOOP_CLR_FD) = 0 [pid 6924] close(4) = 0 [pid 6924] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6923] <... futex resumed>) = 0 [pid 6923] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6923] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6923] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6923] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1898]}, 88) = 1898 [pid 6923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6923] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6923] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6924] <... futex resumed>) = 1 [pid 6924] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6924] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6925 attached [pid 6925] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6925] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6925] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6925] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6925] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6925] chdir(".") = 0 [pid 6925] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6923] <... futex resumed>) = 0 [pid 6923] close(3) = 0 [pid 6923] close(4) = 0 [pid 6923] close(5) = -1 EBADF (Bad file descriptor) [pid 6923] close(6) = -1 EBADF (Bad file descriptor) [pid 6923] close(7) = -1 EBADF (Bad file descriptor) [pid 6923] close(8) = -1 EBADF (Bad file descriptor) [pid 6923] close(9) = -1 EBADF (Bad file descriptor) [pid 6923] close(10) = -1 EBADF (Bad file descriptor) [pid 6923] close(11) = -1 EBADF (Bad file descriptor) [pid 6923] close(12) = -1 EBADF (Bad file descriptor) [pid 6923] close(13) = -1 EBADF (Bad file descriptor) [pid 6923] close(14) = -1 EBADF (Bad file descriptor) [pid 6923] close(15) = -1 EBADF (Bad file descriptor) [pid 6923] close(16) = -1 EBADF (Bad file descriptor) [pid 6923] close(17) = -1 EBADF (Bad file descriptor) [pid 6923] close(18) = -1 EBADF (Bad file descriptor) [pid 6923] close(19) = -1 EBADF (Bad file descriptor) [pid 6923] close(20) = -1 EBADF (Bad file descriptor) [pid 6923] close(21) = -1 EBADF (Bad file descriptor) [pid 6923] close(22) = -1 EBADF (Bad file descriptor) [pid 6923] close(23) = -1 EBADF (Bad file descriptor) [pid 6923] close(24) = -1 EBADF (Bad file descriptor) [pid 6923] close(25) = -1 EBADF (Bad file descriptor) [pid 6923] close(26) = -1 EBADF (Bad file descriptor) [pid 6923] close(27) = -1 EBADF (Bad file descriptor) [pid 6923] close(28) = -1 EBADF (Bad file descriptor) [pid 6923] close(29) = -1 EBADF (Bad file descriptor) [pid 6923] exit_group(0) = ? [pid 6925] +++ exited with 0 +++ [pid 6924] <... futex resumed>) = ? [pid 6924] +++ exited with 0 +++ [pid 6923] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./632", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./632", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./632/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./632/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./632/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./632/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./632") = 0 [pid 5019] mkdir("./633", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1899 ./strace-static-x86_64: Process 6926 attached [pid 6926] set_robust_list(0x555556a426a0, 24) = 0 [pid 6926] chdir("./633") = 0 [pid 6926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6926] setpgid(0, 0) = 0 [pid 6926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6926] write(3, "1000", 4) = 4 [pid 6926] close(3) = 0 [pid 6926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6926] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6926] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6926] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6926] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6926] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1900]}, 88) = 1900 [pid 6926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6926] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6927 attached [pid 6927] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6927] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6927] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6927] memfd_create("syzkaller", 0) = 3 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 90.372277][ T6924] loop0: detected capacity change from 0 to 1024 [pid 6927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6927] munmap(0x7f15b9a45000, 524288) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6927] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6927] close(3) = 0 [pid 6927] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6927] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6927] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6927] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6927] ioctl(4, LOOP_CLR_FD) = 0 [pid 6927] close(4) = 0 [pid 6927] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] <... futex resumed>) = 0 [pid 6926] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6926] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6926] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6926] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1901]}, 88) = 1901 [pid 6926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6926] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6927] <... futex resumed>) = 1 [pid 6927] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6927] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6927] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6928 attached [pid 6928] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6928] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6928] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6928] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6928] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6928] chdir(".") = 0 [pid 6928] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6926] <... futex resumed>) = 0 [pid 6926] close(3) = 0 [pid 6926] close(4) = 0 [pid 6928] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6926] close(5) = -1 EBADF (Bad file descriptor) [pid 6926] close(6) = -1 EBADF (Bad file descriptor) [pid 6926] close(7) = -1 EBADF (Bad file descriptor) [pid 6926] close(8) = -1 EBADF (Bad file descriptor) [pid 6926] close(9) = -1 EBADF (Bad file descriptor) [pid 6926] close(10) = -1 EBADF (Bad file descriptor) [pid 6926] close(11) = -1 EBADF (Bad file descriptor) [pid 6926] close(12) = -1 EBADF (Bad file descriptor) [pid 6926] close(13) = -1 EBADF (Bad file descriptor) [pid 6926] close(14) = -1 EBADF (Bad file descriptor) [pid 6926] close(15) = -1 EBADF (Bad file descriptor) [pid 6926] close(16) = -1 EBADF (Bad file descriptor) [pid 6926] close(17) = -1 EBADF (Bad file descriptor) [pid 6926] close(18) = -1 EBADF (Bad file descriptor) [pid 6926] close(19) = -1 EBADF (Bad file descriptor) [pid 6926] close(20) = -1 EBADF (Bad file descriptor) [pid 6926] close(21) = -1 EBADF (Bad file descriptor) [pid 6926] close(22) = -1 EBADF (Bad file descriptor) [pid 6926] close(23) = -1 EBADF (Bad file descriptor) [pid 6926] close(24) = -1 EBADF (Bad file descriptor) [pid 6926] close(25) = -1 EBADF (Bad file descriptor) [pid 6926] close(26) = -1 EBADF (Bad file descriptor) [pid 6926] close(27) = -1 EBADF (Bad file descriptor) [pid 6926] close(28) = -1 EBADF (Bad file descriptor) [pid 6926] close(29) = -1 EBADF (Bad file descriptor) [pid 6926] exit_group(0 [pid 6928] <... futex resumed>) = ? [pid 6927] <... futex resumed>) = ? [pid 6926] <... exit_group resumed>) = ? [pid 6927] +++ exited with 0 +++ [pid 6928] +++ exited with 0 +++ [pid 6926] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1899, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./633", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./633", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./633/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./633/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./633/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./633/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./633/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./633/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./633/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./633/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./633/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./633") = 0 [pid 5019] mkdir("./634", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1902 ./strace-static-x86_64: Process 6929 attached [pid 6929] set_robust_list(0x555556a426a0, 24) = 0 [pid 6929] chdir("./634") = 0 [pid 6929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6929] setpgid(0, 0) = 0 [pid 6929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6929] write(3, "1000", 4) = 4 [pid 6929] close(3) = 0 [pid 6929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6929] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.433240][ T6927] loop0: detected capacity change from 0 to 1024 [pid 6929] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6929] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6929] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6929] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6929] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6930 attached [pid 6930] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6930] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6930] rt_sigprocmask(SIG_SETMASK, [], [pid 6929] <... clone3 resumed> => {parent_tid=[1903]}, 88) = 1903 [pid 6930] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6930] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6929] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6929] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6930] <... futex resumed>) = 0 [pid 6929] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6930] memfd_create("syzkaller", 0) = 3 [pid 6930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6930] munmap(0x7f15b9a45000, 524288) = 0 [pid 6930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6930] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6930] close(3) = 0 [pid 6930] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6930] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6930] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6930] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6930] ioctl(4, LOOP_CLR_FD) = 0 [pid 6930] close(4) = 0 [pid 6930] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6929] <... futex resumed>) = 0 [pid 6929] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6929] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6930] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6929] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6929] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1904]}, 88) = 1904 [pid 6929] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6929] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6930] <... mknodat resumed>) = 0 [pid 6929] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6930] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6931 attached [pid 6930] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6931] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6931] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6931] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6931] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6931] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6931] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6931] chdir(".") = 0 [pid 6931] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6929] <... futex resumed>) = 0 [pid 6931] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6929] close(3) = 0 [pid 6929] close(4) = 0 [pid 6929] close(5) = -1 EBADF (Bad file descriptor) [pid 6929] close(6) = -1 EBADF (Bad file descriptor) [pid 6929] close(7) = -1 EBADF (Bad file descriptor) [pid 6929] close(8) = -1 EBADF (Bad file descriptor) [pid 6929] close(9) = -1 EBADF (Bad file descriptor) [pid 6929] close(10) = -1 EBADF (Bad file descriptor) [pid 6929] close(11) = -1 EBADF (Bad file descriptor) [pid 6929] close(12) = -1 EBADF (Bad file descriptor) [pid 6929] close(13) = -1 EBADF (Bad file descriptor) [pid 6929] close(14) = -1 EBADF (Bad file descriptor) [pid 6929] close(15) = -1 EBADF (Bad file descriptor) [pid 6929] close(16) = -1 EBADF (Bad file descriptor) [pid 6929] close(17) = -1 EBADF (Bad file descriptor) [pid 6929] close(18) = -1 EBADF (Bad file descriptor) [pid 6929] close(19) = -1 EBADF (Bad file descriptor) [pid 6929] close(20) = -1 EBADF (Bad file descriptor) [pid 6929] close(21) = -1 EBADF (Bad file descriptor) [pid 6929] close(22) = -1 EBADF (Bad file descriptor) [pid 6929] close(23) = -1 EBADF (Bad file descriptor) [pid 6929] close(24) = -1 EBADF (Bad file descriptor) [pid 6929] close(25) = -1 EBADF (Bad file descriptor) [pid 6929] close(26) = -1 EBADF (Bad file descriptor) [pid 6929] close(27) = -1 EBADF (Bad file descriptor) [pid 6929] close(28) = -1 EBADF (Bad file descriptor) [pid 6929] close(29) = -1 EBADF (Bad file descriptor) [pid 6929] exit_group(0) = ? [pid 6930] <... futex resumed>) = ? [pid 6931] <... futex resumed>) = ? [pid 6930] +++ exited with 0 +++ [pid 6931] +++ exited with 0 +++ [pid 6929] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1902, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./634", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./634", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./634/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./634/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./634/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./634") = 0 [pid 5019] mkdir("./635", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1905 ./strace-static-x86_64: Process 6932 attached [pid 6932] set_robust_list(0x555556a426a0, 24) = 0 [pid 6932] chdir("./635") = 0 [pid 6932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6932] setpgid(0, 0) = 0 [pid 6932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6932] write(3, "1000", 4) = 4 [pid 6932] close(3) = 0 [pid 6932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6932] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6932] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1906]}, 88) = 1906 [pid 6932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6932] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6933 attached [pid 6933] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6933] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6933] memfd_create("syzkaller", 0) = 3 [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 90.507426][ T6930] loop0: detected capacity change from 0 to 1024 [pid 6933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6933] munmap(0x7f15b9a45000, 524288) = 0 [pid 6933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6933] close(3) = 0 [pid 6933] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6933] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6933] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6933] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6933] ioctl(4, LOOP_CLR_FD) = 0 [pid 6933] close(4) = 0 [pid 6933] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6932] <... futex resumed>) = 0 [pid 6932] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6932] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1907]}, 88) = 1907 [pid 6932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6932] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6932] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6933] <... futex resumed>) = 1 [pid 6933] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6933] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6933] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6934 attached [pid 6934] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6934] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6934] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6934] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6934] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6934] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6934] chdir(".") = 0 [pid 6934] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6932] <... futex resumed>) = 0 [pid 6932] close(3) = 0 [pid 6932] close(4) = 0 [pid 6932] close(5) = -1 EBADF (Bad file descriptor) [pid 6932] close(6) = -1 EBADF (Bad file descriptor) [pid 6932] close(7) = -1 EBADF (Bad file descriptor) [pid 6932] close(8) = -1 EBADF (Bad file descriptor) [pid 6932] close(9) = -1 EBADF (Bad file descriptor) [pid 6932] close(10) = -1 EBADF (Bad file descriptor) [pid 6932] close(11) = -1 EBADF (Bad file descriptor) [pid 6932] close(12) = -1 EBADF (Bad file descriptor) [pid 6932] close(13) = -1 EBADF (Bad file descriptor) [pid 6932] close(14) = -1 EBADF (Bad file descriptor) [pid 6932] close(15) = -1 EBADF (Bad file descriptor) [pid 6932] close(16) = -1 EBADF (Bad file descriptor) [pid 6932] close(17) = -1 EBADF (Bad file descriptor) [pid 6932] close(18) = -1 EBADF (Bad file descriptor) [pid 6932] close(19) = -1 EBADF (Bad file descriptor) [pid 6932] close(20) = -1 EBADF (Bad file descriptor) [pid 6932] close(21) = -1 EBADF (Bad file descriptor) [pid 6932] close(22) = -1 EBADF (Bad file descriptor) [pid 6932] close(23) = -1 EBADF (Bad file descriptor) [pid 6932] close(24) = -1 EBADF (Bad file descriptor) [pid 6932] close(25) = -1 EBADF (Bad file descriptor) [pid 6932] close(26) = -1 EBADF (Bad file descriptor) [pid 6932] close(27 [pid 6934] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6932] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6932] close(28) = -1 EBADF (Bad file descriptor) [pid 6932] close(29) = -1 EBADF (Bad file descriptor) [pid 6932] exit_group(0 [pid 6934] <... futex resumed>) = ? [pid 6933] <... futex resumed>) = ? [pid 6932] <... exit_group resumed>) = ? [pid 6934] +++ exited with 0 +++ [pid 6933] +++ exited with 0 +++ [pid 6932] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1905, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./635", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./635", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./635/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./635/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./635/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./635/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./635") = 0 [pid 5019] mkdir("./636", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6935 attached [pid 6935] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1908 [pid 6935] chdir("./636") = 0 [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6935] setpgid(0, 0) = 0 [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6935] write(3, "1000", 4) = 4 [pid 6935] close(3) = 0 [pid 6935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6935] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6935] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6935] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [ 90.574525][ T6933] loop0: detected capacity change from 0 to 1024 [pid 6935] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6935] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1909]}, 88) = 1909 [pid 6935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6935] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6936 attached [pid 6936] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6936] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6936] memfd_create("syzkaller", 0) = 3 [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6936] munmap(0x7f15b9a45000, 524288) = 0 [pid 6936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6936] close(3) = 0 [pid 6936] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6936] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6936] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6936] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6936] ioctl(4, LOOP_CLR_FD) = 0 [pid 6936] close(4) = 0 [pid 6936] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6935] <... futex resumed>) = 0 [pid 6935] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6936] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6935] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6935] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6935] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6935] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1910]}, 88) = 1910 [pid 6935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6935] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6937 attached [pid 6937] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6937] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6936] <... mknodat resumed>) = 0 [pid 6936] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6936] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6937] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6937] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6937] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6937] chdir(".") = 0 [pid 6937] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6935] <... futex resumed>) = 0 [pid 6935] close(3) = 0 [pid 6935] close(4) = 0 [pid 6935] close(5) = -1 EBADF (Bad file descriptor) [pid 6935] close(6) = -1 EBADF (Bad file descriptor) [pid 6935] close(7) = -1 EBADF (Bad file descriptor) [pid 6935] close(8) = -1 EBADF (Bad file descriptor) [pid 6935] close(9) = -1 EBADF (Bad file descriptor) [pid 6935] close(10) = -1 EBADF (Bad file descriptor) [pid 6935] close(11) = -1 EBADF (Bad file descriptor) [pid 6935] close(12) = -1 EBADF (Bad file descriptor) [pid 6935] close(13) = -1 EBADF (Bad file descriptor) [pid 6935] close(14) = -1 EBADF (Bad file descriptor) [pid 6935] close(15) = -1 EBADF (Bad file descriptor) [pid 6935] close(16) = -1 EBADF (Bad file descriptor) [pid 6935] close(17) = -1 EBADF (Bad file descriptor) [pid 6935] close(18) = -1 EBADF (Bad file descriptor) [pid 6935] close(19) = -1 EBADF (Bad file descriptor) [pid 6935] close(20) = -1 EBADF (Bad file descriptor) [pid 6935] close(21) = -1 EBADF (Bad file descriptor) [pid 6937] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6935] close(22) = -1 EBADF (Bad file descriptor) [pid 6935] close(23) = -1 EBADF (Bad file descriptor) [pid 6935] close(24) = -1 EBADF (Bad file descriptor) [pid 6935] close(25) = -1 EBADF (Bad file descriptor) [pid 6935] close(26) = -1 EBADF (Bad file descriptor) [pid 6935] close(27) = -1 EBADF (Bad file descriptor) [pid 6935] close(28) = -1 EBADF (Bad file descriptor) [pid 6935] close(29) = -1 EBADF (Bad file descriptor) [pid 6935] exit_group(0) = ? [pid 6936] <... futex resumed>) = ? [pid 6937] <... futex resumed>) = ? [pid 6936] +++ exited with 0 +++ [pid 6937] +++ exited with 0 +++ [pid 6935] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1908, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./636", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./636", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./636/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./636/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./636/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./636") = 0 [pid 5019] mkdir("./637", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1911 ./strace-static-x86_64: Process 6938 attached [pid 6938] set_robust_list(0x555556a426a0, 24) = 0 [pid 6938] chdir("./637") = 0 [pid 6938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6938] setpgid(0, 0) = 0 [pid 6938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6938] write(3, "1000", 4) = 4 [pid 6938] close(3) = 0 [ 90.646826][ T6936] loop0: detected capacity change from 0 to 1024 [pid 6938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6938] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6938] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6938] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6938] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6938] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1912]}, 88) = 1912 [pid 6938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6938] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6938] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6939 attached [pid 6939] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6939] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6939] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6939] memfd_create("syzkaller", 0) = 3 [pid 6939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6939] munmap(0x7f15b9a45000, 524288) = 0 [pid 6939] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6939] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6939] close(3) = 0 [pid 6939] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6939] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6939] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6939] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6939] ioctl(4, LOOP_CLR_FD) = 0 [pid 6939] close(4) = 0 [pid 6939] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6938] <... futex resumed>) = 0 [pid 6938] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6938] <... futex resumed>) = 0 [pid 6938] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6938] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6938] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6939] <... mknodat resumed>) = 0 [pid 6938] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6938] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 6939] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6938] <... clone3 resumed> => {parent_tid=[1913]}, 88) = 1913 ./strace-static-x86_64: Process 6940 attached [pid 6940] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6940] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6940] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] <... futex resumed>) = 0 [pid 6938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6938] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6938] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6940] <... futex resumed>) = 0 [pid 6940] mkdir(".", 0777 [pid 6939] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6940] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6940] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6940] chdir(".") = 0 [pid 6940] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6938] <... futex resumed>) = 0 [pid 6938] close(3) = 0 [pid 6938] close(4) = 0 [pid 6938] close(5) = -1 EBADF (Bad file descriptor) [pid 6938] close(6) = -1 EBADF (Bad file descriptor) [pid 6938] close(7) = -1 EBADF (Bad file descriptor) [pid 6938] close(8) = -1 EBADF (Bad file descriptor) [pid 6938] close(9) = -1 EBADF (Bad file descriptor) [pid 6940] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6938] close(10) = -1 EBADF (Bad file descriptor) [pid 6938] close(11) = -1 EBADF (Bad file descriptor) [pid 6938] close(12) = -1 EBADF (Bad file descriptor) [pid 6938] close(13) = -1 EBADF (Bad file descriptor) [pid 6938] close(14) = -1 EBADF (Bad file descriptor) [pid 6938] close(15) = -1 EBADF (Bad file descriptor) [pid 6938] close(16) = -1 EBADF (Bad file descriptor) [pid 6938] close(17) = -1 EBADF (Bad file descriptor) [pid 6938] close(18) = -1 EBADF (Bad file descriptor) [pid 6938] close(19) = -1 EBADF (Bad file descriptor) [pid 6938] close(20) = -1 EBADF (Bad file descriptor) [pid 6938] close(21) = -1 EBADF (Bad file descriptor) [pid 6938] close(22) = -1 EBADF (Bad file descriptor) [pid 6938] close(23) = -1 EBADF (Bad file descriptor) [pid 6938] close(24) = -1 EBADF (Bad file descriptor) [pid 6938] close(25) = -1 EBADF (Bad file descriptor) [pid 6938] close(26) = -1 EBADF (Bad file descriptor) [pid 6938] close(27) = -1 EBADF (Bad file descriptor) [pid 6938] close(28) = -1 EBADF (Bad file descriptor) [pid 6938] close(29) = -1 EBADF (Bad file descriptor) [pid 6938] exit_group(0 [pid 6939] <... futex resumed>) = ? [pid 6938] <... exit_group resumed>) = ? [pid 6939] +++ exited with 0 +++ [pid 6940] <... futex resumed>) = ? [pid 6940] +++ exited with 0 +++ [pid 6938] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1911, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./637", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./637", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./637/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./637/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./637/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./637/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./637") = 0 [pid 5019] mkdir("./638", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 90.722400][ T6939] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1914 ./strace-static-x86_64: Process 6941 attached [pid 6941] set_robust_list(0x555556a426a0, 24) = 0 [pid 6941] chdir("./638") = 0 [pid 6941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6941] setpgid(0, 0) = 0 [pid 6941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6941] write(3, "1000", 4) = 4 [pid 6941] close(3) = 0 [pid 6941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6941] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6941] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6941] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6941] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6942 attached [pid 6942] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6942] set_robust_list(0x7f15c1e659a0, 24 [pid 6941] <... clone3 resumed> => {parent_tid=[1915]}, 88) = 1915 [pid 6942] <... set_robust_list resumed>) = 0 [pid 6942] rt_sigprocmask(SIG_SETMASK, [], [pid 6941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6942] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6942] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6941] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6942] <... futex resumed>) = 0 [pid 6942] memfd_create("syzkaller", 0 [pid 6941] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6942] <... memfd_create resumed>) = 3 [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6942] munmap(0x7f15b9a45000, 524288) = 0 [pid 6942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6942] close(3) = 0 [pid 6942] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6942] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6942] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6942] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6942] ioctl(4, LOOP_CLR_FD) = 0 [pid 6942] close(4) = 0 [pid 6942] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6942] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6941] <... futex resumed>) = 0 [pid 6941] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6942] <... futex resumed>) = 0 [pid 6942] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6941] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6941] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6943 attached => {parent_tid=[1916]}, 88) = 1916 [pid 6943] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6941] rt_sigprocmask(SIG_SETMASK, [], [pid 6943] <... rseq resumed>) = 0 [pid 6941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6941] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6943] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6943] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6943] mkdir(".", 0777 [pid 6941] <... futex resumed>) = 0 [pid 6943] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6943] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6941] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6942] <... mknodat resumed>) = 0 [pid 6942] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6942] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6943] <... mount resumed>) = 0 [pid 6943] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6943] chdir(".") = 0 [pid 6943] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6941] <... futex resumed>) = 0 [pid 6941] close(3) = 0 [pid 6943] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6941] close(4) = 0 [pid 6941] close(5) = -1 EBADF (Bad file descriptor) [pid 6941] close(6) = -1 EBADF (Bad file descriptor) [pid 6941] close(7) = -1 EBADF (Bad file descriptor) [pid 6941] close(8) = -1 EBADF (Bad file descriptor) [pid 6941] close(9) = -1 EBADF (Bad file descriptor) [pid 6941] close(10) = -1 EBADF (Bad file descriptor) [pid 6941] close(11) = -1 EBADF (Bad file descriptor) [pid 6941] close(12) = -1 EBADF (Bad file descriptor) [pid 6941] close(13) = -1 EBADF (Bad file descriptor) [pid 6941] close(14) = -1 EBADF (Bad file descriptor) [pid 6941] close(15) = -1 EBADF (Bad file descriptor) [pid 6941] close(16) = -1 EBADF (Bad file descriptor) [pid 6941] close(17) = -1 EBADF (Bad file descriptor) [pid 6941] close(18) = -1 EBADF (Bad file descriptor) [pid 6941] close(19) = -1 EBADF (Bad file descriptor) [pid 6941] close(20) = -1 EBADF (Bad file descriptor) [pid 6941] close(21) = -1 EBADF (Bad file descriptor) [pid 6941] close(22) = -1 EBADF (Bad file descriptor) [pid 6941] close(23) = -1 EBADF (Bad file descriptor) [pid 6941] close(24) = -1 EBADF (Bad file descriptor) [pid 6941] close(25) = -1 EBADF (Bad file descriptor) [pid 6941] close(26) = -1 EBADF (Bad file descriptor) [pid 6941] close(27) = -1 EBADF (Bad file descriptor) [pid 6941] close(28) = -1 EBADF (Bad file descriptor) [pid 6941] close(29) = -1 EBADF (Bad file descriptor) [pid 6941] exit_group(0 [pid 6942] <... futex resumed>) = ? [pid 6941] <... exit_group resumed>) = ? [pid 6943] <... futex resumed>) = ? [pid 6942] +++ exited with 0 +++ [pid 6943] +++ exited with 0 +++ [pid 6941] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1914, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./638", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./638", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./638/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./638/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./638/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./638") = 0 [pid 5019] mkdir("./639", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 90.801684][ T6942] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1917 ./strace-static-x86_64: Process 6944 attached [pid 6944] set_robust_list(0x555556a426a0, 24) = 0 [pid 6944] chdir("./639") = 0 [pid 6944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6944] setpgid(0, 0) = 0 [pid 6944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6944] write(3, "1000", 4) = 4 [pid 6944] close(3) = 0 [pid 6944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6944] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6944] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6944] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6944] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6944] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6944] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6945 attached => {parent_tid=[1918]}, 88) = 1918 [pid 6945] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6945] set_robust_list(0x7f15c1e659a0, 24 [pid 6944] rt_sigprocmask(SIG_SETMASK, [], [pid 6945] <... set_robust_list resumed>) = 0 [pid 6944] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6945] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6944] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6945] <... futex resumed>) = 0 [pid 6944] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6945] memfd_create("syzkaller", 0) = 3 [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6945] munmap(0x7f15b9a45000, 524288) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6945] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6945] close(3) = 0 [pid 6945] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6945] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6945] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6945] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6945] ioctl(4, LOOP_CLR_FD) = 0 [pid 6945] close(4) = 0 [pid 6945] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6944] <... futex resumed>) = 0 [pid 6944] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6944] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6944] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6944] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1919]}, 88) = 1919 [pid 6944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6944] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6944] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6945] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6946 attached [pid 6946] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6945] <... mknodat resumed>) = 0 [pid 6945] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6946] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6946] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6946] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6946] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6946] chdir(".") = 0 [pid 6946] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6944] <... futex resumed>) = 0 [pid 6944] close(3 [pid 6946] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6944] <... close resumed>) = 0 [pid 6944] close(4) = 0 [pid 6944] close(5) = -1 EBADF (Bad file descriptor) [pid 6944] close(6) = -1 EBADF (Bad file descriptor) [pid 6944] close(7) = -1 EBADF (Bad file descriptor) [pid 6944] close(8) = -1 EBADF (Bad file descriptor) [pid 6944] close(9) = -1 EBADF (Bad file descriptor) [pid 6944] close(10) = -1 EBADF (Bad file descriptor) [pid 6944] close(11) = -1 EBADF (Bad file descriptor) [pid 6944] close(12) = -1 EBADF (Bad file descriptor) [pid 6944] close(13) = -1 EBADF (Bad file descriptor) [pid 6944] close(14) = -1 EBADF (Bad file descriptor) [pid 6944] close(15) = -1 EBADF (Bad file descriptor) [pid 6944] close(16) = -1 EBADF (Bad file descriptor) [pid 6944] close(17) = -1 EBADF (Bad file descriptor) [pid 6944] close(18) = -1 EBADF (Bad file descriptor) [pid 6944] close(19) = -1 EBADF (Bad file descriptor) [pid 6944] close(20) = -1 EBADF (Bad file descriptor) [pid 6944] close(21) = -1 EBADF (Bad file descriptor) [pid 6944] close(22) = -1 EBADF (Bad file descriptor) [pid 6944] close(23) = -1 EBADF (Bad file descriptor) [pid 6944] close(24) = -1 EBADF (Bad file descriptor) [pid 6944] close(25) = -1 EBADF (Bad file descriptor) [pid 6944] close(26) = -1 EBADF (Bad file descriptor) [pid 6944] close(27) = -1 EBADF (Bad file descriptor) [pid 6944] close(28) = -1 EBADF (Bad file descriptor) [pid 6944] close(29) = -1 EBADF (Bad file descriptor) [pid 6944] exit_group(0 [pid 6946] <... futex resumed>) = ? [pid 6945] <... futex resumed>) = ? [pid 6944] <... exit_group resumed>) = ? [pid 6946] +++ exited with 0 +++ [pid 6945] +++ exited with 0 +++ [pid 6944] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1917, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./639", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./639", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./639/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./639/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./639/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./639/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./639") = 0 [pid 5019] mkdir("./640", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1920 ./strace-static-x86_64: Process 6947 attached [pid 6947] set_robust_list(0x555556a426a0, 24) = 0 [pid 6947] chdir("./640") = 0 [pid 6947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6947] setpgid(0, 0) = 0 [pid 6947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6947] write(3, "1000", 4) = 4 [pid 6947] close(3) = 0 [pid 6947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6947] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6947] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6947] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 90.885060][ T6945] loop0: detected capacity change from 0 to 1024 [pid 6947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6947] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6947] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6947] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6948 attached => {parent_tid=[1921]}, 88) = 1921 [pid 6948] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6948] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6948] rt_sigprocmask(SIG_SETMASK, [], [pid 6947] rt_sigprocmask(SIG_SETMASK, [], [pid 6948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6948] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6947] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6947] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6948] <... futex resumed>) = 0 [pid 6947] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6948] memfd_create("syzkaller", 0) = 3 [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6948] munmap(0x7f15b9a45000, 524288) = 0 [pid 6948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6948] close(3) = 0 [pid 6948] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6948] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6948] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6948] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6948] ioctl(4, LOOP_CLR_FD) = 0 [pid 6948] close(4) = 0 [pid 6948] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6947] <... futex resumed>) = 0 [pid 6948] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6947] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6947] <... futex resumed>) = 0 [pid 6947] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6948] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6947] <... futex resumed>) = 0 [pid 6947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6947] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6947] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6947] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1922]}, 88) = 1922 [pid 6947] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6947] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6947] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6949 attached [pid 6949] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6949] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6949] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6949] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6948] <... mknodat resumed>) = 0 [pid 6948] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6949] <... mount resumed>) = 0 [pid 6948] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6949] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6949] chdir(".") = 0 [pid 6949] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6947] <... futex resumed>) = 0 [pid 6947] close(3) = 0 [pid 6949] <... futex resumed>) = 1 [pid 6947] close(4) = 0 [pid 6949] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6947] close(5) = -1 EBADF (Bad file descriptor) [pid 6947] close(6) = -1 EBADF (Bad file descriptor) [pid 6947] close(7) = -1 EBADF (Bad file descriptor) [pid 6947] close(8) = -1 EBADF (Bad file descriptor) [pid 6947] close(9) = -1 EBADF (Bad file descriptor) [pid 6947] close(10) = -1 EBADF (Bad file descriptor) [pid 6947] close(11) = -1 EBADF (Bad file descriptor) [pid 6947] close(12) = -1 EBADF (Bad file descriptor) [pid 6947] close(13) = -1 EBADF (Bad file descriptor) [pid 6947] close(14) = -1 EBADF (Bad file descriptor) [pid 6947] close(15) = -1 EBADF (Bad file descriptor) [pid 6947] close(16) = -1 EBADF (Bad file descriptor) [pid 6947] close(17) = -1 EBADF (Bad file descriptor) [pid 6947] close(18) = -1 EBADF (Bad file descriptor) [pid 6947] close(19) = -1 EBADF (Bad file descriptor) [pid 6947] close(20) = -1 EBADF (Bad file descriptor) [pid 6947] close(21) = -1 EBADF (Bad file descriptor) [pid 6947] close(22) = -1 EBADF (Bad file descriptor) [pid 6947] close(23) = -1 EBADF (Bad file descriptor) [pid 6947] close(24) = -1 EBADF (Bad file descriptor) [pid 6947] close(25) = -1 EBADF (Bad file descriptor) [pid 6947] close(26) = -1 EBADF (Bad file descriptor) [pid 6947] close(27) = -1 EBADF (Bad file descriptor) [pid 6947] close(28) = -1 EBADF (Bad file descriptor) [pid 6947] close(29) = -1 EBADF (Bad file descriptor) [pid 6947] exit_group(0 [pid 6948] <... futex resumed>) = ? [pid 6947] <... exit_group resumed>) = ? [pid 6949] <... futex resumed>) = ? [pid 6948] +++ exited with 0 +++ [pid 6949] +++ exited with 0 +++ [pid 6947] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1920, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./640", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./640", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./640/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./640/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./640/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./640") = 0 [pid 5019] mkdir("./641", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 90.962784][ T6948] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6950 attached , child_tidptr=0x555556a42690) = 1923 [pid 6950] set_robust_list(0x555556a426a0, 24) = 0 [pid 6950] chdir("./641") = 0 [pid 6950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6950] setpgid(0, 0) = 0 [pid 6950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6950] write(3, "1000", 4) = 4 [pid 6950] close(3) = 0 [pid 6950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6950] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6950] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6950] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6950] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6950] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6951 attached [pid 6951] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6951] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6951] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6951] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6950] <... clone3 resumed> => {parent_tid=[1924]}, 88) = 1924 [pid 6950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6950] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6951] <... futex resumed>) = 0 [pid 6950] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6951] memfd_create("syzkaller", 0) = 3 [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6951] munmap(0x7f15b9a45000, 524288) = 0 [pid 6951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6951] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6951] close(3) = 0 [pid 6951] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6951] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6951] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6951] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6951] ioctl(4, LOOP_CLR_FD) = 0 [pid 6951] close(4) = 0 [pid 6951] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6950] <... futex resumed>) = 0 [pid 6950] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6950] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6951] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6950] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6950] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6950] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1925]}, 88) = 1925 [pid 6950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6950] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6950] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6952 attached [pid 6952] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6952] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6952] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6951] <... mknodat resumed>) = 0 [pid 6952] mkdir(".", 0777 [pid 6951] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6952] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6951] <... futex resumed>) = 0 [pid 6952] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6951] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6952] <... mount resumed>) = 0 [pid 6952] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6952] chdir(".") = 0 [pid 6952] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... futex resumed>) = 0 [pid 6950] close(3) = 0 [pid 6950] close(4) = 0 [pid 6950] close(5) = -1 EBADF (Bad file descriptor) [pid 6950] close(6) = -1 EBADF (Bad file descriptor) [pid 6950] close(7) = -1 EBADF (Bad file descriptor) [pid 6950] close(8) = -1 EBADF (Bad file descriptor) [pid 6950] close(9) = -1 EBADF (Bad file descriptor) [pid 6950] close(10) = -1 EBADF (Bad file descriptor) [pid 6950] close(11) = -1 EBADF (Bad file descriptor) [pid 6950] close(12) = -1 EBADF (Bad file descriptor) [pid 6950] close(13) = -1 EBADF (Bad file descriptor) [pid 6950] close(14) = -1 EBADF (Bad file descriptor) [pid 6950] close(15) = -1 EBADF (Bad file descriptor) [pid 6950] close(16) = -1 EBADF (Bad file descriptor) [pid 6950] close(17) = -1 EBADF (Bad file descriptor) [pid 6950] close(18) = -1 EBADF (Bad file descriptor) [pid 6950] close(19) = -1 EBADF (Bad file descriptor) [pid 6950] close(20) = -1 EBADF (Bad file descriptor) [pid 6950] close(21) = -1 EBADF (Bad file descriptor) [pid 6950] close(22) = -1 EBADF (Bad file descriptor) [pid 6950] close(23) = -1 EBADF (Bad file descriptor) [pid 6950] close(24) = -1 EBADF (Bad file descriptor) [pid 6950] close(25) = -1 EBADF (Bad file descriptor) [pid 6950] close(26) = -1 EBADF (Bad file descriptor) [pid 6950] close(27) = -1 EBADF (Bad file descriptor) [pid 6950] close(28) = -1 EBADF (Bad file descriptor) [pid 6950] close(29) = -1 EBADF (Bad file descriptor) [pid 6950] exit_group(0 [pid 6951] <... futex resumed>) = ? [pid 6950] <... exit_group resumed>) = ? [pid 6951] +++ exited with 0 +++ [pid 6952] <... futex resumed>) = ? [pid 6952] +++ exited with 0 +++ [pid 6950] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1923, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./641", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./641", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./641/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./641/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./641/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./641/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./641/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./641/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 91.056410][ T6951] loop0: detected capacity change from 0 to 1024 [pid 5019] umount2("./641/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./641/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./641/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./641") = 0 [pid 5019] mkdir("./642", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1926 ./strace-static-x86_64: Process 6953 attached [pid 6953] set_robust_list(0x555556a426a0, 24) = 0 [pid 6953] chdir("./642") = 0 [pid 6953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6953] setpgid(0, 0) = 0 [pid 6953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6953] write(3, "1000", 4) = 4 [pid 6953] close(3) = 0 [pid 6953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6953] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6953] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6953] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6954 attached => {parent_tid=[1927]}, 88) = 1927 [pid 6954] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6954] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6953] rt_sigprocmask(SIG_SETMASK, [], [pid 6954] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6954] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6953] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6953] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6953] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6954] <... futex resumed>) = 0 [pid 6954] memfd_create("syzkaller", 0) = 3 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6954] munmap(0x7f15b9a45000, 524288) = 0 [pid 6954] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6954] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6954] close(3) = 0 [pid 6954] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6954] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6954] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6954] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6954] ioctl(4, LOOP_CLR_FD) = 0 [pid 6954] close(4) = 0 [pid 6954] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6953] <... futex resumed>) = 0 [pid 6953] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6954] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6953] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1928]}, 88) = 1928 [pid 6953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6953] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6953] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6955 attached [pid 6955] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6955] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6955] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6955] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6955] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6954] <... mknodat resumed>) = 0 [pid 6954] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6955] <... mount resumed>) = 0 [pid 6955] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6954] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6955] chdir(".") = 0 [pid 6955] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6953] <... futex resumed>) = 0 [pid 6953] close(3) = 0 [pid 6953] close(4) = 0 [pid 6953] close(5) = -1 EBADF (Bad file descriptor) [pid 6953] close(6) = -1 EBADF (Bad file descriptor) [pid 6953] close(7) = -1 EBADF (Bad file descriptor) [pid 6953] close(8) = -1 EBADF (Bad file descriptor) [pid 6953] close(9) = -1 EBADF (Bad file descriptor) [pid 6953] close(10) = -1 EBADF (Bad file descriptor) [pid 6953] close(11) = -1 EBADF (Bad file descriptor) [pid 6953] close(12) = -1 EBADF (Bad file descriptor) [pid 6953] close(13) = -1 EBADF (Bad file descriptor) [pid 6953] close(14) = -1 EBADF (Bad file descriptor) [pid 6953] close(15) = -1 EBADF (Bad file descriptor) [pid 6953] close(16) = -1 EBADF (Bad file descriptor) [pid 6953] close(17) = -1 EBADF (Bad file descriptor) [pid 6953] close(18) = -1 EBADF (Bad file descriptor) [pid 6953] close(19) = -1 EBADF (Bad file descriptor) [pid 6953] close(20) = -1 EBADF (Bad file descriptor) [pid 6953] close(21) = -1 EBADF (Bad file descriptor) [pid 6953] close(22) = -1 EBADF (Bad file descriptor) [pid 6953] close(23) = -1 EBADF (Bad file descriptor) [pid 6953] close(24) = -1 EBADF (Bad file descriptor) [pid 6953] close(25) = -1 EBADF (Bad file descriptor) [pid 6953] close(26) = -1 EBADF (Bad file descriptor) [pid 6953] close(27) = -1 EBADF (Bad file descriptor) [pid 6953] close(28) = -1 EBADF (Bad file descriptor) [pid 6953] close(29) = -1 EBADF (Bad file descriptor) [pid 6953] exit_group(0) = ? [pid 6954] <... futex resumed>) = ? [pid 6955] +++ exited with 0 +++ [pid 6954] +++ exited with 0 +++ [pid 6953] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1926, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] umount2("./642", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./642", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./642/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./642/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./642/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./642") = 0 [pid 5019] mkdir("./643", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1929 ./strace-static-x86_64: Process 6956 attached [pid 6956] set_robust_list(0x555556a426a0, 24) = 0 [pid 6956] chdir("./643") = 0 [pid 6956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6956] setpgid(0, 0) = 0 [pid 6956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6956] write(3, "1000", 4) = 4 [pid 6956] close(3) = 0 [pid 6956] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6956] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6956] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6956] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6956] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6956] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6956] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6956] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1930]}, 88) = 1930 [pid 6956] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6956] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6956] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6957 attached [pid 6957] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6957] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 91.137727][ T6954] loop0: detected capacity change from 0 to 1024 [pid 6957] memfd_create("syzkaller", 0) = 3 [pid 6957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6957] munmap(0x7f15b9a45000, 524288) = 0 [pid 6957] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6957] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6957] close(3) = 0 [pid 6957] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6957] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6957] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6957] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6957] ioctl(4, LOOP_CLR_FD) = 0 [pid 6957] close(4) = 0 [pid 6957] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6956] <... futex resumed>) = 0 [pid 6957] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6956] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6956] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6956] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6956] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6956] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6956] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6958 attached => {parent_tid=[1931]}, 88) = 1931 [pid 6958] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6956] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6956] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6956] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6958] <... rseq resumed>) = 0 [pid 6957] <... futex resumed>) = 0 [pid 6957] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6958] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6958] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6958] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6957] <... mknodat resumed>) = 0 [pid 6957] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6957] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6958] <... mount resumed>) = 0 [pid 6958] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6958] chdir(".") = 0 [pid 6958] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6956] <... futex resumed>) = 0 [pid 6956] close(3) = 0 [pid 6956] close(4) = 0 [pid 6956] close(5) = -1 EBADF (Bad file descriptor) [pid 6956] close(6) = -1 EBADF (Bad file descriptor) [pid 6956] close(7) = -1 EBADF (Bad file descriptor) [pid 6956] close(8) = -1 EBADF (Bad file descriptor) [pid 6956] close(9) = -1 EBADF (Bad file descriptor) [pid 6956] close(10) = -1 EBADF (Bad file descriptor) [pid 6956] close(11) = -1 EBADF (Bad file descriptor) [pid 6956] close(12) = -1 EBADF (Bad file descriptor) [pid 6956] close(13) = -1 EBADF (Bad file descriptor) [pid 6956] close(14) = -1 EBADF (Bad file descriptor) [pid 6956] close(15) = -1 EBADF (Bad file descriptor) [pid 6956] close(16) = -1 EBADF (Bad file descriptor) [pid 6956] close(17) = -1 EBADF (Bad file descriptor) [pid 6956] close(18) = -1 EBADF (Bad file descriptor) [pid 6956] close(19) = -1 EBADF (Bad file descriptor) [pid 6956] close(20) = -1 EBADF (Bad file descriptor) [pid 6956] close(21) = -1 EBADF (Bad file descriptor) [pid 6956] close(22) = -1 EBADF (Bad file descriptor) [pid 6956] close(23) = -1 EBADF (Bad file descriptor) [pid 6956] close(24) = -1 EBADF (Bad file descriptor) [pid 6956] close(25) = -1 EBADF (Bad file descriptor) [pid 6956] close(26) = -1 EBADF (Bad file descriptor) [pid 6956] close(27) = -1 EBADF (Bad file descriptor) [pid 6956] close(28) = -1 EBADF (Bad file descriptor) [pid 6956] close(29) = -1 EBADF (Bad file descriptor) [pid 6956] exit_group(0 [pid 6957] <... futex resumed>) = ? [pid 6956] <... exit_group resumed>) = ? [pid 6957] +++ exited with 0 +++ [pid 6958] +++ exited with 0 +++ [pid 6956] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1929, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./643", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./643", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./643/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./643/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./643/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./643/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./643/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./643/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./643/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./643/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./643/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./643") = 0 [pid 5019] mkdir("./644", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 91.206411][ T6957] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1932 ./strace-static-x86_64: Process 6959 attached [pid 6959] set_robust_list(0x555556a426a0, 24) = 0 [pid 6959] chdir("./644") = 0 [pid 6959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6959] setpgid(0, 0) = 0 [pid 6959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6959] write(3, "1000", 4) = 4 [pid 6959] close(3) = 0 [pid 6959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6959] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6959] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6959] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6959] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6959] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6960 attached [pid 6960] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6960] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6960] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6960] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6959] <... clone3 resumed> => {parent_tid=[1933]}, 88) = 1933 [pid 6959] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6959] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6960] <... futex resumed>) = 0 [pid 6959] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6960] memfd_create("syzkaller", 0) = 3 [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6960] munmap(0x7f15b9a45000, 524288) = 0 [pid 6960] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6960] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6960] close(3) = 0 [pid 6960] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6960] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6960] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6960] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6960] ioctl(4, LOOP_CLR_FD) = 0 [pid 6960] close(4) = 0 [pid 6960] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6959] <... futex resumed>) = 0 [pid 6959] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6959] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6959] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6959] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6961 attached [pid 6961] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6961] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6961] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6960] <... futex resumed>) = 1 [pid 6959] <... clone3 resumed> => {parent_tid=[1934]}, 88) = 1934 [pid 6960] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6959] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6959] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6961] <... futex resumed>) = 0 [pid 6961] mkdir(".", 0777 [pid 6959] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6961] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 6961] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6960] <... mknodat resumed>) = 0 [pid 6960] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6960] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] <... mount resumed>) = 0 [pid 6961] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6961] chdir(".") = 0 [pid 6961] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6959] <... futex resumed>) = 0 [pid 6959] close(3) = 0 [pid 6959] close(4) = 0 [pid 6961] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6959] close(5) = -1 EBADF (Bad file descriptor) [pid 6959] close(6) = -1 EBADF (Bad file descriptor) [pid 6959] close(7) = -1 EBADF (Bad file descriptor) [pid 6959] close(8) = -1 EBADF (Bad file descriptor) [pid 6959] close(9) = -1 EBADF (Bad file descriptor) [pid 6959] close(10) = -1 EBADF (Bad file descriptor) [pid 6959] close(11) = -1 EBADF (Bad file descriptor) [pid 6959] close(12) = -1 EBADF (Bad file descriptor) [pid 6959] close(13) = -1 EBADF (Bad file descriptor) [pid 6959] close(14) = -1 EBADF (Bad file descriptor) [pid 6959] close(15) = -1 EBADF (Bad file descriptor) [pid 6959] close(16) = -1 EBADF (Bad file descriptor) [pid 6959] close(17) = -1 EBADF (Bad file descriptor) [pid 6959] close(18) = -1 EBADF (Bad file descriptor) [pid 6959] close(19) = -1 EBADF (Bad file descriptor) [pid 6959] close(20) = -1 EBADF (Bad file descriptor) [pid 6959] close(21) = -1 EBADF (Bad file descriptor) [pid 6959] close(22) = -1 EBADF (Bad file descriptor) [pid 6959] close(23) = -1 EBADF (Bad file descriptor) [pid 6959] close(24) = -1 EBADF (Bad file descriptor) [pid 6959] close(25) = -1 EBADF (Bad file descriptor) [pid 6959] close(26) = -1 EBADF (Bad file descriptor) [pid 6959] close(27) = -1 EBADF (Bad file descriptor) [pid 6959] close(28) = -1 EBADF (Bad file descriptor) [pid 6959] close(29) = -1 EBADF (Bad file descriptor) [pid 6959] exit_group(0 [pid 6961] <... futex resumed>) = ? [pid 6960] <... futex resumed>) = ? [pid 6959] <... exit_group resumed>) = ? [pid 6961] +++ exited with 0 +++ [pid 6960] +++ exited with 0 +++ [pid 6959] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1932, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./644", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./644", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./644/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./644/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./644/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./644/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./644/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./644/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./644/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./644/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./644/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./644") = 0 [pid 5019] mkdir("./645", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 91.288348][ T6960] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1935 ./strace-static-x86_64: Process 6962 attached [pid 6962] set_robust_list(0x555556a426a0, 24) = 0 [pid 6962] chdir("./645") = 0 [pid 6962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6962] setpgid(0, 0) = 0 [pid 6962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6962] write(3, "1000", 4) = 4 [pid 6962] close(3) = 0 [pid 6962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6962] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6962] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6962] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6962] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6962] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6963 attached => {parent_tid=[1936]}, 88) = 1936 [pid 6963] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6963] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6963] rt_sigprocmask(SIG_SETMASK, [], [pid 6962] rt_sigprocmask(SIG_SETMASK, [], [pid 6963] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6963] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6962] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6962] <... futex resumed>) = 0 [pid 6962] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6963] memfd_create("syzkaller", 0) = 3 [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6963] munmap(0x7f15b9a45000, 524288) = 0 [pid 6963] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6963] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6963] close(3) = 0 [pid 6963] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6963] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6963] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6963] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6963] ioctl(4, LOOP_CLR_FD) = 0 [pid 6963] close(4) = 0 [pid 6963] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6962] <... futex resumed>) = 0 [pid 6963] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6962] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6962] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6962] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6962] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6964 attached => {parent_tid=[1937]}, 88) = 1937 [pid 6962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6962] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6962] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6964] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6963] <... mknodat resumed>) = 0 [pid 6963] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6963] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6964] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6964] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6964] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6964] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6964] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6964] chdir(".") = 0 [pid 6964] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6962] <... futex resumed>) = 0 [pid 6962] close(3) = 0 [pid 6962] close(4) = 0 [pid 6962] close(5) = -1 EBADF (Bad file descriptor) [pid 6962] close(6) = -1 EBADF (Bad file descriptor) [pid 6962] close(7) = -1 EBADF (Bad file descriptor) [pid 6962] close(8) = -1 EBADF (Bad file descriptor) [pid 6962] close(9) = -1 EBADF (Bad file descriptor) [pid 6962] close(10) = -1 EBADF (Bad file descriptor) [pid 6962] close(11) = -1 EBADF (Bad file descriptor) [pid 6962] close(12) = -1 EBADF (Bad file descriptor) [pid 6962] close(13) = -1 EBADF (Bad file descriptor) [pid 6962] close(14) = -1 EBADF (Bad file descriptor) [pid 6962] close(15) = -1 EBADF (Bad file descriptor) [pid 6962] close(16) = -1 EBADF (Bad file descriptor) [pid 6962] close(17) = -1 EBADF (Bad file descriptor) [pid 6962] close(18) = -1 EBADF (Bad file descriptor) [pid 6962] close(19) = -1 EBADF (Bad file descriptor) [pid 6962] close(20) = -1 EBADF (Bad file descriptor) [pid 6962] close(21) = -1 EBADF (Bad file descriptor) [pid 6962] close(22) = -1 EBADF (Bad file descriptor) [pid 6962] close(23) = -1 EBADF (Bad file descriptor) [pid 6962] close(24) = -1 EBADF (Bad file descriptor) [pid 6962] close(25) = -1 EBADF (Bad file descriptor) [pid 6964] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6962] close(26) = -1 EBADF (Bad file descriptor) [pid 6962] close(27) = -1 EBADF (Bad file descriptor) [pid 6962] close(28) = -1 EBADF (Bad file descriptor) [pid 6962] close(29) = -1 EBADF (Bad file descriptor) [pid 6962] exit_group(0) = ? [pid 6964] <... futex resumed>) = ? [pid 6963] <... futex resumed>) = ? [pid 6963] +++ exited with 0 +++ [pid 6964] +++ exited with 0 +++ [pid 6962] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1935, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./645", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./645", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./645/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./645/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./645/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./645") = 0 [pid 5019] mkdir("./646", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1938 ./strace-static-x86_64: Process 6965 attached [pid 6965] set_robust_list(0x555556a426a0, 24) = 0 [pid 6965] chdir("./646") = 0 [pid 6965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6965] setpgid(0, 0) = 0 [pid 6965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6965] write(3, "1000", 4) = 4 [pid 6965] close(3) = 0 [pid 6965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6965] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6965] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6965] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1939]}, 88) = 1939 [pid 6965] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6965] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6966 attached [pid 6966] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6966] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6966] memfd_create("syzkaller", 0) = 3 [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 91.365596][ T6963] loop0: detected capacity change from 0 to 1024 [pid 6966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6966] munmap(0x7f15b9a45000, 524288) = 0 [pid 6966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6966] close(3) = 0 [pid 6966] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6966] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6966] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6966] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6966] ioctl(4, LOOP_CLR_FD) = 0 [pid 6966] close(4) = 0 [pid 6966] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6965] <... futex resumed>) = 0 [pid 6965] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6965] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1940]}, 88) = 1940 [pid 6965] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6965] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6965] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6966] <... futex resumed>) = 1 [pid 6966] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6966] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6966] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6967 attached [pid 6967] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6967] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6967] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6967] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6967] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6967] chdir(".") = 0 [pid 6967] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6965] <... futex resumed>) = 0 [pid 6965] close(3) = 0 [pid 6965] close(4) = 0 [pid 6965] close(5) = -1 EBADF (Bad file descriptor) [pid 6965] close(6) = -1 EBADF (Bad file descriptor) [pid 6965] close(7) = -1 EBADF (Bad file descriptor) [pid 6965] close(8) = -1 EBADF (Bad file descriptor) [pid 6965] close(9) = -1 EBADF (Bad file descriptor) [pid 6965] close(10) = -1 EBADF (Bad file descriptor) [pid 6965] close(11) = -1 EBADF (Bad file descriptor) [pid 6965] close(12) = -1 EBADF (Bad file descriptor) [pid 6965] close(13) = -1 EBADF (Bad file descriptor) [pid 6965] close(14) = -1 EBADF (Bad file descriptor) [pid 6965] close(15) = -1 EBADF (Bad file descriptor) [pid 6965] close(16) = -1 EBADF (Bad file descriptor) [pid 6965] close(17) = -1 EBADF (Bad file descriptor) [pid 6965] close(18) = -1 EBADF (Bad file descriptor) [pid 6965] close(19) = -1 EBADF (Bad file descriptor) [pid 6965] close(20) = -1 EBADF (Bad file descriptor) [pid 6965] close(21) = -1 EBADF (Bad file descriptor) [pid 6965] close(22) = -1 EBADF (Bad file descriptor) [pid 6965] close(23 [pid 6967] <... futex resumed>) = 1 [pid 6965] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6967] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6965] close(24) = -1 EBADF (Bad file descriptor) [pid 6965] close(25) = -1 EBADF (Bad file descriptor) [pid 6965] close(26) = -1 EBADF (Bad file descriptor) [pid 6965] close(27) = -1 EBADF (Bad file descriptor) [pid 6965] close(28) = -1 EBADF (Bad file descriptor) [pid 6965] close(29) = -1 EBADF (Bad file descriptor) [pid 6965] exit_group(0 [pid 6967] <... futex resumed>) = ? [pid 6966] <... futex resumed>) = ? [pid 6965] <... exit_group resumed>) = ? [pid 6966] +++ exited with 0 +++ [pid 6967] +++ exited with 0 +++ [pid 6965] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1938, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./646", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./646", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./646/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./646/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./646/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./646") = 0 [pid 5019] mkdir("./647", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 91.431741][ T6966] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6968 attached [pid 6968] set_robust_list(0x555556a426a0, 24) = 0 [pid 6968] chdir("./647" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1941 [pid 6968] <... chdir resumed>) = 0 [pid 6968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6968] setpgid(0, 0) = 0 [pid 6968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6968] write(3, "1000", 4) = 4 [pid 6968] close(3) = 0 [pid 6968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6968] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6968] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6968] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6968] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6968] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6968] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6969 attached => {parent_tid=[1942]}, 88) = 1942 [pid 6969] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6969] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6969] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6969] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6968] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6968] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6969] <... futex resumed>) = 0 [pid 6968] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6969] memfd_create("syzkaller", 0) = 3 [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6969] munmap(0x7f15b9a45000, 524288) = 0 [pid 6969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6969] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6969] close(3) = 0 [pid 6969] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6969] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6969] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6969] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6969] ioctl(4, LOOP_CLR_FD) = 0 [pid 6969] close(4) = 0 [pid 6969] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] <... futex resumed>) = 0 [pid 6968] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6968] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6968] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6968] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6968] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6970 attached [pid 6970] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6970] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6970] rt_sigprocmask(SIG_SETMASK, [], [pid 6968] <... clone3 resumed> => {parent_tid=[1943]}, 88) = 1943 [pid 6970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6970] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6968] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6968] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6970] <... futex resumed>) = 0 [pid 6968] <... futex resumed>) = 1 [pid 6968] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6970] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6970] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6969] <... futex resumed>) = 1 [pid 6969] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6970] <... mount resumed>) = 0 [pid 6970] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6970] chdir(".") = 0 [pid 6970] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6968] <... futex resumed>) = 0 [pid 6970] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6969] <... mknodat resumed>) = 0 [pid 6969] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] close(3) = 0 [pid 6968] close(4) = 0 [pid 6968] close(5) = -1 EBADF (Bad file descriptor) [pid 6968] close(6) = -1 EBADF (Bad file descriptor) [pid 6968] close(7) = -1 EBADF (Bad file descriptor) [pid 6968] close(8) = -1 EBADF (Bad file descriptor) [pid 6968] close(9) = -1 EBADF (Bad file descriptor) [pid 6968] close(10) = -1 EBADF (Bad file descriptor) [pid 6968] close(11) = -1 EBADF (Bad file descriptor) [pid 6968] close(12) = -1 EBADF (Bad file descriptor) [pid 6968] close(13) = -1 EBADF (Bad file descriptor) [pid 6968] close(14) = -1 EBADF (Bad file descriptor) [pid 6968] close(15) = -1 EBADF (Bad file descriptor) [pid 6968] close(16) = -1 EBADF (Bad file descriptor) [pid 6968] close(17) = -1 EBADF (Bad file descriptor) [pid 6968] close(18) = -1 EBADF (Bad file descriptor) [pid 6968] close(19) = -1 EBADF (Bad file descriptor) [pid 6968] close(20) = -1 EBADF (Bad file descriptor) [pid 6968] close(21) = -1 EBADF (Bad file descriptor) [pid 6968] close(22) = -1 EBADF (Bad file descriptor) [pid 6968] close(23) = -1 EBADF (Bad file descriptor) [pid 6968] close(24) = -1 EBADF (Bad file descriptor) [pid 6968] close(25) = -1 EBADF (Bad file descriptor) [pid 6968] close(26) = -1 EBADF (Bad file descriptor) [pid 6968] close(27) = -1 EBADF (Bad file descriptor) [pid 6968] close(28) = -1 EBADF (Bad file descriptor) [pid 6968] close(29) = -1 EBADF (Bad file descriptor) [pid 6968] exit_group(0 [pid 6970] <... futex resumed>) = ? [pid 6968] <... exit_group resumed>) = ? [pid 6970] +++ exited with 0 +++ [pid 6969] <... futex resumed>) = ? [pid 6969] +++ exited with 0 +++ [pid 6968] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1941, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./647", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./647", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./647/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./647/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./647/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./647") = 0 [pid 5019] mkdir("./648", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1944 ./strace-static-x86_64: Process 6971 attached [pid 6971] set_robust_list(0x555556a426a0, 24) = 0 [pid 6971] chdir("./648") = 0 [pid 6971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6971] setpgid(0, 0) = 0 [pid 6971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6971] write(3, "1000", 4) = 4 [pid 6971] close(3) = 0 [pid 6971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6971] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6971] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6971] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6971] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6971] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1945]}, 88) = 1945 [pid 6971] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6971] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6971] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6972 attached [pid 6972] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6972] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6972] memfd_create("syzkaller", 0) = 3 [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 91.514544][ T6969] loop0: detected capacity change from 0 to 1024 [pid 6972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6972] munmap(0x7f15b9a45000, 524288) = 0 [pid 6972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6972] close(3) = 0 [pid 6972] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6972] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6972] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6972] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6972] ioctl(4, LOOP_CLR_FD) = 0 [pid 6972] close(4) = 0 [pid 6972] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6971] <... futex resumed>) = 0 [pid 6971] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6971] <... futex resumed>) = 0 [pid 6971] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6971] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6971] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1946]}, 88) = 1946 [pid 6971] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6971] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6971] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6972] <... mknodat resumed>) = 0 [pid 6972] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6972] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6973 attached [pid 6973] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6973] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6973] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6973] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6973] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6973] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6973] chdir(".") = 0 [pid 6973] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6971] <... futex resumed>) = 0 [pid 6971] close(3) = 0 [pid 6971] close(4) = 0 [pid 6971] close(5) = -1 EBADF (Bad file descriptor) [pid 6971] close(6) = -1 EBADF (Bad file descriptor) [pid 6971] close(7) = -1 EBADF (Bad file descriptor) [pid 6971] close(8) = -1 EBADF (Bad file descriptor) [pid 6971] close(9) = -1 EBADF (Bad file descriptor) [pid 6971] close(10) = -1 EBADF (Bad file descriptor) [pid 6971] close(11) = -1 EBADF (Bad file descriptor) [pid 6971] close(12) = -1 EBADF (Bad file descriptor) [pid 6971] close(13) = -1 EBADF (Bad file descriptor) [pid 6971] close(14) = -1 EBADF (Bad file descriptor) [pid 6971] close(15) = -1 EBADF (Bad file descriptor) [pid 6971] close(16) = -1 EBADF (Bad file descriptor) [pid 6973] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6971] close(17) = -1 EBADF (Bad file descriptor) [pid 6971] close(18) = -1 EBADF (Bad file descriptor) [pid 6971] close(19) = -1 EBADF (Bad file descriptor) [pid 6971] close(20) = -1 EBADF (Bad file descriptor) [pid 6971] close(21) = -1 EBADF (Bad file descriptor) [pid 6971] close(22) = -1 EBADF (Bad file descriptor) [pid 6971] close(23) = -1 EBADF (Bad file descriptor) [pid 6971] close(24) = -1 EBADF (Bad file descriptor) [pid 6971] close(25) = -1 EBADF (Bad file descriptor) [pid 6971] close(26) = -1 EBADF (Bad file descriptor) [pid 6971] close(27) = -1 EBADF (Bad file descriptor) [pid 6971] close(28) = -1 EBADF (Bad file descriptor) [pid 6971] close(29) = -1 EBADF (Bad file descriptor) [pid 6971] exit_group(0) = ? [pid 6973] <... futex resumed>) = ? [pid 6972] <... futex resumed>) = ? [pid 6973] +++ exited with 0 +++ [pid 6972] +++ exited with 0 +++ [pid 6971] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1944, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./648", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./648", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./648/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./648/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./648/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./648/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./648/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./648/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./648/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./648/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./648/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./648") = 0 [pid 5019] mkdir("./649", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1947 ./strace-static-x86_64: Process 6974 attached [pid 6974] set_robust_list(0x555556a426a0, 24) = 0 [pid 6974] chdir("./649") = 0 [pid 6974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6974] setpgid(0, 0) = 0 [pid 6974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6974] write(3, "1000", 4) = 4 [pid 6974] close(3) = 0 [pid 6974] symlink("/dev/binderfs", "./binderfs") = 0 [ 91.580627][ T6972] loop0: detected capacity change from 0 to 1024 [pid 6974] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6974] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6974] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6974] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6974] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1948]}, 88) = 1948 [pid 6974] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6974] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6975 attached [pid 6975] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6975] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6975] memfd_create("syzkaller", 0) = 3 [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6975] munmap(0x7f15b9a45000, 524288) = 0 [pid 6975] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6975] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6975] close(3) = 0 [pid 6975] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6975] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6975] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6975] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6975] ioctl(4, LOOP_CLR_FD) = 0 [pid 6975] close(4) = 0 [pid 6975] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6974] <... futex resumed>) = 0 [pid 6974] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6975] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6974] <... futex resumed>) = 0 [pid 6974] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6974] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6974] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6974] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1949]}, 88) = 1949 [pid 6974] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6974] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6974] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6975] <... mknodat resumed>) = 0 [pid 6975] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6975] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6976 attached [pid 6976] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6976] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6976] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6976] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6976] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6976] chdir(".") = 0 [pid 6976] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6974] <... futex resumed>) = 0 [pid 6974] close(3) = 0 [pid 6974] close(4) = 0 [pid 6974] close(5) = -1 EBADF (Bad file descriptor) [pid 6974] close(6) = -1 EBADF (Bad file descriptor) [pid 6974] close(7) = -1 EBADF (Bad file descriptor) [pid 6974] close(8) = -1 EBADF (Bad file descriptor) [pid 6974] close(9) = -1 EBADF (Bad file descriptor) [pid 6974] close(10) = -1 EBADF (Bad file descriptor) [pid 6974] close(11) = -1 EBADF (Bad file descriptor) [pid 6974] close(12) = -1 EBADF (Bad file descriptor) [pid 6974] close(13) = -1 EBADF (Bad file descriptor) [pid 6974] close(14) = -1 EBADF (Bad file descriptor) [pid 6974] close(15 [pid 6976] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6974] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 6974] close(16) = -1 EBADF (Bad file descriptor) [pid 6974] close(17) = -1 EBADF (Bad file descriptor) [pid 6974] close(18) = -1 EBADF (Bad file descriptor) [pid 6974] close(19) = -1 EBADF (Bad file descriptor) [pid 6974] close(20) = -1 EBADF (Bad file descriptor) [pid 6974] close(21) = -1 EBADF (Bad file descriptor) [pid 6974] close(22) = -1 EBADF (Bad file descriptor) [pid 6974] close(23) = -1 EBADF (Bad file descriptor) [pid 6974] close(24) = -1 EBADF (Bad file descriptor) [pid 6974] close(25) = -1 EBADF (Bad file descriptor) [pid 6974] close(26) = -1 EBADF (Bad file descriptor) [pid 6974] close(27) = -1 EBADF (Bad file descriptor) [pid 6974] close(28) = -1 EBADF (Bad file descriptor) [pid 6974] close(29) = -1 EBADF (Bad file descriptor) [pid 6974] exit_group(0) = ? [pid 6976] <... futex resumed>) = ? [pid 6975] <... futex resumed>) = ? [pid 6976] +++ exited with 0 +++ [pid 6975] +++ exited with 0 +++ [pid 6974] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1947, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./649", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./649", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./649/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./649/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./649/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./649/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./649/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./649/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./649/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./649/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./649/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./649") = 0 [pid 5019] mkdir("./650", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1950 ./strace-static-x86_64: Process 6977 attached [pid 6977] set_robust_list(0x555556a426a0, 24) = 0 [pid 6977] chdir("./650") = 0 [ 91.652215][ T6975] loop0: detected capacity change from 0 to 1024 [pid 6977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6977] setpgid(0, 0) = 0 [pid 6977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6977] write(3, "1000", 4) = 4 [pid 6977] close(3) = 0 [pid 6977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6977] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6977] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6977] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6977] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6977] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6977] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6978 attached [pid 6978] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6978] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6978] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6978] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6977] <... clone3 resumed> => {parent_tid=[1951]}, 88) = 1951 [pid 6977] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6977] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6978] <... futex resumed>) = 0 [pid 6977] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6978] memfd_create("syzkaller", 0) = 3 [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6978] munmap(0x7f15b9a45000, 524288) = 0 [pid 6978] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6978] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6978] close(3) = 0 [pid 6978] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6978] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6978] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6978] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6978] ioctl(4, LOOP_CLR_FD) = 0 [pid 6978] close(4) = 0 [pid 6978] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6977] <... futex resumed>) = 0 [pid 6978] <... futex resumed>) = 1 [pid 6977] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6978] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6977] <... futex resumed>) = 0 [pid 6977] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6977] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6977] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6977] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6979 attached [pid 6979] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6977] <... clone3 resumed> => {parent_tid=[1952]}, 88) = 1952 [pid 6978] <... mknodat resumed>) = 0 [pid 6978] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6978] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6979] <... rseq resumed>) = 0 [pid 6977] rt_sigprocmask(SIG_SETMASK, [], [pid 6979] set_robust_list(0x7f15b9ac49a0, 24 [pid 6977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6979] <... set_robust_list resumed>) = 0 [pid 6977] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6979] rt_sigprocmask(SIG_SETMASK, [], [pid 6977] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6979] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6979] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6979] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6979] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6979] chdir(".") = 0 [pid 6979] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6977] <... futex resumed>) = 0 [pid 6977] close(3) = 0 [pid 6977] close(4) = 0 [pid 6977] close(5) = -1 EBADF (Bad file descriptor) [pid 6977] close(6) = -1 EBADF (Bad file descriptor) [pid 6977] close(7) = -1 EBADF (Bad file descriptor) [pid 6977] close(8) = -1 EBADF (Bad file descriptor) [pid 6979] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6977] close(9) = -1 EBADF (Bad file descriptor) [pid 6977] close(10) = -1 EBADF (Bad file descriptor) [pid 6977] close(11) = -1 EBADF (Bad file descriptor) [pid 6977] close(12) = -1 EBADF (Bad file descriptor) [pid 6977] close(13) = -1 EBADF (Bad file descriptor) [pid 6977] close(14) = -1 EBADF (Bad file descriptor) [pid 6977] close(15) = -1 EBADF (Bad file descriptor) [pid 6977] close(16) = -1 EBADF (Bad file descriptor) [pid 6977] close(17) = -1 EBADF (Bad file descriptor) [pid 6977] close(18) = -1 EBADF (Bad file descriptor) [pid 6977] close(19) = -1 EBADF (Bad file descriptor) [pid 6977] close(20) = -1 EBADF (Bad file descriptor) [pid 6977] close(21) = -1 EBADF (Bad file descriptor) [pid 6977] close(22) = -1 EBADF (Bad file descriptor) [pid 6977] close(23) = -1 EBADF (Bad file descriptor) [pid 6977] close(24) = -1 EBADF (Bad file descriptor) [pid 6977] close(25) = -1 EBADF (Bad file descriptor) [pid 6977] close(26) = -1 EBADF (Bad file descriptor) [pid 6977] close(27) = -1 EBADF (Bad file descriptor) [pid 6977] close(28) = -1 EBADF (Bad file descriptor) [pid 6977] close(29) = -1 EBADF (Bad file descriptor) [pid 6977] exit_group(0 [pid 6978] <... futex resumed>) = ? [pid 6977] <... exit_group resumed>) = ? [pid 6979] <... futex resumed>) = ? [pid 6978] +++ exited with 0 +++ [pid 6979] +++ exited with 0 +++ [pid 6977] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1950, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./650", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./650", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./650/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./650/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./650/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./650/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./650") = 0 [pid 5019] mkdir("./651", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1953 ./strace-static-x86_64: Process 6980 attached [pid 6980] set_robust_list(0x555556a426a0, 24) = 0 [pid 6980] chdir("./651") = 0 [pid 6980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6980] setpgid(0, 0) = 0 [pid 6980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6980] write(3, "1000", 4) = 4 [pid 6980] close(3) = 0 [pid 6980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6980] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6980] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6980] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6980] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6980] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6980] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6981 attached [pid 6981] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [ 91.730987][ T6978] loop0: detected capacity change from 0 to 1024 [pid 6981] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6981] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6980] <... clone3 resumed> => {parent_tid=[1954]}, 88) = 1954 [pid 6980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6980] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6981] <... futex resumed>) = 0 [pid 6981] memfd_create("syzkaller", 0 [pid 6980] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6981] <... memfd_create resumed>) = 3 [pid 6981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6981] munmap(0x7f15b9a45000, 524288) = 0 [pid 6981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6981] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6981] close(3) = 0 [pid 6981] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6981] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6981] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6981] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6981] ioctl(4, LOOP_CLR_FD) = 0 [pid 6981] close(4) = 0 [pid 6981] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6980] <... futex resumed>) = 0 [pid 6980] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6980] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6980] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6980] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6980] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1955]}, 88) = 1955 [pid 6980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6980] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6980] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6981] <... futex resumed>) = 1 [pid 6981] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 6982 attached [pid 6982] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6982] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6981] <... mknodat resumed>) = 0 [pid 6982] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6981] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6982] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 6981] <... futex resumed>) = 0 [pid 6981] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6982] <... mount resumed>) = 0 [pid 6982] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6982] chdir(".") = 0 [pid 6982] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6980] <... futex resumed>) = 0 [pid 6980] close(3 [pid 6982] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6980] <... close resumed>) = 0 [pid 6980] close(4) = 0 [pid 6980] close(5) = -1 EBADF (Bad file descriptor) [pid 6980] close(6) = -1 EBADF (Bad file descriptor) [pid 6980] close(7) = -1 EBADF (Bad file descriptor) [pid 6980] close(8) = -1 EBADF (Bad file descriptor) [pid 6980] close(9) = -1 EBADF (Bad file descriptor) [pid 6980] close(10) = -1 EBADF (Bad file descriptor) [pid 6980] close(11) = -1 EBADF (Bad file descriptor) [pid 6980] close(12) = -1 EBADF (Bad file descriptor) [pid 6980] close(13) = -1 EBADF (Bad file descriptor) [pid 6980] close(14) = -1 EBADF (Bad file descriptor) [pid 6980] close(15) = -1 EBADF (Bad file descriptor) [pid 6980] close(16) = -1 EBADF (Bad file descriptor) [pid 6980] close(17) = -1 EBADF (Bad file descriptor) [pid 6980] close(18) = -1 EBADF (Bad file descriptor) [pid 6980] close(19) = -1 EBADF (Bad file descriptor) [pid 6980] close(20) = -1 EBADF (Bad file descriptor) [pid 6980] close(21) = -1 EBADF (Bad file descriptor) [pid 6980] close(22) = -1 EBADF (Bad file descriptor) [pid 6980] close(23) = -1 EBADF (Bad file descriptor) [pid 6980] close(24) = -1 EBADF (Bad file descriptor) [pid 6980] close(25) = -1 EBADF (Bad file descriptor) [pid 6980] close(26) = -1 EBADF (Bad file descriptor) [pid 6980] close(27) = -1 EBADF (Bad file descriptor) [pid 6980] close(28) = -1 EBADF (Bad file descriptor) [pid 6980] close(29) = -1 EBADF (Bad file descriptor) [pid 6980] exit_group(0 [pid 6982] <... futex resumed>) = ? [pid 6981] <... futex resumed>) = ? [pid 6980] <... exit_group resumed>) = ? [pid 6982] +++ exited with 0 +++ [pid 6981] +++ exited with 0 +++ [pid 6980] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1953, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./651", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./651", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./651/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./651/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./651/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./651/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./651/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./651/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./651/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./651/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./651/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./651") = 0 [pid 5019] mkdir("./652", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 91.799616][ T6981] loop0: detected capacity change from 0 to 1024 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1956 ./strace-static-x86_64: Process 6983 attached [pid 6983] set_robust_list(0x555556a426a0, 24) = 0 [pid 6983] chdir("./652") = 0 [pid 6983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6983] setpgid(0, 0) = 0 [pid 6983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6983] write(3, "1000", 4) = 4 [pid 6983] close(3) = 0 [pid 6983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6983] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6983] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6983] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6983] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6983] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6984 attached => {parent_tid=[1957]}, 88) = 1957 [pid 6983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6983] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6984] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6984] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6984] memfd_create("syzkaller", 0) = 3 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6984] munmap(0x7f15b9a45000, 524288) = 0 [pid 6984] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6984] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6984] close(3) = 0 [pid 6984] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6984] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6984] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6984] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6984] ioctl(4, LOOP_CLR_FD) = 0 [pid 6984] close(4) = 0 [pid 6984] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6983] <... futex resumed>) = 0 [pid 6983] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6983] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6983] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6983] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1958]}, 88) = 1958 [pid 6983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6983] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6983] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6984] <... futex resumed>) = 1 [pid 6984] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 6984] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6985 attached [pid 6985] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6985] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6985] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6985] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6985] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6985] chdir(".") = 0 [pid 6985] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6983] <... futex resumed>) = 0 [pid 6985] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6983] close(3) = 0 [pid 6983] close(4) = 0 [pid 6983] close(5) = -1 EBADF (Bad file descriptor) [pid 6983] close(6) = -1 EBADF (Bad file descriptor) [pid 6983] close(7) = -1 EBADF (Bad file descriptor) [pid 6983] close(8) = -1 EBADF (Bad file descriptor) [pid 6983] close(9) = -1 EBADF (Bad file descriptor) [pid 6983] close(10) = -1 EBADF (Bad file descriptor) [pid 6983] close(11) = -1 EBADF (Bad file descriptor) [pid 6983] close(12) = -1 EBADF (Bad file descriptor) [pid 6983] close(13) = -1 EBADF (Bad file descriptor) [pid 6983] close(14) = -1 EBADF (Bad file descriptor) [pid 6983] close(15) = -1 EBADF (Bad file descriptor) [pid 6983] close(16) = -1 EBADF (Bad file descriptor) [pid 6983] close(17) = -1 EBADF (Bad file descriptor) [pid 6983] close(18) = -1 EBADF (Bad file descriptor) [pid 6983] close(19) = -1 EBADF (Bad file descriptor) [pid 6983] close(20) = -1 EBADF (Bad file descriptor) [pid 6983] close(21) = -1 EBADF (Bad file descriptor) [pid 6983] close(22) = -1 EBADF (Bad file descriptor) [pid 6983] close(23) = -1 EBADF (Bad file descriptor) [pid 6983] close(24) = -1 EBADF (Bad file descriptor) [pid 6983] close(25) = -1 EBADF (Bad file descriptor) [pid 6983] close(26) = -1 EBADF (Bad file descriptor) [pid 6983] close(27) = -1 EBADF (Bad file descriptor) [pid 6983] close(28) = -1 EBADF (Bad file descriptor) [pid 6983] close(29) = -1 EBADF (Bad file descriptor) [pid 6983] exit_group(0 [pid 6984] <... futex resumed>) = ? [pid 6983] <... exit_group resumed>) = ? [pid 6985] <... futex resumed>) = ? [pid 6984] +++ exited with 0 +++ [pid 6985] +++ exited with 0 +++ [pid 6983] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1956, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./652", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./652", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./652/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./652/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./652/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./652") = 0 [pid 5019] mkdir("./653", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1959 ./strace-static-x86_64: Process 6986 attached [pid 6986] set_robust_list(0x555556a426a0, 24) = 0 [pid 6986] chdir("./653") = 0 [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6986] setpgid(0, 0) = 0 [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6986] write(3, "1000", 4) = 4 [pid 6986] close(3) = 0 [pid 6986] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6986] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6986] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6986] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6986] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6986] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1960]}, 88) = 1960 [pid 6986] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6986] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6987 attached [ 91.880820][ T6984] loop0: detected capacity change from 0 to 1024 [pid 6987] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6987] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6987] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6987] memfd_create("syzkaller", 0) = 3 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6987] munmap(0x7f15b9a45000, 524288) = 0 [pid 6987] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6987] close(3) = 0 [pid 6987] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6987] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6987] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6987] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6987] ioctl(4, LOOP_CLR_FD) = 0 [pid 6987] close(4) = 0 [pid 6987] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6986] <... futex resumed>) = 0 [pid 6986] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6987] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6986] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6986] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6986] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6986] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1961]}, 88) = 1961 [pid 6986] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6986] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6988 attached [pid 6988] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6988] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6988] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6988] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6988] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6988] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6988] chdir(".") = 0 [pid 6988] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = 0 [pid 6988] <... futex resumed>) = 1 [pid 6988] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6987] <... mknodat resumed>) = 0 [pid 6987] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6987] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] close(3) = 0 [pid 6986] close(4) = 0 [pid 6986] close(5) = -1 EBADF (Bad file descriptor) [pid 6986] close(6) = -1 EBADF (Bad file descriptor) [pid 6986] close(7) = -1 EBADF (Bad file descriptor) [pid 6986] close(8) = -1 EBADF (Bad file descriptor) [pid 6986] close(9) = -1 EBADF (Bad file descriptor) [pid 6986] close(10) = -1 EBADF (Bad file descriptor) [pid 6986] close(11) = -1 EBADF (Bad file descriptor) [pid 6986] close(12) = -1 EBADF (Bad file descriptor) [pid 6986] close(13) = -1 EBADF (Bad file descriptor) [pid 6986] close(14) = -1 EBADF (Bad file descriptor) [pid 6986] close(15) = -1 EBADF (Bad file descriptor) [pid 6986] close(16) = -1 EBADF (Bad file descriptor) [pid 6986] close(17) = -1 EBADF (Bad file descriptor) [pid 6986] close(18) = -1 EBADF (Bad file descriptor) [pid 6986] close(19) = -1 EBADF (Bad file descriptor) [pid 6986] close(20) = -1 EBADF (Bad file descriptor) [pid 6986] close(21) = -1 EBADF (Bad file descriptor) [pid 6986] close(22) = -1 EBADF (Bad file descriptor) [pid 6986] close(23) = -1 EBADF (Bad file descriptor) [pid 6986] close(24) = -1 EBADF (Bad file descriptor) [pid 6986] close(25) = -1 EBADF (Bad file descriptor) [pid 6986] close(26) = -1 EBADF (Bad file descriptor) [pid 6986] close(27) = -1 EBADF (Bad file descriptor) [pid 6986] close(28) = -1 EBADF (Bad file descriptor) [pid 6986] close(29) = -1 EBADF (Bad file descriptor) [pid 6986] exit_group(0 [pid 6987] <... futex resumed>) = ? [pid 6986] <... exit_group resumed>) = ? [pid 6987] +++ exited with 0 +++ [pid 6988] <... futex resumed>) = ? [pid 6988] +++ exited with 0 +++ [pid 6986] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1959, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./653", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./653", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./653/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./653/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./653/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./653") = 0 [pid 5019] mkdir("./654", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1962 ./strace-static-x86_64: Process 6989 attached [pid 6989] set_robust_list(0x555556a426a0, 24) = 0 [pid 6989] chdir("./654") = 0 [pid 6989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6989] setpgid(0, 0) = 0 [pid 6989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6989] write(3, "1000", 4) = 4 [pid 6989] close(3) = 0 [pid 6989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6989] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6989] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6989] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6990 attached => {parent_tid=[1963]}, 88) = 1963 [pid 6990] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6989] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6990] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6990] memfd_create("syzkaller", 0) = 3 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 91.950303][ T6987] loop0: detected capacity change from 0 to 1024 [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6990] munmap(0x7f15b9a45000, 524288) = 0 [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6990] close(3) = 0 [pid 6990] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6990] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6990] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6990] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6990] ioctl(4, LOOP_CLR_FD) = 0 [pid 6990] close(4) = 0 [pid 6990] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6989] <... futex resumed>) = 0 [pid 6989] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6989] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6990] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1964]}, 88) = 1964 [pid 6989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6989] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6990] <... mknodat resumed>) = 0 [pid 6990] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6990] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6991 attached [pid 6991] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 6991] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6991] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6991] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6991] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6991] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6991] chdir(".") = 0 [pid 6991] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] <... futex resumed>) = 0 [pid 6989] close(3) = 0 [pid 6989] close(4) = 0 [pid 6989] close(5) = -1 EBADF (Bad file descriptor) [pid 6989] close(6) = -1 EBADF (Bad file descriptor) [pid 6989] close(7) = -1 EBADF (Bad file descriptor) [pid 6989] close(8) = -1 EBADF (Bad file descriptor) [pid 6989] close(9) = -1 EBADF (Bad file descriptor) [pid 6989] close(10) = -1 EBADF (Bad file descriptor) [pid 6989] close(11) = -1 EBADF (Bad file descriptor) [pid 6989] close(12) = -1 EBADF (Bad file descriptor) [pid 6989] close(13) = -1 EBADF (Bad file descriptor) [pid 6989] close(14) = -1 EBADF (Bad file descriptor) [pid 6989] close(15) = -1 EBADF (Bad file descriptor) [pid 6989] close(16) = -1 EBADF (Bad file descriptor) [pid 6989] close(17) = -1 EBADF (Bad file descriptor) [pid 6989] close(18) = -1 EBADF (Bad file descriptor) [pid 6989] close(19) = -1 EBADF (Bad file descriptor) [pid 6989] close(20) = -1 EBADF (Bad file descriptor) [pid 6989] close(21) = -1 EBADF (Bad file descriptor) [pid 6989] close(22) = -1 EBADF (Bad file descriptor) [pid 6989] close(23) = -1 EBADF (Bad file descriptor) [pid 6989] close(24) = -1 EBADF (Bad file descriptor) [pid 6989] close(25) = -1 EBADF (Bad file descriptor) [pid 6989] close(26) = -1 EBADF (Bad file descriptor) [pid 6989] close(27) = -1 EBADF (Bad file descriptor) [pid 6989] close(28) = -1 EBADF (Bad file descriptor) [pid 6989] close(29) = -1 EBADF (Bad file descriptor) [pid 6989] exit_group(0 [pid 6990] <... futex resumed>) = ? [pid 6989] <... exit_group resumed>) = ? [pid 6990] +++ exited with 0 +++ [pid 6991] <... futex resumed>) = ? [pid 6991] +++ exited with 0 +++ [pid 6989] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1962, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./654", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./654", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./654/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./654/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./654/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./654") = 0 [pid 5019] mkdir("./655", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1965 ./strace-static-x86_64: Process 6992 attached [pid 6992] set_robust_list(0x555556a426a0, 24) = 0 [pid 6992] chdir("./655") = 0 [pid 6992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6992] setpgid(0, 0) = 0 [pid 6992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6992] write(3, "1000", 4) = 4 [pid 6992] close(3) = 0 [pid 6992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6992] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6992] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6992] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6992] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6992] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1966]}, 88) = 1966 [pid 6992] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6992] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6993 attached [pid 6993] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6993] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6993] memfd_create("syzkaller", 0) = 3 [pid 6993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 92.014741][ T6990] loop0: detected capacity change from 0 to 1024 [pid 6993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6993] munmap(0x7f15b9a45000, 524288) = 0 [pid 6993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6993] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6993] close(3) = 0 [pid 6993] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6993] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6993] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6993] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6993] ioctl(4, LOOP_CLR_FD) = 0 [pid 6993] close(4) = 0 [pid 6993] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6992] <... futex resumed>) = 0 [pid 6993] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6993] <... futex resumed>) = 0 [pid 6992] <... futex resumed>) = 1 [pid 6993] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6992] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 6992] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6992] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6993] <... mknodat resumed>) = 0 [pid 6993] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6994 attached [pid 6993] <... futex resumed>) = 0 [pid 6994] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6993] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] <... clone3 resumed> => {parent_tid=[1967]}, 88) = 1967 [pid 6994] <... rseq resumed>) = 0 [pid 6992] rt_sigprocmask(SIG_SETMASK, [], [pid 6994] set_robust_list(0x7f15b9ac49a0, 24 [pid 6992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6994] <... set_robust_list resumed>) = 0 [pid 6992] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6994] rt_sigprocmask(SIG_SETMASK, [], [pid 6992] <... futex resumed>) = 0 [pid 6994] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6992] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6994] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6994] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6994] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6994] chdir(".") = 0 [pid 6994] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6992] <... futex resumed>) = 0 [pid 6994] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] close(3) = 0 [pid 6992] close(4) = 0 [pid 6992] close(5) = -1 EBADF (Bad file descriptor) [pid 6992] close(6) = -1 EBADF (Bad file descriptor) [pid 6992] close(7) = -1 EBADF (Bad file descriptor) [pid 6992] close(8) = -1 EBADF (Bad file descriptor) [pid 6992] close(9) = -1 EBADF (Bad file descriptor) [pid 6992] close(10) = -1 EBADF (Bad file descriptor) [pid 6992] close(11) = -1 EBADF (Bad file descriptor) [pid 6992] close(12) = -1 EBADF (Bad file descriptor) [pid 6992] close(13) = -1 EBADF (Bad file descriptor) [pid 6992] close(14) = -1 EBADF (Bad file descriptor) [pid 6992] close(15) = -1 EBADF (Bad file descriptor) [pid 6992] close(16) = -1 EBADF (Bad file descriptor) [pid 6992] close(17) = -1 EBADF (Bad file descriptor) [pid 6992] close(18) = -1 EBADF (Bad file descriptor) [pid 6992] close(19) = -1 EBADF (Bad file descriptor) [pid 6992] close(20) = -1 EBADF (Bad file descriptor) [pid 6992] close(21) = -1 EBADF (Bad file descriptor) [pid 6992] close(22) = -1 EBADF (Bad file descriptor) [pid 6992] close(23) = -1 EBADF (Bad file descriptor) [pid 6992] close(24) = -1 EBADF (Bad file descriptor) [pid 6992] close(25) = -1 EBADF (Bad file descriptor) [pid 6992] close(26) = -1 EBADF (Bad file descriptor) [pid 6992] close(27) = -1 EBADF (Bad file descriptor) [pid 6992] close(28) = -1 EBADF (Bad file descriptor) [pid 6992] close(29) = -1 EBADF (Bad file descriptor) [pid 6992] exit_group(0 [pid 6994] <... futex resumed>) = ? [pid 6993] <... futex resumed>) = ? [pid 6992] <... exit_group resumed>) = ? [pid 6994] +++ exited with 0 +++ [pid 6993] +++ exited with 0 +++ [pid 6992] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1965, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./655", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./655", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./655/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./655/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./655/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./655/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./655/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./655/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./655/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./655/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./655/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./655") = 0 [pid 5019] mkdir("./656", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.088382][ T6993] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6995 attached [pid 6995] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1968 [pid 6995] <... set_robust_list resumed>) = 0 [pid 6995] chdir("./656") = 0 [pid 6995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6995] setpgid(0, 0) = 0 [pid 6995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6995] write(3, "1000", 4) = 4 [pid 6995] close(3) = 0 [pid 6995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6995] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6995] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6995] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6995] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6995] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6995] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6996 attached [pid 6996] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6996] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6996] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6996] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6995] <... clone3 resumed> => {parent_tid=[1969]}, 88) = 1969 [pid 6995] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6995] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... futex resumed>) = 0 [pid 6995] <... futex resumed>) = 1 [pid 6995] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6996] memfd_create("syzkaller", 0) = 3 [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6996] munmap(0x7f15b9a45000, 524288) = 0 [pid 6996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6996] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6996] close(3) = 0 [pid 6996] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6996] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6996] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6996] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6996] ioctl(4, LOOP_CLR_FD) = 0 [pid 6996] close(4) = 0 [pid 6996] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6995] <... futex resumed>) = 0 [pid 6996] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6995] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6995] <... futex resumed>) = 0 [pid 6996] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6995] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6996] <... mknodat resumed>) = 0 [pid 6995] <... futex resumed>) = 0 [pid 6996] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6996] <... futex resumed>) = 0 [pid 6996] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6995] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6995] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6995] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6995] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 6997 attached => {parent_tid=[1970]}, 88) = 1970 [pid 6997] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 6995] rt_sigprocmask(SIG_SETMASK, [], [pid 6997] <... rseq resumed>) = 0 [pid 6995] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6997] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 6997] rt_sigprocmask(SIG_SETMASK, [], [pid 6995] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6995] <... futex resumed>) = 0 [pid 6995] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6997] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 6997] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 6997] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 6997] chdir(".") = 0 [pid 6997] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6995] <... futex resumed>) = 0 [pid 6995] close(3) = 0 [pid 6995] close(4 [pid 6997] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6995] <... close resumed>) = 0 [pid 6995] close(5) = -1 EBADF (Bad file descriptor) [pid 6995] close(6) = -1 EBADF (Bad file descriptor) [pid 6995] close(7) = -1 EBADF (Bad file descriptor) [pid 6995] close(8) = -1 EBADF (Bad file descriptor) [pid 6995] close(9) = -1 EBADF (Bad file descriptor) [pid 6995] close(10) = -1 EBADF (Bad file descriptor) [pid 6995] close(11) = -1 EBADF (Bad file descriptor) [pid 6995] close(12) = -1 EBADF (Bad file descriptor) [pid 6995] close(13) = -1 EBADF (Bad file descriptor) [pid 6995] close(14) = -1 EBADF (Bad file descriptor) [pid 6995] close(15) = -1 EBADF (Bad file descriptor) [pid 6995] close(16) = -1 EBADF (Bad file descriptor) [pid 6995] close(17) = -1 EBADF (Bad file descriptor) [pid 6995] close(18) = -1 EBADF (Bad file descriptor) [pid 6995] close(19) = -1 EBADF (Bad file descriptor) [pid 6995] close(20) = -1 EBADF (Bad file descriptor) [pid 6995] close(21) = -1 EBADF (Bad file descriptor) [pid 6995] close(22) = -1 EBADF (Bad file descriptor) [pid 6995] close(23) = -1 EBADF (Bad file descriptor) [pid 6995] close(24) = -1 EBADF (Bad file descriptor) [pid 6995] close(25) = -1 EBADF (Bad file descriptor) [pid 6995] close(26) = -1 EBADF (Bad file descriptor) [pid 6995] close(27) = -1 EBADF (Bad file descriptor) [pid 6995] close(28) = -1 EBADF (Bad file descriptor) [pid 6995] close(29) = -1 EBADF (Bad file descriptor) [pid 6995] exit_group(0) = ? [pid 6996] <... futex resumed>) = ? [pid 6997] <... futex resumed>) = ? [pid 6996] +++ exited with 0 +++ [pid 6997] +++ exited with 0 +++ [pid 6995] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1968, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./656", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./656", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./656/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./656/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./656/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./656/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./656/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./656/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./656/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./656/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./656/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./656") = 0 [pid 5019] mkdir("./657", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.167356][ T6996] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1971 ./strace-static-x86_64: Process 6998 attached [pid 6998] set_robust_list(0x555556a426a0, 24) = 0 [pid 6998] chdir("./657") = 0 [pid 6998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6998] setpgid(0, 0) = 0 [pid 6998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6998] write(3, "1000", 4) = 4 [pid 6998] close(3) = 0 [pid 6998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6998] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6998] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 6998] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 6998] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6998] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6998] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 6999 attached => {parent_tid=[1972]}, 88) = 1972 [pid 6999] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 6999] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 6999] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6999] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6998] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6999] memfd_create("syzkaller", 0 [pid 6998] <... futex resumed>) = 0 [pid 6998] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6999] <... memfd_create resumed>) = 3 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 6999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6999] munmap(0x7f15b9a45000, 524288) = 0 [pid 6999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6999] close(3) = 0 [pid 6999] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 6999] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 6999] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 6999] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 6999] ioctl(4, LOOP_CLR_FD) = 0 [pid 6999] close(4) = 0 [pid 6999] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6998] <... futex resumed>) = 0 [pid 6998] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6998] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6999] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 6998] <... mmap resumed>) = 0x7f15b9aa4000 [pid 6998] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6998] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6998] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1973]}, 88) = 1973 [pid 6998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6998] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6998] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7000 attached [pid 7000] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7000] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7000] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7000] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7000] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7000] chdir(".") = 0 [pid 7000] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6998] <... futex resumed>) = 0 [pid 7000] <... futex resumed>) = 1 [pid 7000] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6999] <... mknodat resumed>) = 0 [pid 6999] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6999] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6998] close(3) = 0 [pid 6998] close(4) = 0 [pid 6998] close(5) = -1 EBADF (Bad file descriptor) [pid 6998] close(6) = -1 EBADF (Bad file descriptor) [pid 6998] close(7) = -1 EBADF (Bad file descriptor) [pid 6998] close(8) = -1 EBADF (Bad file descriptor) [pid 6998] close(9) = -1 EBADF (Bad file descriptor) [pid 6998] close(10) = -1 EBADF (Bad file descriptor) [pid 6998] close(11) = -1 EBADF (Bad file descriptor) [pid 6998] close(12) = -1 EBADF (Bad file descriptor) [pid 6998] close(13) = -1 EBADF (Bad file descriptor) [pid 6998] close(14) = -1 EBADF (Bad file descriptor) [pid 6998] close(15) = -1 EBADF (Bad file descriptor) [pid 6998] close(16) = -1 EBADF (Bad file descriptor) [pid 6998] close(17) = -1 EBADF (Bad file descriptor) [pid 6998] close(18) = -1 EBADF (Bad file descriptor) [pid 6998] close(19) = -1 EBADF (Bad file descriptor) [pid 6998] close(20) = -1 EBADF (Bad file descriptor) [pid 6998] close(21) = -1 EBADF (Bad file descriptor) [pid 6998] close(22) = -1 EBADF (Bad file descriptor) [pid 6998] close(23) = -1 EBADF (Bad file descriptor) [pid 6998] close(24) = -1 EBADF (Bad file descriptor) [pid 6998] close(25) = -1 EBADF (Bad file descriptor) [pid 6998] close(26) = -1 EBADF (Bad file descriptor) [pid 6998] close(27) = -1 EBADF (Bad file descriptor) [pid 6998] close(28) = -1 EBADF (Bad file descriptor) [pid 6998] close(29) = -1 EBADF (Bad file descriptor) [pid 6998] exit_group(0 [pid 6999] <... futex resumed>) = ? [pid 6998] <... exit_group resumed>) = ? [pid 6999] +++ exited with 0 +++ [pid 7000] <... futex resumed>) = ? [pid 7000] +++ exited with 0 +++ [pid 6998] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1971, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./657", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./657", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./657/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./657/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./657/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./657/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./657/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./657/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./657/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./657/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./657/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./657") = 0 [pid 5019] mkdir("./658", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.247060][ T6999] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1974 ./strace-static-x86_64: Process 7001 attached [pid 7001] set_robust_list(0x555556a426a0, 24) = 0 [pid 7001] chdir("./658") = 0 [pid 7001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7001] setpgid(0, 0) = 0 [pid 7001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7001] write(3, "1000", 4) = 4 [pid 7001] close(3) = 0 [pid 7001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7001] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7001] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7001] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7001] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7001] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7001] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7002 attached [pid 7002] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7002] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7002] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7002] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7001] <... clone3 resumed> => {parent_tid=[1975]}, 88) = 1975 [pid 7001] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7001] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7002] <... futex resumed>) = 0 [pid 7002] memfd_create("syzkaller", 0 [pid 7001] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7002] <... memfd_create resumed>) = 3 [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7002] munmap(0x7f15b9a45000, 524288) = 0 [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7002] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7002] close(3) = 0 [pid 7002] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7002] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7002] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7002] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7002] ioctl(4, LOOP_CLR_FD) = 0 [pid 7002] close(4) = 0 [pid 7002] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7001] <... futex resumed>) = 0 [pid 7001] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7001] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7002] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7001] <... mmap resumed>) = 0x7f15b9aa4000 [pid 7001] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7001] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7001] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1976]}, 88) = 1976 [pid 7001] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7001] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7001] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7003 attached [pid 7003] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7003] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7003] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7003] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7003] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7002] <... mknodat resumed>) = 0 [pid 7002] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] <... mount resumed>) = 0 [pid 7003] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7002] <... futex resumed>) = 0 [pid 7003] chdir(".") = 0 [pid 7003] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7001] <... futex resumed>) = 0 [pid 7001] close(3) = 0 [pid 7001] close(4) = 0 [pid 7001] close(5) = -1 EBADF (Bad file descriptor) [pid 7001] close(6) = -1 EBADF (Bad file descriptor) [pid 7001] close(7) = -1 EBADF (Bad file descriptor) [pid 7001] close(8) = -1 EBADF (Bad file descriptor) [pid 7001] close(9) = -1 EBADF (Bad file descriptor) [pid 7001] close(10) = -1 EBADF (Bad file descriptor) [pid 7001] close(11) = -1 EBADF (Bad file descriptor) [pid 7001] close(12) = -1 EBADF (Bad file descriptor) [pid 7001] close(13) = -1 EBADF (Bad file descriptor) [pid 7001] close(14) = -1 EBADF (Bad file descriptor) [pid 7001] close(15) = -1 EBADF (Bad file descriptor) [pid 7001] close(16) = -1 EBADF (Bad file descriptor) [pid 7001] close(17) = -1 EBADF (Bad file descriptor) [pid 7001] close(18) = -1 EBADF (Bad file descriptor) [pid 7001] close(19) = -1 EBADF (Bad file descriptor) [pid 7001] close(20) = -1 EBADF (Bad file descriptor) [pid 7002] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7001] close(21) = -1 EBADF (Bad file descriptor) [pid 7001] close(22 [pid 7003] <... futex resumed>) = 1 [pid 7001] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7003] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7001] close(23) = -1 EBADF (Bad file descriptor) [pid 7001] close(24) = -1 EBADF (Bad file descriptor) [pid 7001] close(25) = -1 EBADF (Bad file descriptor) [pid 7001] close(26) = -1 EBADF (Bad file descriptor) [pid 7001] close(27) = -1 EBADF (Bad file descriptor) [pid 7001] close(28) = -1 EBADF (Bad file descriptor) [pid 7001] close(29) = -1 EBADF (Bad file descriptor) [pid 7001] exit_group(0 [pid 7002] <... futex resumed>) = ? [pid 7003] <... futex resumed>) = ? [pid 7001] <... exit_group resumed>) = ? [pid 7002] +++ exited with 0 +++ [pid 7003] +++ exited with 0 +++ [pid 7001] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1974, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./658", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./658", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./658/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./658/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./658/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./658/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./658/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./658/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./658/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./658/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./658/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./658") = 0 [pid 5019] mkdir("./659", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.325743][ T7002] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7004 attached [pid 7004] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1977 [pid 7004] <... set_robust_list resumed>) = 0 [pid 7004] chdir("./659") = 0 [pid 7004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7004] setpgid(0, 0) = 0 [pid 7004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7004] write(3, "1000", 4) = 4 [pid 7004] close(3) = 0 [pid 7004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7004] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7004] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7004] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7004] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7005 attached => {parent_tid=[1978]}, 88) = 1978 [pid 7004] rt_sigprocmask(SIG_SETMASK, [], [pid 7005] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 7004] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7005] <... rseq resumed>) = 0 [pid 7005] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7005] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7005] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7004] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7005] <... futex resumed>) = 0 [pid 7004] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7005] memfd_create("syzkaller", 0) = 3 [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7005] munmap(0x7f15b9a45000, 524288) = 0 [pid 7005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7005] close(3) = 0 [pid 7005] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7005] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7005] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7005] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7005] ioctl(4, LOOP_CLR_FD) = 0 [pid 7005] close(4) = 0 [pid 7005] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7004] <... futex resumed>) = 0 [pid 7004] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7005] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7004] <... mmap resumed>) = 0x7f15b9aa4000 [pid 7004] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7004] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7004] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7006 attached [pid 7006] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7006] set_robust_list(0x7f15b9ac49a0, 24 [pid 7004] <... clone3 resumed> => {parent_tid=[1979]}, 88) = 1979 [pid 7006] <... set_robust_list resumed>) = 0 [pid 7004] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7006] rt_sigprocmask(SIG_SETMASK, [], [pid 7004] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7004] <... futex resumed>) = 0 [pid 7004] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7006] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7006] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7005] <... mknodat resumed>) = 0 [pid 7005] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7005] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] <... mount resumed>) = 0 [pid 7006] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7006] chdir(".") = 0 [pid 7006] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7004] <... futex resumed>) = 0 [pid 7004] close(3) = 0 [pid 7004] close(4) = 0 [pid 7004] close(5) = -1 EBADF (Bad file descriptor) [pid 7004] close(6) = -1 EBADF (Bad file descriptor) [pid 7004] close(7) = -1 EBADF (Bad file descriptor) [pid 7004] close(8) = -1 EBADF (Bad file descriptor) [pid 7004] close(9) = -1 EBADF (Bad file descriptor) [pid 7004] close(10) = -1 EBADF (Bad file descriptor) [pid 7004] close(11) = -1 EBADF (Bad file descriptor) [pid 7004] close(12) = -1 EBADF (Bad file descriptor) [pid 7004] close(13) = -1 EBADF (Bad file descriptor) [pid 7004] close(14) = -1 EBADF (Bad file descriptor) [pid 7004] close(15) = -1 EBADF (Bad file descriptor) [pid 7004] close(16) = -1 EBADF (Bad file descriptor) [pid 7004] close(17) = -1 EBADF (Bad file descriptor) [pid 7004] close(18 [pid 7006] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7004] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7004] close(19) = -1 EBADF (Bad file descriptor) [pid 7004] close(20) = -1 EBADF (Bad file descriptor) [pid 7004] close(21) = -1 EBADF (Bad file descriptor) [pid 7004] close(22) = -1 EBADF (Bad file descriptor) [pid 7004] close(23) = -1 EBADF (Bad file descriptor) [pid 7004] close(24) = -1 EBADF (Bad file descriptor) [pid 7004] close(25) = -1 EBADF (Bad file descriptor) [pid 7004] close(26) = -1 EBADF (Bad file descriptor) [pid 7004] close(27) = -1 EBADF (Bad file descriptor) [pid 7004] close(28) = -1 EBADF (Bad file descriptor) [pid 7004] close(29) = -1 EBADF (Bad file descriptor) [pid 7004] exit_group(0 [pid 7005] <... futex resumed>) = ? [pid 7004] <... exit_group resumed>) = ? [pid 7006] <... futex resumed>) = ? [pid 7005] +++ exited with 0 +++ [pid 7006] +++ exited with 0 +++ [pid 7004] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1977, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] umount2("./659", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./659", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./659/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./659/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./659/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./659/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./659") = 0 [pid 5019] mkdir("./660", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1980 ./strace-static-x86_64: Process 7007 attached [pid 7007] set_robust_list(0x555556a426a0, 24) = 0 [pid 7007] chdir("./660") = 0 [pid 7007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7007] setpgid(0, 0) = 0 [pid 7007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7007] write(3, "1000", 4) = 4 [pid 7007] close(3) = 0 [pid 7007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7007] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7007] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7007] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7007] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7007] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 92.402059][ T7005] loop0: detected capacity change from 0 to 1024 [pid 7007] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1981]}, 88) = 1981 [pid 7007] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7007] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7007] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7008 attached [pid 7008] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7008] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7008] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7008] memfd_create("syzkaller", 0) = 3 [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7008] munmap(0x7f15b9a45000, 524288) = 0 [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7008] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7008] close(3) = 0 [pid 7008] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7008] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7008] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7008] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7008] ioctl(4, LOOP_CLR_FD) = 0 [pid 7008] close(4) = 0 [pid 7008] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] <... futex resumed>) = 0 [pid 7008] <... futex resumed>) = 1 [pid 7007] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7008] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7007] <... futex resumed>) = 0 [pid 7007] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7007] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7007] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7007] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1982]}, 88) = 1982 [pid 7008] <... mknodat resumed>) = 0 [pid 7007] rt_sigprocmask(SIG_SETMASK, [], [pid 7008] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7008] <... futex resumed>) = 0 [pid 7007] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7008] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7007] <... futex resumed>) = 0 [pid 7007] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7009 attached [pid 7009] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7009] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7009] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7009] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7009] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7009] chdir(".") = 0 [pid 7009] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7007] <... futex resumed>) = 0 [pid 7007] close(3) = 0 [pid 7007] close(4) = 0 [pid 7007] close(5) = -1 EBADF (Bad file descriptor) [pid 7007] close(6) = -1 EBADF (Bad file descriptor) [pid 7007] close(7) = -1 EBADF (Bad file descriptor) [pid 7007] close(8) = -1 EBADF (Bad file descriptor) [pid 7007] close(9) = -1 EBADF (Bad file descriptor) [pid 7009] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7007] close(10) = -1 EBADF (Bad file descriptor) [pid 7007] close(11) = -1 EBADF (Bad file descriptor) [pid 7007] close(12) = -1 EBADF (Bad file descriptor) [pid 7007] close(13) = -1 EBADF (Bad file descriptor) [pid 7007] close(14) = -1 EBADF (Bad file descriptor) [pid 7007] close(15) = -1 EBADF (Bad file descriptor) [pid 7007] close(16) = -1 EBADF (Bad file descriptor) [pid 7007] close(17) = -1 EBADF (Bad file descriptor) [pid 7007] close(18) = -1 EBADF (Bad file descriptor) [pid 7007] close(19) = -1 EBADF (Bad file descriptor) [pid 7007] close(20) = -1 EBADF (Bad file descriptor) [pid 7007] close(21) = -1 EBADF (Bad file descriptor) [pid 7007] close(22) = -1 EBADF (Bad file descriptor) [pid 7007] close(23) = -1 EBADF (Bad file descriptor) [pid 7007] close(24) = -1 EBADF (Bad file descriptor) [pid 7007] close(25) = -1 EBADF (Bad file descriptor) [pid 7007] close(26) = -1 EBADF (Bad file descriptor) [pid 7007] close(27) = -1 EBADF (Bad file descriptor) [pid 7007] close(28) = -1 EBADF (Bad file descriptor) [pid 7007] close(29) = -1 EBADF (Bad file descriptor) [pid 7007] exit_group(0 [pid 7008] <... futex resumed>) = ? [pid 7007] <... exit_group resumed>) = ? [pid 7009] <... futex resumed>) = ? [pid 7008] +++ exited with 0 +++ [pid 7009] +++ exited with 0 +++ [pid 7007] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1980, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./660", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./660", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./660/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./660/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./660/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./660") = 0 [pid 5019] mkdir("./661", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.467548][ T7008] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7010 attached [pid 7010] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1983 [pid 7010] chdir("./661") = 0 [pid 7010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7010] setpgid(0, 0) = 0 [pid 7010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7010] write(3, "1000", 4) = 4 [pid 7010] close(3) = 0 [pid 7010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7010] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7010] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7010] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7010] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7011 attached [pid 7011] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7011] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7011] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7010] <... clone3 resumed> => {parent_tid=[1984]}, 88) = 1984 [pid 7010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7010] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7010] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7011] <... futex resumed>) = 0 [pid 7011] memfd_create("syzkaller", 0) = 3 [pid 7011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7011] munmap(0x7f15b9a45000, 524288) = 0 [pid 7011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7011] close(3) = 0 [pid 7011] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7011] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7011] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7011] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7011] ioctl(4, LOOP_CLR_FD) = 0 [pid 7011] close(4) = 0 [pid 7011] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] <... futex resumed>) = 0 [pid 7010] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7011] <... futex resumed>) = 1 [pid 7010] <... futex resumed>) = 0 [pid 7010] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7010] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 7011] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000./strace-static-x86_64: Process 7012 attached [pid 7010] <... clone3 resumed> => {parent_tid=[1985]}, 88) = 1985 [pid 7010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7010] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 7010] <... futex resumed>) = 0 [pid 7012] <... rseq resumed>) = 0 [pid 7010] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7012] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7012] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7012] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7012] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7011] <... mknodat resumed>) = 0 [pid 7011] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7011] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7012] <... mount resumed>) = 0 [pid 7012] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7012] chdir(".") = 0 [pid 7012] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7010] <... futex resumed>) = 0 [pid 7012] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7010] close(3) = 0 [pid 7010] close(4) = 0 [pid 7010] close(5) = -1 EBADF (Bad file descriptor) [pid 7010] close(6) = -1 EBADF (Bad file descriptor) [pid 7010] close(7) = -1 EBADF (Bad file descriptor) [pid 7010] close(8) = -1 EBADF (Bad file descriptor) [pid 7010] close(9) = -1 EBADF (Bad file descriptor) [pid 7010] close(10) = -1 EBADF (Bad file descriptor) [pid 7010] close(11) = -1 EBADF (Bad file descriptor) [pid 7010] close(12) = -1 EBADF (Bad file descriptor) [pid 7010] close(13) = -1 EBADF (Bad file descriptor) [pid 7010] close(14) = -1 EBADF (Bad file descriptor) [pid 7010] close(15) = -1 EBADF (Bad file descriptor) [pid 7010] close(16) = -1 EBADF (Bad file descriptor) [pid 7010] close(17) = -1 EBADF (Bad file descriptor) [pid 7010] close(18) = -1 EBADF (Bad file descriptor) [pid 7010] close(19) = -1 EBADF (Bad file descriptor) [pid 7010] close(20) = -1 EBADF (Bad file descriptor) [pid 7010] close(21) = -1 EBADF (Bad file descriptor) [pid 7010] close(22) = -1 EBADF (Bad file descriptor) [pid 7010] close(23) = -1 EBADF (Bad file descriptor) [pid 7010] close(24) = -1 EBADF (Bad file descriptor) [pid 7010] close(25) = -1 EBADF (Bad file descriptor) [pid 7010] close(26) = -1 EBADF (Bad file descriptor) [pid 7010] close(27) = -1 EBADF (Bad file descriptor) [pid 7010] close(28) = -1 EBADF (Bad file descriptor) [pid 7010] close(29) = -1 EBADF (Bad file descriptor) [pid 7010] exit_group(0 [pid 7012] <... futex resumed>) = ? [pid 7011] <... futex resumed>) = ? [pid 7010] <... exit_group resumed>) = ? [pid 7012] +++ exited with 0 +++ [pid 7011] +++ exited with 0 +++ [pid 7010] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1983, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./661", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./661", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./661/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./661/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./661/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./661/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./661/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./661/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./661/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./661/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./661/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./661") = 0 [pid 5019] mkdir("./662", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1986 ./strace-static-x86_64: Process 7013 attached [pid 7013] set_robust_list(0x555556a426a0, 24) = 0 [pid 7013] chdir("./662") = 0 [pid 7013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7013] setpgid(0, 0) = 0 [pid 7013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7013] write(3, "1000", 4) = 4 [pid 7013] close(3) = 0 [pid 7013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7013] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7013] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7013] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7013] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7013] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7013] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7014 attached => {parent_tid=[1987]}, 88) = 1987 [pid 7014] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7014] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7013] rt_sigprocmask(SIG_SETMASK, [], [pid 7014] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7013] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7013] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7014] <... futex resumed>) = 0 [pid 7013] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7014] memfd_create("syzkaller", 0) = 3 [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7014] munmap(0x7f15b9a45000, 524288) = 0 [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 92.546418][ T7011] loop0: detected capacity change from 0 to 1024 [pid 7014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7014] close(3) = 0 [pid 7014] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7014] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7014] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7014] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7014] ioctl(4, LOOP_CLR_FD) = 0 [pid 7014] close(4) = 0 [pid 7014] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7013] <... futex resumed>) = 0 [pid 7013] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7013] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7013] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7013] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7013] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1988]}, 88) = 1988 [pid 7013] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7013] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7015 attached [pid 7015] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 7013] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7014] <... futex resumed>) = 1 [pid 7014] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7015] <... rseq resumed>) = 0 [pid 7015] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7015] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7015] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7015] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7014] <... mknodat resumed>) = 0 [pid 7014] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7014] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7015] <... mount resumed>) = 0 [pid 7015] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7015] chdir(".") = 0 [pid 7015] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7013] <... futex resumed>) = 0 [pid 7013] close(3) = 0 [pid 7013] close(4) = 0 [pid 7013] close(5 [pid 7015] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7013] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7013] close(6) = -1 EBADF (Bad file descriptor) [pid 7013] close(7) = -1 EBADF (Bad file descriptor) [pid 7013] close(8) = -1 EBADF (Bad file descriptor) [pid 7013] close(9) = -1 EBADF (Bad file descriptor) [pid 7013] close(10) = -1 EBADF (Bad file descriptor) [pid 7013] close(11) = -1 EBADF (Bad file descriptor) [pid 7013] close(12) = -1 EBADF (Bad file descriptor) [pid 7013] close(13) = -1 EBADF (Bad file descriptor) [pid 7013] close(14) = -1 EBADF (Bad file descriptor) [pid 7013] close(15) = -1 EBADF (Bad file descriptor) [pid 7013] close(16) = -1 EBADF (Bad file descriptor) [pid 7013] close(17) = -1 EBADF (Bad file descriptor) [pid 7013] close(18) = -1 EBADF (Bad file descriptor) [pid 7013] close(19) = -1 EBADF (Bad file descriptor) [pid 7013] close(20) = -1 EBADF (Bad file descriptor) [pid 7013] close(21) = -1 EBADF (Bad file descriptor) [pid 7013] close(22) = -1 EBADF (Bad file descriptor) [pid 7013] close(23) = -1 EBADF (Bad file descriptor) [pid 7013] close(24) = -1 EBADF (Bad file descriptor) [pid 7013] close(25) = -1 EBADF (Bad file descriptor) [pid 7013] close(26) = -1 EBADF (Bad file descriptor) [pid 7013] close(27) = -1 EBADF (Bad file descriptor) [pid 7013] close(28) = -1 EBADF (Bad file descriptor) [pid 7013] close(29) = -1 EBADF (Bad file descriptor) [pid 7013] exit_group(0 [pid 7015] <... futex resumed>) = ? [pid 7014] <... futex resumed>) = ? [pid 7013] <... exit_group resumed>) = ? [pid 7015] +++ exited with 0 +++ [pid 7014] +++ exited with 0 +++ [pid 7013] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1986, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./662", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./662", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./662/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./662/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./662/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./662/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./662/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./662/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./662/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./662/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./662/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./662") = 0 [pid 5019] mkdir("./663", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1989 ./strace-static-x86_64: Process 7016 attached [pid 7016] set_robust_list(0x555556a426a0, 24) = 0 [pid 7016] chdir("./663") = 0 [pid 7016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7016] setpgid(0, 0) = 0 [pid 7016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7016] write(3, "1000", 4) = 4 [pid 7016] close(3) = 0 [pid 7016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7016] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7016] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7016] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7016] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1990]}, 88) = 1990 [pid 7016] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7016] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7016] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7017 attached [pid 7017] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7017] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7017] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7017] memfd_create("syzkaller", 0) = 3 [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [ 92.611017][ T7014] loop0: detected capacity change from 0 to 1024 [pid 7017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7017] munmap(0x7f15b9a45000, 524288) = 0 [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7017] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7017] close(3) = 0 [pid 7017] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7017] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7017] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7017] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7017] ioctl(4, LOOP_CLR_FD) = 0 [pid 7017] close(4) = 0 [pid 7017] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7016] <... futex resumed>) = 0 [pid 7016] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7016] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7016] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1991]}, 88) = 1991 [pid 7016] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7016] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7016] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7018 attached [pid 7018] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7018] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7018] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7018] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7018] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7017] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7018] <... mount resumed>) = 0 [pid 7018] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7018] chdir(".") = 0 [pid 7018] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] <... futex resumed>) = 0 [pid 7018] <... futex resumed>) = 1 [pid 7018] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7017] <... mknodat resumed>) = 0 [pid 7017] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7016] close(3) = 0 [pid 7016] close(4) = 0 [pid 7016] close(5) = -1 EBADF (Bad file descriptor) [pid 7016] close(6) = -1 EBADF (Bad file descriptor) [pid 7016] close(7) = -1 EBADF (Bad file descriptor) [pid 7016] close(8) = -1 EBADF (Bad file descriptor) [pid 7016] close(9) = -1 EBADF (Bad file descriptor) [pid 7016] close(10) = -1 EBADF (Bad file descriptor) [pid 7016] close(11) = -1 EBADF (Bad file descriptor) [pid 7016] close(12) = -1 EBADF (Bad file descriptor) [pid 7016] close(13) = -1 EBADF (Bad file descriptor) [pid 7016] close(14) = -1 EBADF (Bad file descriptor) [pid 7016] close(15) = -1 EBADF (Bad file descriptor) [pid 7016] close(16) = -1 EBADF (Bad file descriptor) [pid 7016] close(17) = -1 EBADF (Bad file descriptor) [pid 7016] close(18) = -1 EBADF (Bad file descriptor) [pid 7016] close(19) = -1 EBADF (Bad file descriptor) [pid 7016] close(20) = -1 EBADF (Bad file descriptor) [pid 7016] close(21) = -1 EBADF (Bad file descriptor) [pid 7016] close(22) = -1 EBADF (Bad file descriptor) [pid 7016] close(23 [pid 7017] <... futex resumed>) = 0 [pid 7016] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7017] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7016] close(24) = -1 EBADF (Bad file descriptor) [pid 7016] close(25) = -1 EBADF (Bad file descriptor) [pid 7016] close(26) = -1 EBADF (Bad file descriptor) [pid 7016] close(27) = -1 EBADF (Bad file descriptor) [pid 7016] close(28) = -1 EBADF (Bad file descriptor) [pid 7016] close(29) = -1 EBADF (Bad file descriptor) [pid 7016] exit_group(0 [pid 7017] <... futex resumed>) = ? [pid 7016] <... exit_group resumed>) = ? [pid 7017] +++ exited with 0 +++ [pid 7018] <... futex resumed>) = ? [pid 7018] +++ exited with 0 +++ [pid 7016] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1989, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./663", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./663", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./663/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./663/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./663/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./663") = 0 [pid 5019] mkdir("./664", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.675551][ T7017] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1992 ./strace-static-x86_64: Process 7019 attached [pid 7019] set_robust_list(0x555556a426a0, 24) = 0 [pid 7019] chdir("./664") = 0 [pid 7019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7019] setpgid(0, 0) = 0 [pid 7019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7019] write(3, "1000", 4) = 4 [pid 7019] close(3) = 0 [pid 7019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7019] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7019] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7019] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7019] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7019] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1993]}, 88) = 1993 [pid 7019] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7019] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7020 attached [pid 7020] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7020] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7020] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7020] memfd_create("syzkaller", 0) = 3 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7020] munmap(0x7f15b9a45000, 524288) = 0 [pid 7020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7020] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7020] close(3) = 0 [pid 7020] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7020] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7020] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7020] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7020] ioctl(4, LOOP_CLR_FD) = 0 [pid 7020] close(4) = 0 [pid 7020] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7019] <... futex resumed>) = 0 [pid 7019] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7019] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 7020] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7019] <... mprotect resumed>) = 0 [pid 7019] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7019] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1994]}, 88) = 1994 [pid 7019] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7019] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7019] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7021 attached [pid 7021] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7021] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7021] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7021] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7021] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7020] <... mknodat resumed>) = 0 [pid 7020] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7020] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7021] <... mount resumed>) = 0 [pid 7021] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7021] chdir(".") = 0 [pid 7021] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... futex resumed>) = 0 [pid 7019] close(3) = 0 [pid 7019] close(4) = 0 [pid 7019] close(5) = -1 EBADF (Bad file descriptor) [pid 7019] close(6) = -1 EBADF (Bad file descriptor) [pid 7019] close(7) = -1 EBADF (Bad file descriptor) [pid 7019] close(8) = -1 EBADF (Bad file descriptor) [pid 7019] close(9) = -1 EBADF (Bad file descriptor) [pid 7019] close(10) = -1 EBADF (Bad file descriptor) [pid 7019] close(11) = -1 EBADF (Bad file descriptor) [pid 7019] close(12) = -1 EBADF (Bad file descriptor) [pid 7019] close(13) = -1 EBADF (Bad file descriptor) [pid 7019] close(14) = -1 EBADF (Bad file descriptor) [pid 7019] close(15) = -1 EBADF (Bad file descriptor) [pid 7019] close(16) = -1 EBADF (Bad file descriptor) [pid 7019] close(17) = -1 EBADF (Bad file descriptor) [pid 7019] close(18) = -1 EBADF (Bad file descriptor) [pid 7019] close(19) = -1 EBADF (Bad file descriptor) [pid 7019] close(20) = -1 EBADF (Bad file descriptor) [pid 7019] close(21) = -1 EBADF (Bad file descriptor) [pid 7019] close(22) = -1 EBADF (Bad file descriptor) [pid 7019] close(23) = -1 EBADF (Bad file descriptor) [pid 7019] close(24) = -1 EBADF (Bad file descriptor) [pid 7019] close(25) = -1 EBADF (Bad file descriptor) [pid 7019] close(26) = -1 EBADF (Bad file descriptor) [pid 7019] close(27) = -1 EBADF (Bad file descriptor) [pid 7019] close(28) = -1 EBADF (Bad file descriptor) [pid 7019] close(29) = -1 EBADF (Bad file descriptor) [pid 7019] exit_group(0) = ? [pid 7021] <... futex resumed>) = ? [pid 7021] +++ exited with 0 +++ [pid 7020] <... futex resumed>) = ? [pid 7020] +++ exited with 0 +++ [pid 7019] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1992, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./664", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./664", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./664/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./664/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./664/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./664") = 0 [pid 5019] mkdir("./665", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7022 attached [ 92.753547][ T7020] loop0: detected capacity change from 0 to 1024 [pid 7022] set_robust_list(0x555556a426a0, 24) = 0 [pid 7022] chdir("./665") = 0 [pid 7022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7022] setpgid(0, 0) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 1995 [pid 7022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7022] write(3, "1000", 4) = 4 [pid 7022] close(3) = 0 [pid 7022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7022] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7022] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7022] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7022] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7022] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[1996]}, 88) = 1996 [pid 7022] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7022] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7022] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7023 attached [pid 7023] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7023] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7023] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7023] memfd_create("syzkaller", 0) = 3 [pid 7023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7023] munmap(0x7f15b9a45000, 524288) = 0 [pid 7023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7023] close(3) = 0 [pid 7023] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7023] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7023] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7023] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7023] ioctl(4, LOOP_CLR_FD) = 0 [pid 7023] close(4) = 0 [pid 7023] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7022] <... futex resumed>) = 0 [pid 7022] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7022] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7022] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7022] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[1997]}, 88) = 1997 [pid 7022] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7022] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7022] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7024 attached [pid 7024] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7024] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7024] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7024] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7024] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7023] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 7023] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] <... mount resumed>) = 0 [pid 7024] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7024] chdir(".") = 0 [pid 7024] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... futex resumed>) = 0 [pid 7022] close(3) = 0 [pid 7022] close(4) = 0 [pid 7022] close(5 [pid 7023] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7022] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7022] close(6) = -1 EBADF (Bad file descriptor) [pid 7022] close(7) = -1 EBADF (Bad file descriptor) [pid 7022] close(8) = -1 EBADF (Bad file descriptor) [pid 7022] close(9) = -1 EBADF (Bad file descriptor) [pid 7022] close(10) = -1 EBADF (Bad file descriptor) [pid 7022] close(11) = -1 EBADF (Bad file descriptor) [pid 7022] close(12) = -1 EBADF (Bad file descriptor) [pid 7022] close(13) = -1 EBADF (Bad file descriptor) [pid 7022] close(14) = -1 EBADF (Bad file descriptor) [pid 7022] close(15) = -1 EBADF (Bad file descriptor) [pid 7022] close(16) = -1 EBADF (Bad file descriptor) [pid 7022] close(17) = -1 EBADF (Bad file descriptor) [pid 7022] close(18) = -1 EBADF (Bad file descriptor) [pid 7022] close(19) = -1 EBADF (Bad file descriptor) [pid 7022] close(20) = -1 EBADF (Bad file descriptor) [pid 7022] close(21) = -1 EBADF (Bad file descriptor) [pid 7022] close(22) = -1 EBADF (Bad file descriptor) [pid 7022] close(23) = -1 EBADF (Bad file descriptor) [pid 7022] close(24) = -1 EBADF (Bad file descriptor) [pid 7022] close(25) = -1 EBADF (Bad file descriptor) [pid 7022] close(26) = -1 EBADF (Bad file descriptor) [pid 7022] close(27) = -1 EBADF (Bad file descriptor) [pid 7022] close(28) = -1 EBADF (Bad file descriptor) [pid 7022] close(29) = -1 EBADF (Bad file descriptor) [pid 7022] exit_group(0) = ? [pid 7024] <... futex resumed>) = ? [pid 7024] +++ exited with 0 +++ [pid 7023] <... futex resumed>) = ? [pid 7023] +++ exited with 0 +++ [pid 7022] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1995, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./665", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./665", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./665/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./665/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./665/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./665/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./665/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./665/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./665/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./665/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./665/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./665") = 0 [pid 5019] mkdir("./666", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 1998 ./strace-static-x86_64: Process 7025 attached [pid 7025] set_robust_list(0x555556a426a0, 24) = 0 [pid 7025] chdir("./666") = 0 [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7025] setpgid(0, 0) = 0 [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7025] write(3, "1000", 4) = 4 [pid 7025] close(3) = 0 [pid 7025] symlink("/dev/binderfs", "./binderfs") = 0 [ 92.828989][ T7023] loop0: detected capacity change from 0 to 1024 [pid 7025] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7025] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7025] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7026 attached => {parent_tid=[1999]}, 88) = 1999 [pid 7026] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7026] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7026] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7026] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7025] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7025] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7026] <... futex resumed>) = 0 [pid 7026] memfd_create("syzkaller", 0) = 3 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7026] munmap(0x7f15b9a45000, 524288) = 0 [pid 7026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7026] close(3) = 0 [pid 7026] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7026] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7026] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7026] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7026] ioctl(4, LOOP_CLR_FD) = 0 [pid 7026] close(4) = 0 [pid 7026] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] <... futex resumed>) = 0 [pid 7025] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7025] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2000]}, 88) = 2000 [pid 7025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7025] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7026] <... futex resumed>) = 1 [pid 7026] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 7026] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7026] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7027 attached [pid 7027] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7027] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7027] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7027] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7027] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7027] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7027] chdir(".") = 0 [pid 7027] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7025] <... futex resumed>) = 0 [pid 7025] close(3) = 0 [pid 7025] close(4) = 0 [pid 7025] close(5) = -1 EBADF (Bad file descriptor) [pid 7025] close(6) = -1 EBADF (Bad file descriptor) [pid 7025] close(7) = -1 EBADF (Bad file descriptor) [pid 7025] close(8) = -1 EBADF (Bad file descriptor) [pid 7025] close(9) = -1 EBADF (Bad file descriptor) [pid 7025] close(10) = -1 EBADF (Bad file descriptor) [pid 7025] close(11) = -1 EBADF (Bad file descriptor) [pid 7025] close(12) = -1 EBADF (Bad file descriptor) [pid 7025] close(13) = -1 EBADF (Bad file descriptor) [pid 7025] close(14) = -1 EBADF (Bad file descriptor) [pid 7025] close(15) = -1 EBADF (Bad file descriptor) [pid 7025] close(16) = -1 EBADF (Bad file descriptor) [pid 7025] close(17) = -1 EBADF (Bad file descriptor) [pid 7025] close(18) = -1 EBADF (Bad file descriptor) [pid 7025] close(19) = -1 EBADF (Bad file descriptor) [pid 7025] close(20) = -1 EBADF (Bad file descriptor) [pid 7025] close(21) = -1 EBADF (Bad file descriptor) [pid 7025] close(22) = -1 EBADF (Bad file descriptor) [pid 7025] close(23) = -1 EBADF (Bad file descriptor) [pid 7025] close(24) = -1 EBADF (Bad file descriptor) [pid 7025] close(25) = -1 EBADF (Bad file descriptor) [pid 7025] close(26) = -1 EBADF (Bad file descriptor) [pid 7025] close(27) = -1 EBADF (Bad file descriptor) [pid 7025] close(28) = -1 EBADF (Bad file descriptor) [pid 7025] close(29) = -1 EBADF (Bad file descriptor) [pid 7025] exit_group(0 [pid 7026] <... futex resumed>) = ? [pid 7025] <... exit_group resumed>) = ? [pid 7026] +++ exited with 0 +++ [pid 7027] +++ exited with 0 +++ [pid 7025] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1998, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./666", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./666", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./666/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./666/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./666/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./666") = 0 [pid 5019] mkdir("./667", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 92.904368][ T7026] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2001 ./strace-static-x86_64: Process 7028 attached [pid 7028] set_robust_list(0x555556a426a0, 24) = 0 [pid 7028] chdir("./667") = 0 [pid 7028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7028] setpgid(0, 0) = 0 [pid 7028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7028] write(3, "1000", 4) = 4 [pid 7028] close(3) = 0 [pid 7028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7028] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7028] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7028] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7028] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7028] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7028] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[2002]}, 88) = 2002 [pid 7028] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7029 attached [pid 7029] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7029] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7029] rt_sigprocmask(SIG_SETMASK, [], [pid 7028] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7029] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7028] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7029] <... futex resumed>) = 0 [pid 7028] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7029] memfd_create("syzkaller", 0) = 3 [pid 7029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7029] munmap(0x7f15b9a45000, 524288) = 0 [pid 7029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7029] close(3) = 0 [pid 7029] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7029] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7029] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7029] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7029] ioctl(4, LOOP_CLR_FD) = 0 [pid 7029] close(4) = 0 [pid 7029] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7028] <... futex resumed>) = 0 [pid 7028] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7028] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7028] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7028] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7028] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2003]}, 88) = 2003 [pid 7028] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7028] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7028] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7029] <... futex resumed>) = 1 [pid 7029] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 7029] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7029] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7030 attached [pid 7030] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7030] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7030] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7030] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7030] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7030] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7030] chdir(".") = 0 [pid 7030] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7028] <... futex resumed>) = 0 [pid 7030] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7028] close(3) = 0 [pid 7028] close(4) = 0 [pid 7028] close(5) = -1 EBADF (Bad file descriptor) [pid 7028] close(6) = -1 EBADF (Bad file descriptor) [pid 7028] close(7) = -1 EBADF (Bad file descriptor) [pid 7028] close(8) = -1 EBADF (Bad file descriptor) [pid 7028] close(9) = -1 EBADF (Bad file descriptor) [pid 7028] close(10) = -1 EBADF (Bad file descriptor) [pid 7028] close(11) = -1 EBADF (Bad file descriptor) [pid 7028] close(12) = -1 EBADF (Bad file descriptor) [pid 7028] close(13) = -1 EBADF (Bad file descriptor) [pid 7028] close(14) = -1 EBADF (Bad file descriptor) [pid 7028] close(15) = -1 EBADF (Bad file descriptor) [pid 7028] close(16) = -1 EBADF (Bad file descriptor) [pid 7028] close(17) = -1 EBADF (Bad file descriptor) [pid 7028] close(18) = -1 EBADF (Bad file descriptor) [pid 7028] close(19) = -1 EBADF (Bad file descriptor) [pid 7028] close(20) = -1 EBADF (Bad file descriptor) [pid 7028] close(21) = -1 EBADF (Bad file descriptor) [pid 7028] close(22) = -1 EBADF (Bad file descriptor) [pid 7028] close(23) = -1 EBADF (Bad file descriptor) [pid 7028] close(24) = -1 EBADF (Bad file descriptor) [pid 7028] close(25) = -1 EBADF (Bad file descriptor) [pid 7028] close(26) = -1 EBADF (Bad file descriptor) [pid 7028] close(27) = -1 EBADF (Bad file descriptor) [pid 7028] close(28) = -1 EBADF (Bad file descriptor) [pid 7028] close(29) = -1 EBADF (Bad file descriptor) [pid 7028] exit_group(0 [pid 7029] <... futex resumed>) = ? [pid 7028] <... exit_group resumed>) = ? [pid 7029] +++ exited with 0 +++ [pid 7030] <... futex resumed>) = ? [pid 7030] +++ exited with 0 +++ [pid 7028] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2001, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./667", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./667", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./667/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./667/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./667/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./667") = 0 [pid 5019] mkdir("./668", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2004 ./strace-static-x86_64: Process 7031 attached [pid 7031] set_robust_list(0x555556a426a0, 24) = 0 [pid 7031] chdir("./668") = 0 [pid 7031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7031] setpgid(0, 0) = 0 [pid 7031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7031] write(3, "1000", 4) = 4 [pid 7031] close(3) = 0 [pid 7031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7031] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7031] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7031] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7031] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7031] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7031] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7032 attached => {parent_tid=[2005]}, 88) = 2005 [pid 7032] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7032] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7032] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7031] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7032] <... futex resumed>) = 0 [pid 7031] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7032] memfd_create("syzkaller", 0) = 3 [ 92.981957][ T7029] loop0: detected capacity change from 0 to 1024 [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7032] munmap(0x7f15b9a45000, 524288) = 0 [pid 7032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7032] close(3) = 0 [pid 7032] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7032] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7032] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7032] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7032] ioctl(4, LOOP_CLR_FD) = 0 [pid 7032] close(4) = 0 [pid 7032] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7031] <... futex resumed>) = 0 [pid 7031] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7031] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7031] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE [pid 7032] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7031] <... mprotect resumed>) = 0 [pid 7031] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7031] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7033 attached [pid 7033] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7033] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7033] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] <... clone3 resumed> => {parent_tid=[2006]}, 88) = 2006 [pid 7031] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7031] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7033] <... futex resumed>) = 0 [pid 7031] <... futex resumed>) = 1 [pid 7033] mkdir(".", 0777 [pid 7031] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7033] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 7033] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7032] <... mknodat resumed>) = 0 [pid 7032] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7033] <... mount resumed>) = 0 [pid 7033] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7032] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7033] chdir(".") = 0 [pid 7033] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7031] <... futex resumed>) = 0 [pid 7033] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7031] close(3) = 0 [pid 7031] close(4) = 0 [pid 7031] close(5) = -1 EBADF (Bad file descriptor) [pid 7031] close(6) = -1 EBADF (Bad file descriptor) [pid 7031] close(7) = -1 EBADF (Bad file descriptor) [pid 7031] close(8) = -1 EBADF (Bad file descriptor) [pid 7031] close(9) = -1 EBADF (Bad file descriptor) [pid 7031] close(10) = -1 EBADF (Bad file descriptor) [pid 7031] close(11) = -1 EBADF (Bad file descriptor) [pid 7031] close(12) = -1 EBADF (Bad file descriptor) [pid 7031] close(13) = -1 EBADF (Bad file descriptor) [pid 7031] close(14) = -1 EBADF (Bad file descriptor) [pid 7031] close(15) = -1 EBADF (Bad file descriptor) [pid 7031] close(16) = -1 EBADF (Bad file descriptor) [pid 7031] close(17) = -1 EBADF (Bad file descriptor) [pid 7031] close(18) = -1 EBADF (Bad file descriptor) [pid 7031] close(19) = -1 EBADF (Bad file descriptor) [pid 7031] close(20) = -1 EBADF (Bad file descriptor) [pid 7031] close(21) = -1 EBADF (Bad file descriptor) [pid 7031] close(22) = -1 EBADF (Bad file descriptor) [pid 7031] close(23) = -1 EBADF (Bad file descriptor) [pid 7031] close(24) = -1 EBADF (Bad file descriptor) [pid 7031] close(25) = -1 EBADF (Bad file descriptor) [pid 7031] close(26) = -1 EBADF (Bad file descriptor) [pid 7031] close(27) = -1 EBADF (Bad file descriptor) [pid 7031] close(28) = -1 EBADF (Bad file descriptor) [pid 7031] close(29) = -1 EBADF (Bad file descriptor) [pid 7031] exit_group(0 [pid 7033] <... futex resumed>) = ? [pid 7032] <... futex resumed>) = ? [pid 7031] <... exit_group resumed>) = ? [pid 7033] +++ exited with 0 +++ [pid 7032] +++ exited with 0 +++ [pid 7031] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2004, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./668", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./668", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./668/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./668/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./668/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./668/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./668/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./668/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./668/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./668/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./668/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./668") = 0 [pid 5019] mkdir("./669", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2007 ./strace-static-x86_64: Process 7034 attached [pid 7034] set_robust_list(0x555556a426a0, 24) = 0 [pid 7034] chdir("./669") = 0 [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7034] setpgid(0, 0) = 0 [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7034] write(3, "1000", 4) = 4 [pid 7034] close(3) = 0 [pid 7034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7034] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7034] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7034] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7035 attached => {parent_tid=[2008]}, 88) = 2008 [pid 7035] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7035] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7035] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7035] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7034] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7035] <... futex resumed>) = 0 [ 93.048092][ T7032] loop0: detected capacity change from 0 to 1024 [pid 7034] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7035] memfd_create("syzkaller", 0) = 3 [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7035] munmap(0x7f15b9a45000, 524288) = 0 [pid 7035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7035] close(3) = 0 [pid 7035] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7035] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7035] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7035] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7035] ioctl(4, LOOP_CLR_FD) = 0 [pid 7035] close(4) = 0 [pid 7035] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7034] <... futex resumed>) = 0 [pid 7034] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7035] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7034] <... mmap resumed>) = 0x7f15b9aa4000 [pid 7034] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2009]}, 88) = 2009 [pid 7034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7034] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7036 attached [pid 7036] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7036] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7036] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7036] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7035] <... mknodat resumed>) = 0 [pid 7035] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7035] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7036] <... mount resumed>) = 0 [pid 7036] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7036] chdir(".") = 0 [pid 7036] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... futex resumed>) = 0 [pid 7034] close(3) = 0 [pid 7034] close(4) = 0 [pid 7034] close(5) = -1 EBADF (Bad file descriptor) [pid 7034] close(6) = -1 EBADF (Bad file descriptor) [pid 7036] <... futex resumed>) = 1 [pid 7034] close(7) = -1 EBADF (Bad file descriptor) [pid 7034] close(8) = -1 EBADF (Bad file descriptor) [pid 7034] close(9) = -1 EBADF (Bad file descriptor) [pid 7034] close(10) = -1 EBADF (Bad file descriptor) [pid 7034] close(11) = -1 EBADF (Bad file descriptor) [pid 7034] close(12) = -1 EBADF (Bad file descriptor) [pid 7034] close(13) = -1 EBADF (Bad file descriptor) [pid 7034] close(14) = -1 EBADF (Bad file descriptor) [pid 7034] close(15) = -1 EBADF (Bad file descriptor) [pid 7034] close(16) = -1 EBADF (Bad file descriptor) [pid 7034] close(17) = -1 EBADF (Bad file descriptor) [pid 7034] close(18) = -1 EBADF (Bad file descriptor) [pid 7034] close(19) = -1 EBADF (Bad file descriptor) [pid 7034] close(20) = -1 EBADF (Bad file descriptor) [pid 7034] close(21) = -1 EBADF (Bad file descriptor) [pid 7034] close(22) = -1 EBADF (Bad file descriptor) [pid 7034] close(23) = -1 EBADF (Bad file descriptor) [pid 7036] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7034] close(24) = -1 EBADF (Bad file descriptor) [pid 7034] close(25) = -1 EBADF (Bad file descriptor) [pid 7034] close(26) = -1 EBADF (Bad file descriptor) [pid 7034] close(27) = -1 EBADF (Bad file descriptor) [pid 7034] close(28) = -1 EBADF (Bad file descriptor) [pid 7034] close(29) = -1 EBADF (Bad file descriptor) [pid 7034] exit_group(0) = ? [pid 7036] <... futex resumed>) = ? [pid 7035] <... futex resumed>) = ? [pid 7036] +++ exited with 0 +++ [pid 7035] +++ exited with 0 +++ [pid 7034] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2007, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./669", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./669", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./669/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./669/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./669/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./669/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./669/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [ 93.115795][ T7035] loop0: detected capacity change from 0 to 1024 [pid 5019] close(4) = 0 [pid 5019] rmdir("./669/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./669/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./669/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./669/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./669") = 0 [pid 5019] mkdir("./670", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2010 ./strace-static-x86_64: Process 7037 attached [pid 7037] set_robust_list(0x555556a426a0, 24) = 0 [pid 7037] chdir("./670") = 0 [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7037] setpgid(0, 0) = 0 [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7037] write(3, "1000", 4) = 4 [pid 7037] close(3) = 0 [pid 7037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7037] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7037] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7037] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7037] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7037] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7037] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7038 attached => {parent_tid=[2011]}, 88) = 2011 [pid 7038] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7038] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7038] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7037] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7038] <... futex resumed>) = 0 [pid 7038] memfd_create("syzkaller", 0) = 3 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7037] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7038] munmap(0x7f15b9a45000, 524288) = 0 [pid 7038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7038] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7038] close(3) = 0 [pid 7038] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7038] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7038] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7038] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7038] ioctl(4, LOOP_CLR_FD) = 0 [pid 7038] close(4) = 0 [pid 7038] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7038] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7037] <... futex resumed>) = 0 [pid 7037] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7038] <... futex resumed>) = 0 [pid 7038] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7037] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7037] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7038] <... mknodat resumed>) = 0 [pid 7037] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7038] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7038] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7037] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7037] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7039 attached [pid 7039] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7039] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7039] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7037] <... clone3 resumed> => {parent_tid=[2012]}, 88) = 2012 [pid 7037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7037] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7039] <... futex resumed>) = 0 [pid 7039] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7037] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7039] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7039] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7039] chdir(".") = 0 [pid 7039] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7037] <... futex resumed>) = 0 [pid 7037] close(3) = 0 [pid 7037] close(4) = 0 [pid 7037] close(5) = -1 EBADF (Bad file descriptor) [pid 7039] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7037] close(6) = -1 EBADF (Bad file descriptor) [pid 7037] close(7) = -1 EBADF (Bad file descriptor) [pid 7037] close(8) = -1 EBADF (Bad file descriptor) [pid 7037] close(9) = -1 EBADF (Bad file descriptor) [pid 7037] close(10) = -1 EBADF (Bad file descriptor) [pid 7037] close(11) = -1 EBADF (Bad file descriptor) [pid 7037] close(12) = -1 EBADF (Bad file descriptor) [pid 7037] close(13) = -1 EBADF (Bad file descriptor) [pid 7037] close(14) = -1 EBADF (Bad file descriptor) [pid 7037] close(15) = -1 EBADF (Bad file descriptor) [pid 7037] close(16) = -1 EBADF (Bad file descriptor) [pid 7037] close(17) = -1 EBADF (Bad file descriptor) [pid 7037] close(18) = -1 EBADF (Bad file descriptor) [pid 7037] close(19) = -1 EBADF (Bad file descriptor) [pid 7037] close(20) = -1 EBADF (Bad file descriptor) [pid 7037] close(21) = -1 EBADF (Bad file descriptor) [pid 7037] close(22) = -1 EBADF (Bad file descriptor) [pid 7037] close(23) = -1 EBADF (Bad file descriptor) [pid 7037] close(24) = -1 EBADF (Bad file descriptor) [pid 7037] close(25) = -1 EBADF (Bad file descriptor) [pid 7037] close(26) = -1 EBADF (Bad file descriptor) [pid 7037] close(27) = -1 EBADF (Bad file descriptor) [pid 7037] close(28) = -1 EBADF (Bad file descriptor) [pid 7037] close(29) = -1 EBADF (Bad file descriptor) [pid 7037] exit_group(0 [pid 7039] <... futex resumed>) = ? [pid 7038] <... futex resumed>) = ? [pid 7037] <... exit_group resumed>) = ? [pid 7039] +++ exited with 0 +++ [pid 7038] +++ exited with 0 +++ [pid 7037] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2010, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./670", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./670", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./670/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./670/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./670/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./670/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./670/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./670/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./670/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./670/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./670/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [ 93.203516][ T7038] loop0: detected capacity change from 0 to 1024 [pid 5019] rmdir("./670") = 0 [pid 5019] mkdir("./671", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2013 ./strace-static-x86_64: Process 7040 attached [pid 7040] set_robust_list(0x555556a426a0, 24) = 0 [pid 7040] chdir("./671") = 0 [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7040] setpgid(0, 0) = 0 [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7040] write(3, "1000", 4) = 4 [pid 7040] close(3) = 0 [pid 7040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7040] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7040] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7040] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7040] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[2014]}, 88) = 2014 [pid 7040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7040] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7041 attached [pid 7041] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7041] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7041] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7041] memfd_create("syzkaller", 0) = 3 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7041] munmap(0x7f15b9a45000, 524288) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7041] close(3) = 0 [pid 7041] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7041] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7041] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7041] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7041] ioctl(4, LOOP_CLR_FD) = 0 [pid 7041] close(4) = 0 [pid 7041] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7040] <... futex resumed>) = 0 [pid 7040] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7040] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7040] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7040] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} [pid 7041] <... futex resumed>) = 1 [pid 7041] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7040] <... clone3 resumed> => {parent_tid=[2015]}, 88) = 2015 [pid 7040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7040] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7040] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7042 attached [pid 7042] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7042] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7042] rt_sigprocmask(SIG_SETMASK, [], [pid 7041] <... mknodat resumed>) = 0 [pid 7042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7042] mkdir(".", 0777 [pid 7041] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 7041] <... futex resumed>) = 0 [pid 7042] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7041] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7042] <... mount resumed>) = 0 [pid 7042] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7042] chdir(".") = 0 [pid 7042] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7040] <... futex resumed>) = 0 [pid 7040] close(3) = 0 [pid 7040] close(4) = 0 [pid 7040] close(5) = -1 EBADF (Bad file descriptor) [pid 7040] close(6) = -1 EBADF (Bad file descriptor) [pid 7040] close(7) = -1 EBADF (Bad file descriptor) [pid 7040] close(8) = -1 EBADF (Bad file descriptor) [pid 7040] close(9) = -1 EBADF (Bad file descriptor) [pid 7042] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] close(10) = -1 EBADF (Bad file descriptor) [pid 7040] close(11) = -1 EBADF (Bad file descriptor) [pid 7040] close(12) = -1 EBADF (Bad file descriptor) [pid 7040] close(13) = -1 EBADF (Bad file descriptor) [pid 7040] close(14) = -1 EBADF (Bad file descriptor) [pid 7040] close(15) = -1 EBADF (Bad file descriptor) [pid 7040] close(16) = -1 EBADF (Bad file descriptor) [pid 7040] close(17) = -1 EBADF (Bad file descriptor) [pid 7040] close(18) = -1 EBADF (Bad file descriptor) [pid 7040] close(19) = -1 EBADF (Bad file descriptor) [pid 7040] close(20) = -1 EBADF (Bad file descriptor) [pid 7040] close(21) = -1 EBADF (Bad file descriptor) [pid 7040] close(22) = -1 EBADF (Bad file descriptor) [pid 7040] close(23) = -1 EBADF (Bad file descriptor) [pid 7040] close(24) = -1 EBADF (Bad file descriptor) [pid 7040] close(25) = -1 EBADF (Bad file descriptor) [pid 7040] close(26) = -1 EBADF (Bad file descriptor) [pid 7040] close(27) = -1 EBADF (Bad file descriptor) [pid 7040] close(28) = -1 EBADF (Bad file descriptor) [pid 7040] close(29) = -1 EBADF (Bad file descriptor) [pid 7040] exit_group(0) = ? [pid 7042] <... futex resumed>) = ? [pid 7041] <... futex resumed>) = ? [pid 7042] +++ exited with 0 +++ [pid 7041] +++ exited with 0 +++ [pid 7040] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2013, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./671", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./671", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./671/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./671/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./671/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./671/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./671") = 0 [pid 5019] mkdir("./672", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7043 attached [pid 7043] set_robust_list(0x555556a426a0, 24 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 2016 [pid 7043] <... set_robust_list resumed>) = 0 [pid 7043] chdir("./672") = 0 [pid 7043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7043] setpgid(0, 0) = 0 [pid 7043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7043] write(3, "1000", 4) = 4 [pid 7043] close(3) = 0 [pid 7043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7043] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7043] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7043] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [ 93.278211][ T7041] loop0: detected capacity change from 0 to 1024 [pid 7043] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7043] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7044 attached [pid 7044] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7044] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7043] <... clone3 resumed> => {parent_tid=[2017]}, 88) = 2017 [pid 7043] rt_sigprocmask(SIG_SETMASK, [], [pid 7044] rt_sigprocmask(SIG_SETMASK, [], [pid 7043] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7044] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7044] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7043] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7044] <... futex resumed>) = 0 [pid 7043] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7044] memfd_create("syzkaller", 0) = 3 [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7044] munmap(0x7f15b9a45000, 524288) = 0 [pid 7044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7044] close(3) = 0 [pid 7044] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7044] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7044] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7044] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7044] ioctl(4, LOOP_CLR_FD) = 0 [pid 7044] close(4) = 0 [pid 7044] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7043] <... futex resumed>) = 0 [pid 7043] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7043] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7043] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7043] rt_sigprocmask(SIG_BLOCK, ~[], [pid 7044] <... futex resumed>) = 1 [pid 7044] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7043] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7043] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7045 attached [pid 7045] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7045] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7045] rt_sigprocmask(SIG_SETMASK, [], [pid 7043] <... clone3 resumed> => {parent_tid=[2018]}, 88) = 2018 [pid 7043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7045] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7043] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7045] <... futex resumed>) = 0 [pid 7045] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7045] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7043] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7044] <... mknodat resumed>) = 0 [pid 7044] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7044] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7045] <... mount resumed>) = 0 [pid 7045] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7045] chdir(".") = 0 [pid 7045] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7043] <... futex resumed>) = 0 [pid 7043] close(3) = 0 [pid 7043] close(4) = 0 [pid 7043] close(5) = -1 EBADF (Bad file descriptor) [pid 7043] close(6) = -1 EBADF (Bad file descriptor) [pid 7043] close(7) = -1 EBADF (Bad file descriptor) [pid 7043] close(8) = -1 EBADF (Bad file descriptor) [pid 7043] close(9 [pid 7045] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7043] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7043] close(10) = -1 EBADF (Bad file descriptor) [pid 7043] close(11) = -1 EBADF (Bad file descriptor) [pid 7043] close(12) = -1 EBADF (Bad file descriptor) [pid 7043] close(13) = -1 EBADF (Bad file descriptor) [pid 7043] close(14) = -1 EBADF (Bad file descriptor) [pid 7043] close(15) = -1 EBADF (Bad file descriptor) [pid 7043] close(16) = -1 EBADF (Bad file descriptor) [pid 7043] close(17) = -1 EBADF (Bad file descriptor) [pid 7043] close(18) = -1 EBADF (Bad file descriptor) [pid 7043] close(19) = -1 EBADF (Bad file descriptor) [pid 7043] close(20) = -1 EBADF (Bad file descriptor) [pid 7043] close(21) = -1 EBADF (Bad file descriptor) [pid 7043] close(22) = -1 EBADF (Bad file descriptor) [pid 7043] close(23) = -1 EBADF (Bad file descriptor) [pid 7043] close(24) = -1 EBADF (Bad file descriptor) [pid 7043] close(25) = -1 EBADF (Bad file descriptor) [pid 7043] close(26) = -1 EBADF (Bad file descriptor) [pid 7043] close(27) = -1 EBADF (Bad file descriptor) [pid 7043] close(28) = -1 EBADF (Bad file descriptor) [pid 7043] close(29) = -1 EBADF (Bad file descriptor) [pid 7043] exit_group(0 [pid 7045] <... futex resumed>) = ? [pid 7043] <... exit_group resumed>) = ? [pid 7045] +++ exited with 0 +++ [pid 7044] <... futex resumed>) = ? [pid 7044] +++ exited with 0 +++ [pid 7043] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2016, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./672", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./672", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./672/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./672/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./672/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./672") = 0 [pid 5019] mkdir("./673", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2019 ./strace-static-x86_64: Process 7046 attached [pid 7046] set_robust_list(0x555556a426a0, 24) = 0 [pid 7046] chdir("./673") = 0 [pid 7046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7046] setpgid(0, 0) = 0 [pid 7046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7046] write(3, "1000", 4) = 4 [pid 7046] close(3) = 0 [pid 7046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7046] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7046] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[2020]}, 88) = 2020 [pid 7046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 93.349290][ T7044] loop0: detected capacity change from 0 to 1024 [pid 7046] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7047 attached [pid 7047] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7047] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7047] memfd_create("syzkaller", 0) = 3 [pid 7047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7047] munmap(0x7f15b9a45000, 524288) = 0 [pid 7047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7047] close(3) = 0 [pid 7047] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7047] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7047] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7047] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7047] ioctl(4, LOOP_CLR_FD) = 0 [pid 7047] close(4) = 0 [pid 7047] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] <... futex resumed>) = 0 [pid 7047] <... futex resumed>) = 1 [pid 7046] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7047] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7046] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7046] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7048 attached [pid 7048] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7048] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7048] rt_sigprocmask(SIG_SETMASK, [], [pid 7046] <... clone3 resumed> => {parent_tid=[2021]}, 88) = 2021 [pid 7048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7046] rt_sigprocmask(SIG_SETMASK, [], [pid 7048] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7046] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7046] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7048] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7048] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7047] <... mknodat resumed>) = 0 [pid 7047] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7048] <... mount resumed>) = 0 [pid 7047] <... futex resumed>) = 0 [pid 7048] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7047] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7048] chdir(".") = 0 [pid 7048] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7048] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7046] <... futex resumed>) = 0 [pid 7046] close(3) = 0 [pid 7046] close(4) = 0 [pid 7046] close(5) = -1 EBADF (Bad file descriptor) [pid 7046] close(6) = -1 EBADF (Bad file descriptor) [pid 7046] close(7) = -1 EBADF (Bad file descriptor) [pid 7046] close(8) = -1 EBADF (Bad file descriptor) [pid 7046] close(9) = -1 EBADF (Bad file descriptor) [pid 7046] close(10) = -1 EBADF (Bad file descriptor) [pid 7046] close(11) = -1 EBADF (Bad file descriptor) [pid 7046] close(12) = -1 EBADF (Bad file descriptor) [pid 7046] close(13) = -1 EBADF (Bad file descriptor) [pid 7046] close(14) = -1 EBADF (Bad file descriptor) [pid 7046] close(15) = -1 EBADF (Bad file descriptor) [pid 7046] close(16) = -1 EBADF (Bad file descriptor) [pid 7046] close(17) = -1 EBADF (Bad file descriptor) [pid 7046] close(18) = -1 EBADF (Bad file descriptor) [pid 7046] close(19) = -1 EBADF (Bad file descriptor) [pid 7046] close(20) = -1 EBADF (Bad file descriptor) [pid 7046] close(21) = -1 EBADF (Bad file descriptor) [pid 7046] close(22) = -1 EBADF (Bad file descriptor) [pid 7046] close(23) = -1 EBADF (Bad file descriptor) [pid 7046] close(24) = -1 EBADF (Bad file descriptor) [pid 7046] close(25) = -1 EBADF (Bad file descriptor) [pid 7046] close(26) = -1 EBADF (Bad file descriptor) [pid 7046] close(27) = -1 EBADF (Bad file descriptor) [pid 7046] close(28) = -1 EBADF (Bad file descriptor) [pid 7046] close(29) = -1 EBADF (Bad file descriptor) [pid 7046] exit_group(0) = ? [pid 7047] <... futex resumed>) = ? [pid 7048] <... futex resumed>) = ? [pid 7047] +++ exited with 0 +++ [pid 7048] +++ exited with 0 +++ [pid 7046] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2019, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./673", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./673", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./673/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./673/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./673/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./673/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./673/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./673/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./673/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./673/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./673/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./673") = 0 [pid 5019] mkdir("./674", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2022 [ 93.419617][ T7047] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 7049 attached [pid 7049] set_robust_list(0x555556a426a0, 24) = 0 [pid 7049] chdir("./674") = 0 [pid 7049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7049] setpgid(0, 0) = 0 [pid 7049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7049] write(3, "1000", 4) = 4 [pid 7049] close(3) = 0 [pid 7049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7049] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7049] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7050 attached [pid 7050] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7050] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7049] <... clone3 resumed> => {parent_tid=[2023]}, 88) = 2023 [pid 7049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7049] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7050] <... futex resumed>) = 0 [pid 7049] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7050] memfd_create("syzkaller", 0) = 3 [pid 7050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7050] munmap(0x7f15b9a45000, 524288) = 0 [pid 7050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7050] close(3) = 0 [pid 7050] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7050] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7050] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7050] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7050] ioctl(4, LOOP_CLR_FD) = 0 [pid 7050] close(4) = 0 [pid 7050] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7049] <... futex resumed>) = 0 [pid 7049] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7050] <... futex resumed>) = 0 [pid 7050] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7049] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7049] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7049] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2024]}, 88) = 2024 ./strace-static-x86_64: Process 7051 attached [pid 7049] rt_sigprocmask(SIG_SETMASK, [], [pid 7051] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053 [pid 7049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7049] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7051] <... rseq resumed>) = 0 [pid 7051] set_robust_list(0x7f15b9ac49a0, 24 [pid 7050] <... mknodat resumed>) = 0 [pid 7051] <... set_robust_list resumed>) = 0 [pid 7051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7051] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7050] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7050] <... futex resumed>) = 0 [pid 7050] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7051] <... mount resumed>) = 0 [pid 7051] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7051] chdir(".") = 0 [pid 7051] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7049] <... futex resumed>) = 0 [pid 7049] close(3) = 0 [pid 7049] close(4) = 0 [pid 7049] close(5) = -1 EBADF (Bad file descriptor) [pid 7049] close(6) = -1 EBADF (Bad file descriptor) [pid 7049] close(7 [pid 7051] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7049] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7049] close(8) = -1 EBADF (Bad file descriptor) [pid 7049] close(9) = -1 EBADF (Bad file descriptor) [pid 7049] close(10) = -1 EBADF (Bad file descriptor) [pid 7049] close(11) = -1 EBADF (Bad file descriptor) [pid 7049] close(12) = -1 EBADF (Bad file descriptor) [pid 7049] close(13) = -1 EBADF (Bad file descriptor) [pid 7049] close(14) = -1 EBADF (Bad file descriptor) [pid 7049] close(15) = -1 EBADF (Bad file descriptor) [pid 7049] close(16) = -1 EBADF (Bad file descriptor) [pid 7049] close(17) = -1 EBADF (Bad file descriptor) [pid 7049] close(18) = -1 EBADF (Bad file descriptor) [pid 7049] close(19) = -1 EBADF (Bad file descriptor) [pid 7049] close(20) = -1 EBADF (Bad file descriptor) [pid 7049] close(21) = -1 EBADF (Bad file descriptor) [pid 7049] close(22) = -1 EBADF (Bad file descriptor) [pid 7049] close(23) = -1 EBADF (Bad file descriptor) [pid 7049] close(24) = -1 EBADF (Bad file descriptor) [pid 7049] close(25) = -1 EBADF (Bad file descriptor) [pid 7049] close(26) = -1 EBADF (Bad file descriptor) [pid 7049] close(27) = -1 EBADF (Bad file descriptor) [pid 7049] close(28) = -1 EBADF (Bad file descriptor) [pid 7049] close(29) = -1 EBADF (Bad file descriptor) [pid 7049] exit_group(0 [pid 7051] <... futex resumed>) = ? [pid 7050] <... futex resumed>) = ? [pid 7049] <... exit_group resumed>) = ? [pid 7051] +++ exited with 0 +++ [pid 7050] +++ exited with 0 +++ [pid 7049] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2022, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./674", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./674", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./674/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./674/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./674/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./674") = 0 [pid 5019] mkdir("./675", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 93.501177][ T7050] loop0: detected capacity change from 0 to 1024 [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7052 attached [pid 7052] set_robust_list(0x555556a426a0, 24) = 0 [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 2025 [pid 7052] chdir("./675") = 0 [pid 7052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7052] setpgid(0, 0) = 0 [pid 7052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7052] write(3, "1000", 4) = 4 [pid 7052] close(3) = 0 [pid 7052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7052] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7052] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7052] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7052] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[2026]}, 88) = 2026 [pid 7052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7052] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7052] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7053 attached [pid 7053] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7053] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7053] memfd_create("syzkaller", 0) = 3 [pid 7053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7053] munmap(0x7f15b9a45000, 524288) = 0 [pid 7053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7053] close(3) = 0 [pid 7053] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7053] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7053] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7053] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7053] ioctl(4, LOOP_CLR_FD) = 0 [pid 7053] close(4) = 0 [pid 7053] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7052] <... futex resumed>) = 0 [pid 7052] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7052] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7052] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2027]}, 88) = 2027 [pid 7052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7052] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7052] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7054 attached [pid 7054] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7053] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7054] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7054] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7054] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7054] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7054] chdir(".") = 0 [pid 7054] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7052] <... futex resumed>) = 0 [pid 7054] <... futex resumed>) = 1 [pid 7054] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7053] <... mknodat resumed>) = 0 [pid 7053] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7052] close(3) = 0 [pid 7052] close(4) = 0 [pid 7052] close(5) = -1 EBADF (Bad file descriptor) [pid 7052] close(6) = -1 EBADF (Bad file descriptor) [pid 7052] close(7) = -1 EBADF (Bad file descriptor) [pid 7052] close(8) = -1 EBADF (Bad file descriptor) [pid 7052] close(9) = -1 EBADF (Bad file descriptor) [pid 7052] close(10) = -1 EBADF (Bad file descriptor) [pid 7052] close(11) = -1 EBADF (Bad file descriptor) [pid 7052] close(12) = -1 EBADF (Bad file descriptor) [pid 7052] close(13) = -1 EBADF (Bad file descriptor) [pid 7052] close(14) = -1 EBADF (Bad file descriptor) [pid 7052] close(15) = -1 EBADF (Bad file descriptor) [pid 7052] close(16) = -1 EBADF (Bad file descriptor) [pid 7052] close(17) = -1 EBADF (Bad file descriptor) [pid 7052] close(18) = -1 EBADF (Bad file descriptor) [pid 7052] close(19) = -1 EBADF (Bad file descriptor) [pid 7052] close(20) = -1 EBADF (Bad file descriptor) [pid 7052] close(21) = -1 EBADF (Bad file descriptor) [pid 7052] close(22) = -1 EBADF (Bad file descriptor) [pid 7052] close(23 [pid 7053] <... futex resumed>) = 0 [pid 7052] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7053] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7052] close(24) = -1 EBADF (Bad file descriptor) [pid 7052] close(25) = -1 EBADF (Bad file descriptor) [pid 7052] close(26) = -1 EBADF (Bad file descriptor) [pid 7052] close(27) = -1 EBADF (Bad file descriptor) [pid 7052] close(28) = -1 EBADF (Bad file descriptor) [pid 7052] close(29) = -1 EBADF (Bad file descriptor) [pid 7052] exit_group(0 [pid 7054] <... futex resumed>) = ? [pid 7053] <... futex resumed>) = ? [pid 7052] <... exit_group resumed>) = ? [pid 7054] +++ exited with 0 +++ [pid 7053] +++ exited with 0 +++ [pid 7052] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2025, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5019] umount2("./675", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./675", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./675/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./675/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./675/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./675") = 0 [pid 5019] mkdir("./676", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2028 ./strace-static-x86_64: Process 7055 attached [pid 7055] set_robust_list(0x555556a426a0, 24) = 0 [pid 7055] chdir("./676") = 0 [pid 7055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7055] setpgid(0, 0) = 0 [pid 7055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7055] write(3, "1000", 4) = 4 [pid 7055] close(3) = 0 [pid 7055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7055] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7055] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7055] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 93.579776][ T7053] loop0: detected capacity change from 0 to 1024 [pid 7055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[2029]}, 88) = 2029 [pid 7055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7055] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7056 attached [pid 7056] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7056] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7056] memfd_create("syzkaller", 0) = 3 [pid 7056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7056] munmap(0x7f15b9a45000, 524288) = 0 [pid 7056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7056] close(3) = 0 [pid 7056] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7056] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7056] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7056] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7056] ioctl(4, LOOP_CLR_FD) = 0 [pid 7056] close(4) = 0 [pid 7056] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7055] <... futex resumed>) = 0 [pid 7055] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7055] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2030]}, 88) = 2030 [pid 7055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7055] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7056] <... futex resumed>) = 1 [pid 7056] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 7056] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7056] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7057 attached [pid 7057] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7057] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7057] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7057] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7057] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7057] chdir(".") = 0 [pid 7057] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7055] <... futex resumed>) = 0 [pid 7055] close(3) = 0 [pid 7055] close(4) = 0 [pid 7055] close(5) = -1 EBADF (Bad file descriptor) [pid 7055] close(6) = -1 EBADF (Bad file descriptor) [pid 7055] close(7) = -1 EBADF (Bad file descriptor) [pid 7055] close(8) = -1 EBADF (Bad file descriptor) [pid 7055] close(9) = -1 EBADF (Bad file descriptor) [pid 7055] close(10) = -1 EBADF (Bad file descriptor) [pid 7055] close(11) = -1 EBADF (Bad file descriptor) [pid 7055] close(12) = -1 EBADF (Bad file descriptor) [pid 7055] close(13) = -1 EBADF (Bad file descriptor) [pid 7055] close(14) = -1 EBADF (Bad file descriptor) [pid 7055] close(15) = -1 EBADF (Bad file descriptor) [pid 7055] close(16) = -1 EBADF (Bad file descriptor) [pid 7055] close(17) = -1 EBADF (Bad file descriptor) [pid 7055] close(18) = -1 EBADF (Bad file descriptor) [pid 7055] close(19) = -1 EBADF (Bad file descriptor) [pid 7055] close(20) = -1 EBADF (Bad file descriptor) [pid 7055] close(21) = -1 EBADF (Bad file descriptor) [pid 7055] close(22) = -1 EBADF (Bad file descriptor) [pid 7055] close(23) = -1 EBADF (Bad file descriptor) [pid 7055] close(24) = -1 EBADF (Bad file descriptor) [pid 7055] close(25) = -1 EBADF (Bad file descriptor) [pid 7055] close(26) = -1 EBADF (Bad file descriptor) [pid 7055] close(27) = -1 EBADF (Bad file descriptor) [pid 7055] close(28) = -1 EBADF (Bad file descriptor) [pid 7055] close(29) = -1 EBADF (Bad file descriptor) [pid 7055] exit_group(0 [pid 7056] <... futex resumed>) = ? [pid 7055] <... exit_group resumed>) = ? [pid 7056] +++ exited with 0 +++ [pid 7057] +++ exited with 0 +++ [pid 7055] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2028, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5019] umount2("./676", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./676", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./676/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./676/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./676/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./676") = 0 [pid 5019] mkdir("./677", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2031 ./strace-static-x86_64: Process 7058 attached [pid 7058] set_robust_list(0x555556a426a0, 24) = 0 [pid 7058] chdir("./677") = 0 [pid 7058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7058] setpgid(0, 0) = 0 [pid 7058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7058] write(3, "1000", 4) = 4 [pid 7058] close(3) = 0 [pid 7058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7058] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7058] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0} => {parent_tid=[2032]}, 88) = 2032 [pid 7058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7058] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7059 attached [pid 7059] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7059] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 93.647245][ T7056] loop0: detected capacity change from 0 to 1024 [pid 7059] memfd_create("syzkaller", 0) = 3 [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7059] munmap(0x7f15b9a45000, 524288) = 0 [pid 7059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7059] close(3) = 0 [pid 7059] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7059] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7059] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7059] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7059] ioctl(4, LOOP_CLR_FD) = 0 [pid 7059] close(4) = 0 [pid 7059] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... futex resumed>) = 0 [pid 7059] <... futex resumed>) = 1 [pid 7058] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7058] <... futex resumed>) = 0 [pid 7058] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7058] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7060 attached [pid 7060] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7058] <... clone3 resumed> => {parent_tid=[2033]}, 88) = 2033 [pid 7058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7058] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7060] set_robust_list(0x7f15b9ac49a0, 24 [pid 7058] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7060] <... set_robust_list resumed>) = 0 [pid 7060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7060] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7060] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7059] <... mknodat resumed>) = 0 [pid 7059] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7059] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7060] <... mount resumed>) = 0 [pid 7060] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7060] chdir(".") = 0 [pid 7060] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7058] <... futex resumed>) = 0 [pid 7058] close(3) = 0 [pid 7058] close(4) = 0 [pid 7060] futex(0x7f15c1f316d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7058] close(5) = -1 EBADF (Bad file descriptor) [pid 7058] close(6) = -1 EBADF (Bad file descriptor) [pid 7058] close(7) = -1 EBADF (Bad file descriptor) [pid 7058] close(8) = -1 EBADF (Bad file descriptor) [pid 7058] close(9) = -1 EBADF (Bad file descriptor) [pid 7058] close(10) = -1 EBADF (Bad file descriptor) [pid 7058] close(11) = -1 EBADF (Bad file descriptor) [pid 7058] close(12) = -1 EBADF (Bad file descriptor) [pid 7058] close(13) = -1 EBADF (Bad file descriptor) [pid 7058] close(14) = -1 EBADF (Bad file descriptor) [pid 7058] close(15) = -1 EBADF (Bad file descriptor) [pid 7058] close(16) = -1 EBADF (Bad file descriptor) [pid 7058] close(17) = -1 EBADF (Bad file descriptor) [pid 7058] close(18) = -1 EBADF (Bad file descriptor) [pid 7058] close(19) = -1 EBADF (Bad file descriptor) [pid 7058] close(20) = -1 EBADF (Bad file descriptor) [pid 7058] close(21) = -1 EBADF (Bad file descriptor) [pid 7058] close(22) = -1 EBADF (Bad file descriptor) [pid 7058] close(23) = -1 EBADF (Bad file descriptor) [pid 7058] close(24) = -1 EBADF (Bad file descriptor) [pid 7058] close(25) = -1 EBADF (Bad file descriptor) [pid 7058] close(26) = -1 EBADF (Bad file descriptor) [pid 7058] close(27) = -1 EBADF (Bad file descriptor) [pid 7058] close(28) = -1 EBADF (Bad file descriptor) [pid 7058] close(29) = -1 EBADF (Bad file descriptor) [pid 7058] exit_group(0 [pid 7059] <... futex resumed>) = ? [pid 7058] <... exit_group resumed>) = ? [pid 7060] <... futex resumed>) = ? [pid 7059] +++ exited with 0 +++ [pid 7060] +++ exited with 0 +++ [pid 7058] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2031, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./677", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./677", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./677/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./677/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./677/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./677") = 0 [pid 5019] mkdir("./678", 0777) = 0 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a42690) = 2034 ./strace-static-x86_64: Process 7061 attached [ 93.713544][ T7059] loop0: detected capacity change from 0 to 1024 [pid 7061] set_robust_list(0x555556a426a0, 24) = 0 [pid 7061] chdir("./678") = 0 [pid 7061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7061] setpgid(0, 0) = 0 [pid 7061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7061] write(3, "1000", 4) = 4 [pid 7061] close(3) = 0 [pid 7061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7061] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7061] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7061] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7062 attached => {parent_tid=[2035]}, 88) = 2035 [pid 7062] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053 [pid 7061] rt_sigprocmask(SIG_SETMASK, [], [pid 7062] <... rseq resumed>) = 0 [pid 7061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7062] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7062] rt_sigprocmask(SIG_SETMASK, [], [pid 7061] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7062] memfd_create("syzkaller", 0) = 3 [pid 7061] <... futex resumed>) = 0 [pid 7062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7061] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7062] munmap(0x7f15b9a45000, 524288) = 0 [pid 7062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7062] close(3) = 0 [pid 7062] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7062] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7062] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7062] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7062] ioctl(4, LOOP_CLR_FD) = 0 [pid 7062] close(4) = 0 [pid 7062] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7061] <... futex resumed>) = 0 [pid 7062] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7061] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7062] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7061] <... futex resumed>) = 0 [pid 7062] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7061] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7061] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0} => {parent_tid=[2036]}, 88) = 2036 [pid 7061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7061] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7061] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7062] <... mknodat resumed>) = 0 [pid 7062] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7062] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7063 attached [pid 7063] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7063] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7063] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7063] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff") = 0 [pid 7063] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 7063] chdir(".") = 0 [pid 7063] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7061] <... futex resumed>) = 0 [pid 7061] close(3) = 0 [pid 7061] close(4) = 0 [pid 7061] close(5) = -1 EBADF (Bad file descriptor) [pid 7061] close(6) = -1 EBADF (Bad file descriptor) [pid 7061] close(7) = -1 EBADF (Bad file descriptor) [pid 7061] close(8) = -1 EBADF (Bad file descriptor) [pid 7061] close(9) = -1 EBADF (Bad file descriptor) [pid 7061] close(10) = -1 EBADF (Bad file descriptor) [pid 7061] close(11) = -1 EBADF (Bad file descriptor) [pid 7061] close(12) = -1 EBADF (Bad file descriptor) [pid 7061] close(13) = -1 EBADF (Bad file descriptor) [pid 7061] close(14) = -1 EBADF (Bad file descriptor) [pid 7061] close(15) = -1 EBADF (Bad file descriptor) [pid 7061] close(16) = -1 EBADF (Bad file descriptor) [pid 7061] close(17) = -1 EBADF (Bad file descriptor) [pid 7061] close(18) = -1 EBADF (Bad file descriptor) [pid 7061] close(19) = -1 EBADF (Bad file descriptor) [pid 7061] close(20) = -1 EBADF (Bad file descriptor) [pid 7061] close(21) = -1 EBADF (Bad file descriptor) [pid 7061] close(22) = -1 EBADF (Bad file descriptor) [pid 7061] close(23) = -1 EBADF (Bad file descriptor) [pid 7061] close(24) = -1 EBADF (Bad file descriptor) [pid 7061] close(25) = -1 EBADF (Bad file descriptor) [pid 7061] close(26) = -1 EBADF (Bad file descriptor) [pid 7061] close(27) = -1 EBADF (Bad file descriptor) [pid 7061] close(28) = -1 EBADF (Bad file descriptor) [pid 7061] close(29) = -1 EBADF (Bad file descriptor) [pid 7061] exit_group(0 [pid 7062] <... futex resumed>) = ? [pid 7061] <... exit_group resumed>) = ? [pid 7062] +++ exited with 0 +++ [pid 7063] +++ exited with 0 +++ [pid 7061] +++ exited with 0 +++ [pid 5019] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2034, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5019] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5019] umount2("./678", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./678", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 4 entries */, 32768) = 352 [pid 5019] umount2("./678/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5019] umount2("./678/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./678/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] umount2("./678/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] openat(AT_FDCWD, "./678/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5019] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5019] getdents64(4, 0x555556a4b770 /* 2 entries */, 32768) = 48 [pid 5019] getdents64(4, 0x555556a4b770 /* 0 entries */, 32768) = 0 [pid 5019] close(4) = 0 [pid 5019] rmdir("./678/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5019] umount2("./678/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5019] newfstatat(AT_FDCWD, "./678/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5019] unlink("./678/binderfs") = 0 [pid 5019] getdents64(3, 0x555556a43730 /* 0 entries */, 32768) = 0 [pid 5019] close(3) = 0 [pid 5019] rmdir("./678") = 0 [pid 5019] mkdir("./679", 0777) = 0 [ 93.794390][ T7062] loop0: detected capacity change from 0 to 1024 [pid 5019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5019] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5019] close(3) = 0 [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7064 attached [pid 7064] set_robust_list(0x555556a426a0, 24) = 0 [pid 7064] chdir("./679" [pid 5019] <... clone resumed>, child_tidptr=0x555556a42690) = 2037 [pid 7064] <... chdir resumed>) = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7064] setpgid(0, 0) = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7064] write(3, "1000", 4) = 4 [pid 7064] close(3) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7064] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] rt_sigaction(SIGRT_1, {sa_handler=0x7f15c1ecf4d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15c1ec0680}, NULL, 8) = 0 [pid 7064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15c1e45000 [pid 7064] mprotect(0x7f15c1e46000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15c1e65990, parent_tid=0x7f15c1e65990, exit_signal=0, stack=0x7f15c1e45000, stack_size=0x20300, tls=0x7f15c1e656c0}./strace-static-x86_64: Process 7065 attached => {parent_tid=[2038]}, 88) = 2038 [pid 7064] rt_sigprocmask(SIG_SETMASK, [], [pid 7065] rseq(0x7f15c1e65fe0, 0x20, 0, 0x53053053) = 0 [pid 7065] set_robust_list(0x7f15c1e659a0, 24) = 0 [pid 7065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7065] futex(0x7f15c1f316c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7064] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7065] <... futex resumed>) = 0 [pid 7064] futex(0x7f15c1f316cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7065] memfd_create("syzkaller", 0) = 3 [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15b9a45000 [pid 7065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7065] munmap(0x7f15b9a45000, 524288) = 0 [pid 7065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7065] close(3) = 0 [pid 7065] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [pid 7065] mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "hfsplus", 0, "") = 0 [pid 7065] openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3 [pid 7065] chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 7065] ioctl(4, LOOP_CLR_FD) = 0 [pid 7065] close(4) = 0 [pid 7065] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7064] <... futex resumed>) = 0 [pid 7064] futex(0x7f15c1f316c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7f15c1f316dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b9aa4000 [pid 7064] mprotect(0x7f15b9aa5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f15b9ac4990, parent_tid=0x7f15b9ac4990, exit_signal=0, stack=0x7f15b9aa4000, stack_size=0x20300, tls=0x7f15b9ac46c0}./strace-static-x86_64: Process 7066 attached [pid 7066] rseq(0x7f15b9ac4fe0, 0x20, 0, 0x53053053) = 0 [pid 7064] <... clone3 resumed> => {parent_tid=[2039]}, 88) = 2039 [pid 7064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7064] futex(0x7f15c1f316d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7f15c1f316dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7066] set_robust_list(0x7f15b9ac49a0, 24) = 0 [pid 7066] rt_sigprocmask(SIG_SETMASK, [], [pid 7065] mknodat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 7066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7066] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 7066] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_MOVE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\xff\xff\xff\xff" [pid 7065] <... mknodat resumed>) = 0 [pid 7065] futex(0x7f15c1f316cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.879654][ T7065] loop0: detected capacity change from 0 to 1024 [ 93.908210][ T51] ------------[ cut here ]------------ [ 93.913932][ T51] kernel BUG at fs/hfsplus/bnode.c:618! [ 93.919780][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 93.925875][ T51] CPU: 1 PID: 51 Comm: kworker/u4:3 Not tainted 6.5.0-rc1-syzkaller-00276-g20edcec23f92 #0 [ 93.935836][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 93.945895][ T51] Workqueue: writeback wb_workfn (flush-7:0) [ 93.951939][ T51] RIP: 0010:hfsplus_bnode_put.part.0+0x3ab/0x440 [ 93.958354][ T51] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 7e 6e 85 ff 41 8b 54 24 38 31 f6 48 89 ef e8 2f df ff ff e9 a2 fe ff ff e8 e5 82 31 ff <0f> 0b 48 8b 7c 24 08 e8 59 6e 85 ff e9 33 fd ff ff 48 89 df e8 4c [ 93.977964][ T51] RSP: 0018:ffffc90000bc7708 EFLAGS: 00010293 [ 93.984011][ T51] RAX: 0000000000000000 RBX: ffff88802976fe80 RCX: 0000000000000000 [ 93.991962][ T51] RDX: ffff888016ef3b80 RSI: ffffffff8254ebfb RDI: 0000000000000005 [ 94.000001][ T51] RBP: ffff88802976fe00 R08: 0000000000000005 R09: 0000000000000000 [ 94.007953][ T51] R10: 0000000000000000 R11: 000000000000004e R12: ffff88807de18000 [ 94.015897][ T51] R13: 0000000000000000 R14: 0000000006000000 R15: ffff88807b443000 [ 94.023847][ T51] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 94.032756][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.039321][ T51] CR2: 00007f15b9ac4d58 CR3: 000000001ece3000 CR4: 0000000000350ee0 [ 94.047273][ T51] Call Trace: [ 94.050526][ T51] [ 94.053432][ T51] ? die+0x31/0x80 [ 94.057135][ T51] ? do_trap+0x1ab/0x3b0 [ 94.061377][ T51] ? hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.067076][ T51] ? do_error_trap+0x9e/0x160 [ 94.071735][ T51] ? hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.077437][ T51] ? handle_invalid_op+0x2c/0x30 [ 94.082359][ T51] ? hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.088061][ T51] ? exc_invalid_op+0x2d/0x40 [ 94.092726][ T51] ? asm_exc_invalid_op+0x1a/0x20 [ 94.097729][ T51] ? hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.103426][ T51] ? hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.109122][ T51] ? hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.114818][ T51] hfsplus_bnode_put+0x1f/0x30 [ 94.119565][ T51] hfsplus_btree_write+0x3b1/0x480 [ 94.124671][ T51] hfsplus_write_inode+0x302/0x4f0 [ 94.129765][ T51] __writeback_single_inode+0xa81/0xe70 [ 94.135292][ T51] ? __mark_inode_dirty+0xd50/0xd50 [ 94.140469][ T51] ? _raw_spin_unlock+0x28/0x40 [ 94.145301][ T51] ? wbc_attach_and_unlock_inode+0x568/0x910 [ 94.151263][ T51] writeback_sb_inodes+0x599/0x1010 [ 94.156449][ T51] ? sync_inode_metadata+0xe0/0xe0 [ 94.161544][ T51] ? rcu_is_watching+0x12/0xb0 [ 94.166291][ T51] ? queue_io+0x3ed/0x4e0 [ 94.170597][ T51] wb_writeback+0x2a5/0xa90 [ 94.175080][ T51] ? __writeback_inodes_wb+0x2d0/0x2d0 [ 94.180973][ T51] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.186331][ T51] ? mark_held_locks+0x9f/0xe0 [ 94.191075][ T51] wb_workfn+0x29c/0xfd0 [ 94.195298][ T51] ? inode_wait_for_writeback+0x30/0x30 [ 94.200840][ T51] ? lock_sync+0x190/0x190 [ 94.205247][ T51] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.210709][ T51] ? spin_bug+0x1d0/0x1d0 [ 94.215047][ T51] process_one_work+0xaa2/0x16f0 [ 94.219974][ T51] ? lock_sync+0x190/0x190 [ 94.224375][ T51] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 94.229754][ T51] ? spin_bug+0x1d0/0x1d0 [ 94.234071][ T51] worker_thread+0x687/0x1110 [ 94.238734][ T51] ? process_one_work+0x16f0/0x16f0 [ 94.243914][ T51] kthread+0x33a/0x430 [ 94.247961][ T51] ? kthread_complete_and_exit+0x40/0x40 [ 94.253575][ T51] ret_from_fork+0x2c/0x70 [ 94.257972][ T51] ? kthread_complete_and_exit+0x40/0x40 [ 94.263604][ T51] ret_from_fork_asm+0x11/0x20 [ 94.268371][ T51] RIP: 0000:0x0 [ 94.271816][ T51] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 94.279176][ T51] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 94.287582][ T51] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 94.295528][ T51] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.303478][ T51] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.311429][ T51] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 94.319378][ T51] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.327335][ T51] [ 94.330329][ T51] Modules linked in: [ 94.334417][ T51] ---[ end trace 0000000000000000 ]--- [ 94.340086][ T51] RIP: 0010:hfsplus_bnode_put.part.0+0x3ab/0x440 [ 94.346469][ T51] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 7e 6e 85 ff 41 8b 54 24 38 31 f6 48 89 ef e8 2f df ff ff e9 a2 fe ff ff e8 e5 82 31 ff <0f> 0b 48 8b 7c 24 08 e8 59 6e 85 ff e9 33 fd ff ff 48 89 df e8 4c [ 94.366100][ T51] RSP: 0018:ffffc90000bc7708 EFLAGS: 00010293 [ 94.372170][ T51] RAX: 0000000000000000 RBX: ffff88802976fe80 RCX: 0000000000000000 [ 94.380165][ T51] RDX: ffff888016ef3b80 RSI: ffffffff8254ebfb RDI: 0000000000000005 [ 94.388157][ T51] RBP: ffff88802976fe00 R08: 0000000000000005 R09: 0000000000000000 [ 94.396340][ T51] R10: 0000000000000000 R11: 000000000000004e R12: ffff88807de18000 [ 94.404308][ T51] R13: 0000000000000000 R14: 0000000006000000 R15: ffff88807b443000 [ 94.412305][ T51] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 94.421372][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.428065][ T51] CR2: 00007f15b9ac5000 CR3: 000000000c776000 CR4: 0000000000350ef0 [ 94.436084][ T51] Kernel panic - not syncing: Fatal exception [ 94.442822][ T51] Kernel Offset: disabled [ 94.447155][ T51] Rebooting in 86400 seconds..