./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1593612235 <...> 77) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6216 [pid 5076] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(3, [pid 5078] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6214] <... mount resumed>) = 0 [pid 6212] <... mount resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6216 attached [pid 6214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] fstat(3, [pid 5076] getdents64(3, [pid 6214] <... openat resumed>) = 3 [pid 6212] <... openat resumed>) = 3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6214] chdir("./file0" [pid 6212] chdir("./file0" [pid 5078] getdents64(3, [pid 5076] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6214] <... chdir resumed>) = 0 [pid 6212] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6214] ioctl(4, LOOP_CLR_FD [pid 6212] ioctl(4, LOOP_CLR_FD [pid 5078] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./183/binderfs", [pid 6216] chdir("./190" [pid 6215] <... mount resumed>) = 0 [pid 6214] <... ioctl resumed>) = 0 [pid 6212] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6216] <... chdir resumed>) = 0 [pid 6215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6214] close(4 [pid 6212] close(4 [pid 5078] lstat("./187/binderfs", [pid 5076] unlink("./183/binderfs" [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6215] <... openat resumed>) = 3 [pid 6214] <... close resumed>) = 0 [pid 6212] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6216] <... prctl resumed>) = 0 [pid 6215] chdir("./file0" [pid 6214] exit_group(0 [pid 6212] exit_group(0 [pid 5076] <... unlink resumed>) = 0 [ 165.770313][ T6214] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 165.781021][ T6212] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 165.799767][ T6215] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6216] setpgid(0, 0 [pid 6215] <... chdir resumed>) = 0 [pid 6214] <... exit_group resumed>) = ? [pid 6212] <... exit_group resumed>) = ? [pid 5078] unlink("./187/binderfs" [pid 5076] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] <... setpgid resumed>) = 0 [pid 6215] ioctl(4, LOOP_CLR_FD [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6214] +++ exited with 0 +++ [pid 6216] <... openat resumed>) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6216] write(3, "1000", 4 [pid 6212] +++ exited with 0 +++ [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6216] <... write resumed>) = 4 [pid 6215] <... ioctl resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6216] close(3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6212, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6216] <... close resumed>) = 0 [pid 5079] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] <... symlink resumed>) = 0 [pid 6215] close(4 [pid 5079] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6216] memfd_create("syzkaller", 0 [pid 6215] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6216] <... memfd_create resumed>) = 3 [pid 6215] exit_group(0 [pid 5079] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6215] <... exit_group resumed>) = ? [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 6216] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6215] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... umount2 resumed>) = 0 [pid 5079] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./190/binderfs", [pid 5078] lstat("./187/file0", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./186/binderfs", [pid 5076] lstat("./183/file0", [pid 5079] unlink("./190/binderfs" [pid 5078] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5077] unlink("./186/binderfs" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5075] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./186/file0", [pid 5078] fstat(4, [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5075] fstat(3, [pid 5079] <... umount2 resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... openat resumed>) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5076] fstat(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5077] getdents64(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 5079] lstat("./190/file0", [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 5079] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./186/file0" [pid 5079] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./187/file0" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] fstat(4, [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(3 [pid 5079] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] rmdir("./186" [pid 5079] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] mkdir("./187", 0777 [pid 5079] close(4 [pid 5078] close(3 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] lstat("./181/binderfs", [pid 6216] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] rmdir("./190/file0" [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] rmdir("./187" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5075] unlink("./181/binderfs" [pid 5079] getdents64(3, [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5079] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] mkdir("./188", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] rmdir("./183/file0" [pid 5075] <... unlink resumed>) = 0 [pid 5079] rmdir("./190" [pid 5078] <... mkdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6217 [pid 5079] mkdir("./191", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(3, [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6217 attached [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6218 [pid 6217] chdir("./187") = 0 [pid 6217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6217] setpgid(0, 0) = 0 [pid 6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] close(3 [pid 6217] write(3, "1000", 4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... umount2 resumed>) = 0 [pid 6217] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6217] close(3) = 0 [pid 6217] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6218 attached [pid 6217] memfd_create("syzkaller", 0 [pid 5078] close(3 [pid 5076] rmdir("./183" [pid 5075] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] <... memfd_create resumed>) = 3 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6218] chdir("./191" [pid 5078] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] <... chdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] mkdir("./184", 0777 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] lstat("./181/file0", [pid 6218] <... prctl resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6218] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6219 [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6218] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 4 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] fstat(4, [pid 6218] write(3, "1000", 4 [pid 5076] close(3 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6218] <... write resumed>) = 4 [pid 6218] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 6218] <... close resumed>) = 0 [pid 6216] <... write resumed>) = 2097152 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6218] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 6218] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6219 attached [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6220 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6220 attached [pid 6219] chdir("./188" [pid 6218] memfd_create("syzkaller", 0 [pid 6220] chdir("./184" [pid 6219] <... chdir resumed>) = 0 [pid 6218] <... memfd_create resumed>) = 3 [pid 6216] munmap(0x7fa49b4d5000, 2097152 [pid 5075] close(4 [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6216] <... munmap resumed>) = 0 [pid 6219] <... prctl resumed>) = 0 [pid 6219] setpgid(0, 0) = 0 [pid 6220] <... chdir resumed>) = 0 [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6219] <... openat resumed>) = 3 [pid 6219] write(3, "1000", 4 [pid 6218] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] rmdir("./181/file0" [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6219] <... write resumed>) = 4 [pid 6219] close(3) = 0 [pid 6216] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6216] <... openat resumed>) = 4 [pid 6219] memfd_create("syzkaller", 0 [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 6219] <... memfd_create resumed>) = 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6219] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6220] <... prctl resumed>) = 0 [pid 5075] getdents64(3, [pid 6220] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6220] <... setpgid resumed>) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 6220] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 6220] write(3, "1000", 4 [pid 5075] rmdir("./181" [pid 6220] <... write resumed>) = 4 [pid 6220] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 6220] <... close resumed>) = 0 [pid 5075] mkdir("./182", 0777 [pid 6220] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... mkdir resumed>) = 0 [pid 6220] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6220] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 6216] <... ioctl resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6220] <... memfd_create resumed>) = 3 [pid 6216] close(3) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6216] mkdir("./file0", 0777 [pid 5075] close(3 [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6217] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6216] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [ 166.074581][ T6216] loop5: detected capacity change from 0 to 4096 [pid 6216] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6221 ./strace-static-x86_64: Process 6221 attached [pid 6221] chdir("./182") = 0 [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6221] setpgid(0, 0) = 0 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6221] write(3, "1000", 4 [pid 6218] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6221] <... write resumed>) = 4 [pid 6221] close(3) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6221] memfd_create("syzkaller", 0) = 3 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6219] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6217] <... write resumed>) = 2097152 [ 166.120772][ T6216] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6220] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6217] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6216] <... mount resumed>) = 0 [pid 6216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6216] chdir("./file0" [pid 6217] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6216] <... chdir resumed>) = 0 [pid 6217] <... openat resumed>) = 4 [pid 6216] ioctl(4, LOOP_CLR_FD [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 6221] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6219] <... write resumed>) = 2097152 [pid 6218] <... write resumed>) = 2097152 [pid 6216] <... ioctl resumed>) = 0 [pid 6220] <... write resumed>) = 2097152 [pid 6218] munmap(0x7fa49b4d5000, 2097152 [pid 6217] <... ioctl resumed>) = 0 [pid 6216] close(4 [pid 6220] munmap(0x7fa49b4d5000, 2097152 [pid 6217] close(3 [pid 6216] <... close resumed>) = 0 [pid 6218] <... munmap resumed>) = 0 [pid 6217] <... close resumed>) = 0 [pid 6216] exit_group(0 [pid 6217] mkdir("./file0", 0777 [pid 6216] <... exit_group resumed>) = ? [pid 6217] <... mkdir resumed>) = 0 [pid 6216] +++ exited with 0 +++ [pid 6217] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6220] <... munmap resumed>) = 0 [pid 6219] munmap(0x7fa49b4d5000, 2097152 [pid 6218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6221] <... write resumed>) = 2097152 [pid 6220] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6219] <... munmap resumed>) = 0 [pid 6218] <... openat resumed>) = 4 [pid 6221] munmap(0x7fa49b4d5000, 2097152 [pid 6220] <... openat resumed>) = 4 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 5080] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] <... openat resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6219] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... openat resumed>) = 3 [ 166.229701][ T6217] loop2: detected capacity change from 0 to 4096 [ 166.251089][ T6217] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 166.272339][ T6218] loop4: detected capacity change from 0 to 4096 [pid 6221] <... munmap resumed>) = 0 [pid 6220] ioctl(4, LOOP_SET_FD, 3 [pid 6218] <... ioctl resumed>) = 0 [pid 5080] fstat(3, [pid 6221] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6221] <... openat resumed>) = 4 [pid 6218] close(3 [pid 5080] getdents64(3, [pid 6221] ioctl(4, LOOP_SET_FD, 3 [pid 6218] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6221] <... ioctl resumed>) = 0 [pid 6218] mkdir("./file0", 0777 [pid 5080] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] lstat("./190/binderfs", [pid 6221] close(3 [pid 6220] <... ioctl resumed>) = 0 [pid 6219] <... ioctl resumed>) = 0 [pid 6217] <... mount resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6221] <... close resumed>) = 0 [pid 6220] close(3 [pid 6219] close(3 [pid 6217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] unlink("./190/binderfs" [pid 6221] mkdir("./file0", 0777 [pid 6220] <... close resumed>) = 0 [pid 6219] <... close resumed>) = 0 [pid 6217] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 6220] mkdir("./file0", 0777 [pid 6219] mkdir("./file0", 0777 [pid 6217] chdir("./file0" [pid 5080] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] <... mkdir resumed>) = 0 [pid 6217] <... chdir resumed>) = 0 [pid 6219] <... mkdir resumed>) = 0 [pid 6217] ioctl(4, LOOP_CLR_FD) = 0 [pid 6219] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6217] close(4 [pid 6220] <... mkdir resumed>) = 0 [pid 6220] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 166.275525][ T6219] loop3: detected capacity change from 0 to 4096 [ 166.280536][ T6220] loop1: detected capacity change from 0 to 4096 [ 166.294064][ T6221] loop0: detected capacity change from 0 to 4096 [ 166.304308][ T6218] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6221] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6217] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 6217] exit_group(0 [pid 5080] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] +++ exited with 0 +++ [pid 5080] lstat("./190/file0", [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6219] <... mount resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6219] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 6219] chdir("./file0" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5077] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 5077] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5080] close(4 [pid 5077] fstat(3, [pid 5080] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./190/file0" [pid 5077] getdents64(3, [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] getdents64(3, [pid 5077] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(3 [pid 5077] lstat("./187/binderfs", [pid 5080] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] rmdir("./190" [pid 5077] unlink("./187/binderfs" [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 6219] <... chdir resumed>) = 0 [pid 5080] mkdir("./191", 0777 [pid 5077] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] ioctl(4, LOOP_CLR_FD [pid 5080] <... mkdir resumed>) = 0 [pid 6219] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6219] close(4 [pid 5080] <... openat resumed>) = 3 [pid 6221] <... mount resumed>) = 0 [pid 6220] <... mount resumed>) = 0 [pid 6218] <... mount resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6219] <... close resumed>) = 0 [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6221] <... openat resumed>) = 3 [pid 6220] <... openat resumed>) = 3 [pid 6219] exit_group(0 [pid 6218] <... openat resumed>) = 3 [pid 5080] close(3 [pid 6221] chdir("./file0" [ 166.328660][ T6220] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 166.331585][ T6219] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 166.337890][ T6221] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6220] chdir("./file0" [pid 6219] <... exit_group resumed>) = ? [pid 6218] chdir("./file0" [pid 5080] <... close resumed>) = 0 [pid 6221] <... chdir resumed>) = 0 [pid 6220] <... chdir resumed>) = 0 [pid 6218] <... chdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6221] ioctl(4, LOOP_CLR_FD [pid 6220] ioctl(4, LOOP_CLR_FD [pid 6219] +++ exited with 0 +++ [pid 6218] ioctl(4, LOOP_CLR_FD [pid 6221] <... ioctl resumed>) = 0 [pid 6220] <... ioctl resumed>) = 0 [pid 6218] <... ioctl resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6221] close(4 [pid 6220] close(4 [pid 6218] close(4 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6222 [pid 5077] <... umount2 resumed>) = 0 [pid 6221] <... close resumed>) = 0 [pid 6220] <... close resumed>) = 0 [pid 6218] <... close resumed>) = 0 [pid 5077] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6222 attached [pid 6221] exit_group(0 [pid 6220] exit_group(0 [pid 6218] exit_group(0 [pid 5078] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] chdir("./191" [pid 6221] <... exit_group resumed>) = ? [pid 6220] <... exit_group resumed>) = ? [pid 6218] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./187/file0", [pid 6222] <... chdir resumed>) = 0 [pid 6221] +++ exited with 0 +++ [pid 6220] +++ exited with 0 +++ [pid 6218] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... openat resumed>) = 3 [pid 5077] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] <... prctl resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5078] fstat(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6222] setpgid(0, 0 [pid 5079] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] <... setpgid resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5077] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] fstat(4, [pid 5076] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6222] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6222] write(3, "1000", 4 [pid 5079] fstat(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5076] fstat(3, [pid 5075] fstat(3, [pid 6222] <... write resumed>) = 4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] lstat("./188/binderfs", [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6222] close(3 [pid 5079] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] getdents64(4, [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 6222] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] unlink("./188/binderfs" [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6222] symlink("/dev/binderfs", "./binderfs" [pid 5079] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5077] close(4 [pid 5076] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] <... symlink resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] memfd_create("syzkaller", 0 [pid 5079] lstat("./191/binderfs", [pid 5077] rmdir("./187/file0" [pid 5076] lstat("./184/binderfs", [pid 6222] <... memfd_create resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] unlink("./191/binderfs" [pid 5077] getdents64(3, [pid 6222] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... unlink resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5076] unlink("./184/binderfs" [pid 5075] lstat("./182/binderfs", [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./187") = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] mkdir("./188", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./182/binderfs" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6223 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6223 attached [pid 6223] chdir("./188" [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5076] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./184/file0", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6223] <... chdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./182/file0", [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6223] <... prctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6223] setpgid(0, 0 [pid 5078] lstat("./188/file0", [pid 5076] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6223] <... setpgid resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] fstat(4, [pid 6223] <... openat resumed>) = 3 [pid 5078] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6223] write(3, "1000", 4 [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6223] <... write resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6223] close(3 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 6223] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] fstat(4, [pid 6223] symlink("/dev/binderfs", "./binderfs" [pid 5078] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(4 [pid 6223] <... symlink resumed>) = 0 [pid 5079] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6223] memfd_create("syzkaller", 0 [pid 6222] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5078] fstat(4, [pid 5075] getdents64(4, [pid 6223] <... memfd_create resumed>) = 3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] rmdir("./184/file0" [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, [pid 6223] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] lstat("./191/file0", [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 5079] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./182/file0" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5076] rmdir("./184" [pid 5075] <... rmdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./188/file0" [pid 5075] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] fstat(4, [pid 5078] getdents64(3, [pid 5076] mkdir("./185", 0777 [pid 5075] close(3 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] rmdir("./182" [pid 5079] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] rmdir("./188" [pid 5075] mkdir("./183", 0777 [pid 5079] getdents64(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] mkdir("./189", 0777 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] close(4 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5079] rmdir("./191/file0" [pid 5078] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... rmdir resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 5079] getdents64(3, [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... close resumed>) = 0 [pid 6222] <... write resumed>) = 2097152 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6224 attached [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6224 [pid 6224] chdir("./185" [pid 5079] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6225 ./strace-static-x86_64: Process 6225 attached [pid 6224] <... chdir resumed>) = 0 [pid 5079] rmdir("./191"./strace-static-x86_64: Process 6226 attached [pid 6225] chdir("./183" [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6223] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6226 [pid 6222] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6225] <... chdir resumed>) = 0 [pid 6224] <... prctl resumed>) = 0 [pid 5079] mkdir("./192", 0777 [pid 6226] chdir("./189" [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6224] setpgid(0, 0) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 6225] <... prctl resumed>) = 0 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6222] <... openat resumed>) = 4 [pid 6225] setpgid(0, 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6224] <... openat resumed>) = 3 [pid 6226] <... chdir resumed>) = 0 [pid 6225] <... setpgid resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 6226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6224] write(3, "1000", 4 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6226] <... prctl resumed>) = 0 [pid 6225] <... openat resumed>) = 3 [pid 6224] <... write resumed>) = 4 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6226] setpgid(0, 0 [pid 6225] write(3, "1000", 4 [pid 6224] close(3 [pid 5079] close(3 [pid 6226] <... setpgid resumed>) = 0 [pid 6225] <... write resumed>) = 4 [pid 6224] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6225] close(3 [pid 6224] symlink("/dev/binderfs", "./binderfs" [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6226] <... openat resumed>) = 3 [pid 6225] <... close resumed>) = 0 [pid 6224] <... symlink resumed>) = 0 [pid 6225] symlink("/dev/binderfs", "./binderfs" [pid 6226] write(3, "1000", 4 [pid 6225] <... symlink resumed>) = 0 [pid 6224] memfd_create("syzkaller", 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6227 [pid 6226] <... write resumed>) = 4 [pid 6225] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6227 attached [pid 6226] close(3 [pid 6225] <... memfd_create resumed>) = 3 [pid 6224] <... memfd_create resumed>) = 3 [pid 6227] chdir("./192" [pid 6226] <... close resumed>) = 0 [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] <... chdir resumed>) = 0 [pid 6226] symlink("/dev/binderfs", "./binderfs" [pid 6225] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6224] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6226] <... symlink resumed>) = 0 [pid 6227] <... prctl resumed>) = 0 [pid 6227] setpgid(0, 0) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6227] write(3, "1000", 4) = 4 [pid 6227] close(3) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] memfd_create("syzkaller", 0) = 3 [pid 6222] <... ioctl resumed>) = 0 [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6222] close(3 [pid 6227] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6226] memfd_create("syzkaller", 0 [pid 6222] <... close resumed>) = 0 [pid 6226] <... memfd_create resumed>) = 3 [pid 6222] mkdir("./file0", 0777 [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6222] <... mkdir resumed>) = 0 [pid 6226] <... mmap resumed>) = 0x7fa49b4d5000 [ 166.655843][ T6222] loop5: detected capacity change from 0 to 4096 [pid 6222] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6223] <... write resumed>) = 2097152 [pid 6223] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6223] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6223] ioctl(4, LOOP_SET_FD, 3 [pid 6225] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [ 166.716012][ T6222] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6224] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6226] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6222] <... mount resumed>) = 0 [pid 6222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6222] chdir("./file0") = 0 [pid 6222] ioctl(4, LOOP_CLR_FD) = 0 [pid 6222] close(4) = 0 [pid 6222] exit_group(0) = ? [pid 6222] +++ exited with 0 +++ [pid 6223] <... ioctl resumed>) = 0 [pid 6223] close(3) = 0 [pid 6223] mkdir("./file0", 0777) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6222, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6223] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./191/binderfs") = 0 [ 166.767995][ T6223] loop2: detected capacity change from 0 to 4096 [ 166.805635][ T6223] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 5080] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] <... write resumed>) = 2097152 [pid 6224] <... write resumed>) = 2097152 [pid 6226] munmap(0x7fa49b4d5000, 2097152 [pid 6224] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... umount2 resumed>) = 0 [pid 6224] <... munmap resumed>) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6227] <... write resumed>) = 2097152 [pid 6226] <... munmap resumed>) = 0 [pid 6225] <... write resumed>) = 2097152 [pid 6224] <... openat resumed>) = 4 [pid 6223] <... mount resumed>) = 0 [pid 5080] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] munmap(0x7fa49b4d5000, 2097152 [pid 6226] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6224] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] <... openat resumed>) = 4 [pid 6225] munmap(0x7fa49b4d5000, 2097152 [pid 6223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6225] <... munmap resumed>) = 0 [pid 6225] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] lstat("./191/file0", [pid 6226] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6225] <... openat resumed>) = 4 [pid 6225] ioctl(4, LOOP_SET_FD, 3 [pid 6223] <... openat resumed>) = 3 [pid 6227] <... munmap resumed>) = 0 [pid 6226] <... ioctl resumed>) = 0 [pid 6224] <... ioctl resumed>) = 0 [pid 5080] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6224] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] <... openat resumed>) = 4 [pid 6226] close(3 [pid 6224] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] ioctl(4, LOOP_SET_FD, 3 [pid 6226] <... close resumed>) = 0 [pid 6224] mkdir("./file0", 0777 [pid 5080] <... openat resumed>) = 4 [pid 6225] <... ioctl resumed>) = 0 [pid 6224] <... mkdir resumed>) = 0 [pid 6223] chdir("./file0" [pid 6225] close(3 [pid 6223] <... chdir resumed>) = 0 [pid 6225] <... close resumed>) = 0 [pid 6223] ioctl(4, LOOP_CLR_FD [pid 6225] mkdir("./file0", 0777 [pid 6223] <... ioctl resumed>) = 0 [pid 6227] <... ioctl resumed>) = 0 [pid 6226] mkdir("./file0", 0777 [pid 6224] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] fstat(4, [pid 6227] close(3 [pid 6226] <... mkdir resumed>) = 0 [pid 6225] <... mkdir resumed>) = 0 [pid 6223] close(4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6227] <... close resumed>) = 0 [pid 6226] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6223] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 6227] mkdir("./file0", 0777 [pid 6225] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6223] exit_group(0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6227] <... mkdir resumed>) = 0 [pid 5080] getdents64(4, [pid 6227] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 166.883455][ T6224] loop1: detected capacity change from 0 to 4096 [ 166.891241][ T6226] loop3: detected capacity change from 0 to 4096 [ 166.893929][ T6225] loop0: detected capacity change from 0 to 4096 [ 166.902234][ T6227] loop4: detected capacity change from 0 to 4096 [ 166.917306][ T6224] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./191/file0" [pid 6223] <... exit_group resumed>) = ? [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 6223] +++ exited with 0 +++ [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./191" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5080] <... rmdir resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5080] mkdir("./192", 0777 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 6224] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5077] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6224] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6224] chdir("./file0" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6224] <... chdir resumed>) = 0 [pid 5080] close(3 [pid 5077] <... openat resumed>) = 3 [pid 6224] ioctl(4, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 5077] fstat(3, [pid 6226] <... mount resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] getdents64(3, [pid 6226] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6228 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6226] chdir("./file0" [pid 5077] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] <... chdir resumed>) = 0 [pid 6224] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] ioctl(4, LOOP_CLR_FD [pid 6224] close(4 [pid 5077] lstat("./188/binderfs", [pid 6226] <... ioctl resumed>) = 0 [pid 6224] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6228 attached [pid 6226] close(4 [pid 6224] exit_group(0 [pid 5077] unlink("./188/binderfs" [pid 6228] chdir("./192" [pid 6226] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 6226] exit_group(0 [pid 6224] <... exit_group resumed>) = ? [ 166.917306][ T6226] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 166.933649][ T6225] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 166.946132][ T6227] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6226] <... exit_group resumed>) = ? [pid 6228] <... prctl resumed>) = 0 [pid 6226] +++ exited with 0 +++ [pid 6224] +++ exited with 0 +++ [pid 6228] setpgid(0, 0) = 0 [pid 6225] <... mount resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6224, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] write(3, "1000", 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6226, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6228] <... write resumed>) = 4 [pid 6227] <... mount resumed>) = 0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 3 [pid 6228] close(3 [pid 6227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... restart_syscall resumed>) = 0 [pid 5076] fstat(3, [pid 6228] <... close resumed>) = 0 [pid 6227] <... openat resumed>) = 3 [pid 6225] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs" [pid 6227] chdir("./file0" [pid 6225] chdir("./file0" [pid 5076] getdents64(3, [pid 6228] <... symlink resumed>) = 0 [pid 6227] <... chdir resumed>) = 0 [pid 6225] <... chdir resumed>) = 0 [pid 5078] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6228] memfd_create("syzkaller", 0 [pid 6227] ioctl(4, LOOP_CLR_FD [pid 6225] ioctl(4, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... memfd_create resumed>) = 3 [pid 6227] <... ioctl resumed>) = 0 [pid 6225] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] close(4 [pid 6225] close(4 [pid 5078] <... openat resumed>) = 3 [pid 5077] lstat("./188/file0", [pid 5076] lstat("./185/binderfs", [pid 6228] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6227] <... close resumed>) = 0 [pid 6225] <... close resumed>) = 0 [pid 5078] fstat(3, [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6227] exit_group(0 [pid 6225] exit_group(0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./185/binderfs" [pid 6227] <... exit_group resumed>) = ? [pid 5076] <... unlink resumed>) = 0 [pid 6227] +++ exited with 0 +++ [pid 5076] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6225] <... exit_group resumed>) = ? [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=1 /* 0.01 s */} --- [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6225] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5079] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5079] unlink("./192/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(4, [pid 5079] <... unlink resumed>) = 0 [pid 5078] lstat("./189/binderfs", [pid 5075] <... restart_syscall resumed>) = 0 [pid 5079] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./189/binderfs" [pid 5076] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5075] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./188/file0" [pid 5076] close(4 [pid 6228] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./189/file0", [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5079] lstat("./192/file0", [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5076] rmdir("./185/file0" [pid 5075] fstat(3, [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5079] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5076] getdents64(3, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 5077] rmdir("./188" [pid 5076] close(3 [pid 5075] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5079] fstat(4, [pid 5076] rmdir("./185" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] fstat(4, [pid 5076] mkdir("./186", 0777 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] getdents64(4, [pid 5078] getdents64(4, [pid 5077] mkdir("./189", 0777 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(4 [pid 5078] getdents64(4, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] lstat("./183/binderfs", [pid 5079] rmdir("./192/file0" [pid 5078] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] getdents64(3, [pid 5078] rmdir("./189/file0" [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] unlink("./183/binderfs" [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5079] close(3 [pid 5078] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6229 [pid 5075] <... unlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] rmdir("./192" [pid 5078] close(3 [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./193", 0777 [pid 5078] <... close resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] rmdir("./189" [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6230 ./strace-static-x86_64: Process 6229 attached [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6229] chdir("./186" [pid 5079] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6230 attached [pid 6229] <... chdir resumed>) = 0 [pid 6228] <... write resumed>) = 2097152 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] mkdir("./190", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6229] <... prctl resumed>) = 0 [pid 5079] close(3 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] chdir("./189" [pid 6229] setpgid(0, 0 [pid 5079] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] <... chdir resumed>) = 0 [pid 6229] <... setpgid resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 3 [pid 5075] lstat("./183/file0", [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6230] <... prctl resumed>) = 0 [pid 6229] <... openat resumed>) = 3 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6231 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6230] setpgid(0, 0 [pid 6229] write(3, "1000", 4 [pid 5078] close(3 [pid 5075] umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... write resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 6230] <... setpgid resumed>) = 0 [pid 6229] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6229] <... close resumed>) = 0 ./strace-static-x86_64: Process 6231 attached [pid 6229] symlink("/dev/binderfs", "./binderfs" [pid 5075] openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6231] chdir("./193" [pid 6230] <... openat resumed>) = 3 [pid 6229] <... symlink resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6232 [pid 6231] <... chdir resumed>) = 0 [pid 6230] write(3, "1000", 4 [pid 6229] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6232 attached [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6230] <... write resumed>) = 4 [pid 6229] <... memfd_create resumed>) = 3 [pid 5075] fstat(4, [pid 6232] chdir("./190" [pid 6231] <... prctl resumed>) = 0 [pid 6230] close(3 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 6231] setpgid(0, 0 [pid 6230] <... close resumed>) = 0 [pid 6229] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] getdents64(4, [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6231] <... setpgid resumed>) = 0 [pid 6230] symlink("/dev/binderfs", "./binderfs" [pid 6232] <... prctl resumed>) = 0 [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6232] setpgid(0, 0 [pid 6231] <... openat resumed>) = 3 [pid 6232] <... setpgid resumed>) = 0 [pid 6231] write(3, "1000", 4 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6231] <... write resumed>) = 4 [pid 6232] <... openat resumed>) = 3 [pid 6231] close(3 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6232] write(3, "1000", 4 [pid 6231] <... close resumed>) = 0 [pid 6230] <... symlink resumed>) = 0 [pid 6228] munmap(0x7fa49b4d5000, 2097152 [pid 5075] getdents64(4, [pid 6232] <... write resumed>) = 4 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 6230] memfd_create("syzkaller", 0 [pid 6228] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6232] close(3 [pid 6231] <... symlink resumed>) = 0 [pid 6230] <... memfd_create resumed>) = 3 [pid 5075] close(4 [pid 6232] <... close resumed>) = 0 [pid 6231] memfd_create("syzkaller", 0 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 6231] <... memfd_create resumed>) = 3 [pid 6230] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] rmdir("./183/file0" [pid 6232] <... symlink resumed>) = 0 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6228] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6232] memfd_create("syzkaller", 0 [pid 6231] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6228] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 6232] <... memfd_create resumed>) = 3 [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 6232] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./183" [pid 6229] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./184", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6228] <... ioctl resumed>) = 0 [pid 6228] close(3) = 0 [pid 6228] mkdir("./file0", 0777 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6228] <... mkdir resumed>) = 0 [pid 5075] close(3 [pid 6228] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 167.223569][ T6228] loop5: detected capacity change from 0 to 4096 [pid 6230] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6233 ./strace-static-x86_64: Process 6233 attached [pid 6233] chdir("./184") = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6233] setpgid(0, 0) = 0 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6233] write(3, "1000", 4) = 4 [pid 6233] close(3) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6231] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6233] <... symlink resumed>) = 0 [pid 6233] memfd_create("syzkaller", 0) = 3 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 167.278831][ T6228] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6230] <... write resumed>) = 2097152 [pid 6230] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6233] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6230] close(3 [pid 6229] <... write resumed>) = 2097152 [pid 6228] <... mount resumed>) = 0 [pid 6232] <... write resumed>) = 2097152 [pid 6231] <... write resumed>) = 2097152 [pid 6229] munmap(0x7fa49b4d5000, 2097152 [pid 6228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6228] chdir("./file0") = 0 [pid 6228] ioctl(4, LOOP_CLR_FD [pid 6230] <... close resumed>) = 0 [pid 6228] <... ioctl resumed>) = 0 [pid 6231] munmap(0x7fa49b4d5000, 2097152 [pid 6230] mkdir("./file0", 0777 [pid 6229] <... munmap resumed>) = 0 [pid 6228] close(4 [pid 6231] <... munmap resumed>) = 0 [pid 6230] <... mkdir resumed>) = 0 [pid 6229] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6228] <... close resumed>) = 0 [pid 6233] <... write resumed>) = 2097152 [pid 6232] munmap(0x7fa49b4d5000, 2097152 [pid 6231] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6230] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6232] <... munmap resumed>) = 0 [pid 6231] <... openat resumed>) = 4 [pid 6229] <... openat resumed>) = 4 [ 167.371322][ T6230] loop2: detected capacity change from 0 to 4096 [pid 6228] exit_group(0 [pid 6231] ioctl(4, LOOP_SET_FD, 3 [pid 6229] ioctl(4, LOOP_SET_FD, 3 [pid 6228] <... exit_group resumed>) = ? [pid 6233] munmap(0x7fa49b4d5000, 2097152 [pid 6229] <... ioctl resumed>) = 0 [pid 6228] +++ exited with 0 +++ [pid 6232] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6232] <... openat resumed>) = 4 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 5080] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6233] <... munmap resumed>) = 0 [pid 5080] fstat(3, [pid 6233] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6233] <... openat resumed>) = 4 [pid 5080] getdents64(3, [pid 6233] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./192/binderfs") = 0 [pid 5080] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] close(3 [pid 6231] <... ioctl resumed>) = 0 [pid 6229] <... close resumed>) = 0 [pid 6231] close(3 [pid 6229] mkdir("./file0", 0777 [pid 6231] <... close resumed>) = 0 [pid 6229] <... mkdir resumed>) = 0 [pid 6233] <... ioctl resumed>) = 0 [pid 6231] mkdir("./file0", 0777 [pid 5080] <... umount2 resumed>) = 0 [pid 6233] close(3 [pid 6231] <... mkdir resumed>) = 0 [pid 6229] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6233] <... close resumed>) = 0 [ 167.415972][ T6231] loop4: detected capacity change from 0 to 4096 [ 167.422747][ T6229] loop1: detected capacity change from 0 to 4096 [ 167.426159][ T6230] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 167.434487][ T6232] loop3: detected capacity change from 0 to 4096 [ 167.451855][ T6233] loop0: detected capacity change from 0 to 4096 [pid 6231] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6233] mkdir("./file0", 0777 [pid 6232] <... ioctl resumed>) = 0 [pid 6230] <... mount resumed>) = 0 [pid 5080] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6233] <... mkdir resumed>) = 0 [pid 6232] close(3 [pid 6230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6232] <... close resumed>) = 0 [pid 6230] <... openat resumed>) = 3 [pid 5080] lstat("./192/file0", [pid 6232] mkdir("./file0", 0777 [pid 6230] chdir("./file0" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6230] <... chdir resumed>) = 0 [pid 6232] <... mkdir resumed>) = 0 [pid 6232] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6230] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... ioctl resumed>) = 0 [pid 6230] close(4) = 0 [pid 6230] exit_group(0) = ? [pid 6230] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./192/file0") = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6230, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5080] close(3) = 0 [pid 5080] rmdir("./192") = 0 [pid 5080] mkdir("./193", 0777 [pid 5077] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] fstat(3, [pid 5080] close(3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6234 [pid 5077] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./189/binderfs"./strace-static-x86_64: Process 6234 attached ) = 0 [pid 6234] chdir("./193" [pid 5077] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] <... chdir resumed>) = 0 [pid 6229] <... mount resumed>) = 0 [pid 6229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6229] chdir("./file0") = 0 [pid 6229] ioctl(4, LOOP_CLR_FD) = 0 [pid 6229] close(4) = 0 [pid 6229] exit_group(0) = ? [ 167.472569][ T6229] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 167.483527][ T6231] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 167.497357][ T6233] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 167.512213][ T6232] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6231] <... mount resumed>) = 0 [pid 6229] +++ exited with 0 +++ [pid 6234] setpgid(0, 0 [pid 6231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6234] <... setpgid resumed>) = 0 [pid 6231] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6231] chdir("./file0" [pid 5076] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] <... openat resumed>) = 3 [pid 6231] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] write(3, "1000", 4 [pid 6231] ioctl(4, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] <... write resumed>) = 4 [pid 6231] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6234] close(3 [pid 6231] close(4 [pid 5076] fstat(3, [pid 6234] <... close resumed>) = 0 [pid 6231] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6234] symlink("/dev/binderfs", "./binderfs" [pid 6233] <... mount resumed>) = 0 [pid 6231] exit_group(0 [pid 5076] getdents64(3, [pid 6234] <... symlink resumed>) = 0 [pid 6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6231] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6234] memfd_create("syzkaller", 0 [pid 6233] <... openat resumed>) = 3 [pid 6232] <... mount resumed>) = 0 [pid 6231] +++ exited with 0 +++ [pid 5076] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] <... memfd_create resumed>) = 3 [pid 6232] <... openat resumed>) = 3 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5076] lstat("./186/binderfs", [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] chdir("./file0" [pid 5079] <... restart_syscall resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6233] chdir("./file0" [pid 6234] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6233] <... chdir resumed>) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 5077] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./186/binderfs" [pid 6233] ioctl(4, LOOP_CLR_FD [pid 6232] ioctl(4, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] <... ioctl resumed>) = 0 [pid 5077] lstat("./189/file0", [pid 6233] close(4 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6233] <... close resumed>) = 0 [pid 6232] <... ioctl resumed>) = 0 [pid 5079] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 6233] exit_group(0 [pid 6232] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] <... exit_group resumed>) = ? [pid 6232] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6233] +++ exited with 0 +++ [pid 6232] exit_group(0 [pid 5079] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5077] fstat(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5077] getdents64(4, [pid 5075] <... restart_syscall resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] <... exit_group resumed>) = ? [pid 5079] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./189/file0" [pid 5075] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] fstat(3, [pid 5077] getdents64(3, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6232] +++ exited with 0 +++ [pid 5079] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] close(3 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] rmdir("./189" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5075] lstat("./184/binderfs", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] mkdir("./190", 0777 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] lstat("./193/binderfs", [pid 5077] <... mkdir resumed>) = 0 [pid 5075] unlink("./184/binderfs" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5079] unlink("./193/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5075] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] fstat(3, [pid 5077] close(3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6234] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6235 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./190/binderfs", ./strace-static-x86_64: Process 6235 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] lstat("./186/file0", [pid 5078] unlink("./190/binderfs") = 0 [pid 5078] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] chdir("./190" [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./184/file0", [pid 6235] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6235] <... prctl resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6235] setpgid(0, 0 [pid 5076] getdents64(4, [pid 6235] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5078] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./184/file0" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5078] lstat("./190/file0", [pid 5075] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(4 [pid 5075] <... close resumed>) = 0 [pid 6235] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./184" [pid 6235] write(3, "1000", 4 [pid 5078] <... openat resumed>) = 4 [pid 5076] rmdir("./186/file0" [pid 5075] <... rmdir resumed>) = 0 [pid 6235] <... write resumed>) = 4 [pid 5078] fstat(4, [pid 5075] mkdir("./185", 0777 [pid 6235] close(3 [pid 5079] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6235] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 5079] lstat("./193/file0", [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6235] <... symlink resumed>) = 0 [pid 5078] close(4 [pid 5076] close(3 [pid 5075] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] rmdir("./190/file0" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6235] memfd_create("syzkaller", 0 [pid 5079] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6236 [pid 6235] <... memfd_create resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./186" [pid 5078] close(3) = 0 [pid 5079] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./190" [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6235] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] fstat(4, [pid 5078] mkdir("./191", 0777 [pid 5076] mkdir("./187", 0777 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] getdents64(4, [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5079] close(4 [pid 5078] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5079] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] rmdir("./193/file0" [pid 5076] close(3 [pid 5078] <... close resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6237 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] close(3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./193") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6238 [pid 5079] mkdir("./194", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6234] <... write resumed>) = 2097152 [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6234] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6234] <... munmap resumed>) = 0 [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6239 ./strace-static-x86_64: Process 6237 attached ./strace-static-x86_64: Process 6236 attached [pid 6237] chdir("./191" [pid 6236] chdir("./185" [pid 6237] <... chdir resumed>) = 0 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6236] <... chdir resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6237] <... prctl resumed>) = 0 [pid 6234] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6239 attached ./strace-static-x86_64: Process 6238 attached [pid 6237] setpgid(0, 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 6239] chdir("./194" [pid 6238] chdir("./187" [pid 6237] <... setpgid resumed>) = 0 [pid 6236] <... prctl resumed>) = 0 [pid 6239] <... chdir resumed>) = 0 [pid 6238] <... chdir resumed>) = 0 [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6236] setpgid(0, 0 [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6237] <... openat resumed>) = 3 [pid 6236] <... setpgid resumed>) = 0 [pid 6239] <... prctl resumed>) = 0 [pid 6237] write(3, "1000", 4 [pid 6238] <... prctl resumed>) = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6239] setpgid(0, 0 [pid 6238] setpgid(0, 0 [pid 6237] <... write resumed>) = 4 [pid 6239] <... setpgid resumed>) = 0 [pid 6238] <... setpgid resumed>) = 0 [pid 6237] close(3 [pid 6236] <... openat resumed>) = 3 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6237] <... close resumed>) = 0 [pid 6236] write(3, "1000", 4 [pid 6239] <... openat resumed>) = 3 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6237] symlink("/dev/binderfs", "./binderfs" [pid 6236] <... write resumed>) = 4 [pid 6239] write(3, "1000", 4 [pid 6238] <... openat resumed>) = 3 [pid 6237] <... symlink resumed>) = 0 [pid 6236] close(3 [pid 6239] <... write resumed>) = 4 [pid 6238] write(3, "1000", 4 [pid 6237] memfd_create("syzkaller", 0 [pid 6236] <... close resumed>) = 0 [pid 6239] close(3 [pid 6238] <... write resumed>) = 4 [pid 6237] <... memfd_create resumed>) = 3 [pid 6236] symlink("/dev/binderfs", "./binderfs" [pid 6239] <... close resumed>) = 0 [pid 6238] close(3 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6239] symlink("/dev/binderfs", "./binderfs" [pid 6238] <... close resumed>) = 0 [pid 6237] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6236] <... symlink resumed>) = 0 [pid 6234] <... ioctl resumed>) = 0 [pid 6239] <... symlink resumed>) = 0 [pid 6238] symlink("/dev/binderfs", "./binderfs" [pid 6235] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6234] close(3 [pid 6239] memfd_create("syzkaller", 0 [pid 6236] memfd_create("syzkaller", 0 [pid 6234] <... close resumed>) = 0 [pid 6239] <... memfd_create resumed>) = 3 [pid 6238] <... symlink resumed>) = 0 [pid 6236] <... memfd_create resumed>) = 3 [pid 6234] mkdir("./file0", 0777 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6234] <... mkdir resumed>) = 0 [pid 6239] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6234] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6238] memfd_create("syzkaller", 0 [ 167.736669][ T6234] loop5: detected capacity change from 0 to 4096 [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6238] <... memfd_create resumed>) = 3 [pid 6236] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6239] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6235] <... write resumed>) = 2097152 [pid 6235] munmap(0x7fa49b4d5000, 2097152 [pid 6237] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6235] <... munmap resumed>) = 0 [pid 6235] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6234] <... mount resumed>) = 0 [ 167.791748][ T6234] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6235] ioctl(4, LOOP_SET_FD, 3 [pid 6234] chdir("./file0") = 0 [pid 6234] ioctl(4, LOOP_CLR_FD) = 0 [pid 6234] close(4) = 0 [pid 6234] exit_group(0) = ? [pid 6234] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6234, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5080] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6239] <... write resumed>) = 2097152 [pid 6236] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] unlink("./193/binderfs") = 0 [pid 5080] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... ioctl resumed>) = 0 [pid 6235] close(3) = 0 [pid 6235] mkdir("./file0", 0777 [pid 6238] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6235] <... mkdir resumed>) = 0 [pid 6235] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6237] <... write resumed>) = 2097152 [ 167.863728][ T6235] loop2: detected capacity change from 0 to 4096 [pid 6237] munmap(0x7fa49b4d5000, 2097152 [pid 6239] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6239] <... munmap resumed>) = 0 [pid 6237] <... munmap resumed>) = 0 [pid 5080] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6239] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6237] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6239] <... openat resumed>) = 4 [pid 6237] <... openat resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6239] ioctl(4, LOOP_SET_FD, 3 [ 167.911876][ T6235] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6237] ioctl(4, LOOP_SET_FD, 3 [pid 6236] <... write resumed>) = 2097152 [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 6236] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./193/file0") = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./193" [pid 6236] <... munmap resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./194", 0777) = 0 [pid 6239] <... ioctl resumed>) = 0 [pid 6237] <... ioctl resumed>) = 0 [pid 6236] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6235] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6239] close(3 [pid 6237] close(3 [pid 5080] <... openat resumed>) = 3 [pid 6239] <... close resumed>) = 0 [pid 6237] <... close resumed>) = 0 [pid 6236] <... openat resumed>) = 4 [pid 6235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6239] mkdir("./file0", 0777 [pid 6238] <... write resumed>) = 2097152 [pid 6237] mkdir("./file0", 0777 [pid 6236] ioctl(4, LOOP_SET_FD, 3 [pid 6235] <... openat resumed>) = 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6239] <... mkdir resumed>) = 0 [pid 6238] munmap(0x7fa49b4d5000, 2097152 [pid 6237] <... mkdir resumed>) = 0 [pid 5080] close(3 [pid 6239] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6238] <... munmap resumed>) = 0 [ 167.969810][ T6237] loop3: detected capacity change from 0 to 4096 [ 167.977006][ T6239] loop4: detected capacity change from 0 to 4096 [pid 6237] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6236] <... ioctl resumed>) = 0 [pid 6235] chdir("./file0" [pid 5080] <... close resumed>) = 0 [pid 6236] close(3 [pid 6235] <... chdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6236] <... close resumed>) = 0 [pid 6235] ioctl(4, LOOP_CLR_FD [pid 6238] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6235] <... ioctl resumed>) = 0 [pid 6236] mkdir("./file0", 0777 [pid 6238] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6240 attached [pid 6236] <... mkdir resumed>) = 0 [pid 6235] close(4 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6240 [pid 6240] chdir("./194" [pid 6236] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6235] <... close resumed>) = 0 [pid 6238] <... ioctl resumed>) = 0 [pid 6238] close(3) = 0 [pid 6238] mkdir("./file0", 0777) = 0 [pid 6238] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6235] exit_group(0) = ? [pid 6240] <... chdir resumed>) = 0 [pid 6240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6235] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5077] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 168.027073][ T6236] loop0: detected capacity change from 0 to 4096 [ 168.032423][ T6237] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 168.043327][ T6239] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 168.057504][ T6238] loop1: detected capacity change from 0 to 4096 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./190/binderfs", [pid 6240] <... prctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6240] setpgid(0, 0 [pid 5077] unlink("./190/binderfs" [pid 6240] <... setpgid resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 6240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] <... openat resumed>) = 3 [pid 6240] write(3, "1000", 4 [pid 6237] <... mount resumed>) = 0 [pid 6240] <... write resumed>) = 4 [pid 6237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6240] close(3 [pid 6237] <... openat resumed>) = 3 [pid 6240] <... close resumed>) = 0 [pid 6237] chdir("./file0" [pid 6240] symlink("/dev/binderfs", "./binderfs" [pid 6237] <... chdir resumed>) = 0 [pid 6240] <... symlink resumed>) = 0 [pid 6237] ioctl(4, LOOP_CLR_FD [pid 6240] memfd_create("syzkaller", 0) = 3 [pid 6237] <... ioctl resumed>) = 0 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6237] close(4 [pid 6240] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6237] <... close resumed>) = 0 [pid 6237] exit_group(0) = ? [pid 6237] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5077] <... umount2 resumed>) = 0 [pid 5078] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 168.072401][ T6238] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 168.074264][ T6236] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] lstat("./190/file0", [pid 6239] <... mount resumed>) = 0 [pid 5078] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6236] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6239] <... openat resumed>) = 3 [pid 6236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] lstat("./191/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6239] chdir("./file0" [pid 6236] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6239] <... chdir resumed>) = 0 [pid 6236] chdir("./file0" [pid 5078] unlink("./191/binderfs" [pid 5077] <... openat resumed>) = 4 [pid 6239] ioctl(4, LOOP_CLR_FD [pid 6236] <... chdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] fstat(4, [pid 6239] <... ioctl resumed>) = 0 [pid 6236] ioctl(4, LOOP_CLR_FD [pid 5078] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6239] close(4 [pid 6236] <... ioctl resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] getdents64(4, [pid 6239] <... close resumed>) = 0 [pid 6236] close(4 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6239] exit_group(0 [pid 6236] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 6239] <... exit_group resumed>) = ? [pid 6236] exit_group(0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6240] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6239] +++ exited with 0 +++ [pid 5077] close(4 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6239, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./190/file0") = 0 [pid 5079] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(3 [pid 5079] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5079] fstat(3, [pid 5077] rmdir("./190" [pid 6236] <... exit_group resumed>) = ? [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6236] +++ exited with 0 +++ [pid 5079] getdents64(3, [pid 5078] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./191", 0777 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... mkdir resumed>) = 0 [pid 5079] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5075] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./194/binderfs", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] <... mount resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] unlink("./194/binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5075] <... openat resumed>) = 3 [pid 6238] <... openat resumed>) = 3 [pid 5079] <... unlink resumed>) = 0 [pid 5078] lstat("./191/file0", [pid 5077] <... close resumed>) = 0 [pid 5075] fstat(3, [pid 6238] chdir("./file0" [pid 5079] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6241 attached [pid 6240] <... write resumed>) = 2097152 [pid 6238] <... chdir resumed>) = 0 [pid 5078] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 6241] chdir("./191" [pid 6240] munmap(0x7fa49b4d5000, 2097152 [pid 6238] ioctl(4, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6241 [pid 6241] <... chdir resumed>) = 0 [pid 6238] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6240] <... munmap resumed>) = 0 [pid 6238] close(4 [pid 5079] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 6241] <... prctl resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 5078] fstat(4, [pid 5075] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] setpgid(0, 0 [pid 6240] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6238] exit_group(0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] <... setpgid resumed>) = 0 [pid 6240] <... openat resumed>) = 4 [pid 6238] <... exit_group resumed>) = ? [pid 5079] lstat("./194/file0", [pid 5078] getdents64(4, [pid 5075] lstat("./185/binderfs", [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6240] ioctl(4, LOOP_SET_FD, 3 [pid 6241] <... openat resumed>) = 3 [pid 6238] +++ exited with 0 +++ [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6241] write(3, "1000", 4 [pid 5079] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5075] unlink("./185/binderfs" [pid 6241] <... write resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6241] close(3 [pid 5079] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(4 [pid 5075] <... unlink resumed>) = 0 [pid 6241] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5076] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] symlink("/dev/binderfs", "./binderfs" [pid 5079] fstat(4, [pid 5078] rmdir("./191/file0" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] <... symlink resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6241] memfd_create("syzkaller", 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6241] <... memfd_create resumed>) = 3 [pid 5079] getdents64(4, [pid 5078] getdents64(3, [pid 5076] fstat(3, [pid 6241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6241] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] getdents64(4, [pid 5078] close(3 [pid 5076] getdents64(3, [pid 6240] <... ioctl resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = 0 [pid 6240] close(3 [pid 5079] close(4 [pid 5078] rmdir("./191" [pid 5076] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] mkdir("./file0", 0777 [pid 5079] rmdir("./194/file0" [pid 5078] <... rmdir resumed>) = 0 [pid 5076] lstat("./187/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6240] <... mkdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6240] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] unlink("./187/binderfs") = 0 [ 168.244804][ T6240] loop5: detected capacity change from 0 to 4096 [pid 5076] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... rmdir resumed>) = 0 [pid 5078] mkdir("./192", 0777 [pid 5075] lstat("./185/file0", [pid 6241] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] getdents64(3, [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] close(3 [pid 5075] umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./194" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./195", 0777 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... openat resumed>) = 4 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5075] fstat(4, [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(4, [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6242 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] getdents64(4, [pid 5079] close(3 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6243 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./185/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./185") = 0 [pid 5075] mkdir("./186", 0777) = 0 ./strace-static-x86_64: Process 6242 attached [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6243 attached [pid 6242] chdir("./192" [pid 5075] <... openat resumed>) = 3 [pid 6243] chdir("./195" [pid 6242] <... chdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6243] <... chdir resumed>) = 0 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6242] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6243] <... prctl resumed>) = 0 [pid 6242] setpgid(0, 0 [pid 5075] close(3 [pid 6243] setpgid(0, 0 [pid 6242] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6243] <... setpgid resumed>) = 0 [pid 5076] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6243] <... openat resumed>) = 3 [pid 6242] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6243] write(3, "1000", 4 [pid 6242] write(3, "1000", 4 [pid 6243] <... write resumed>) = 4 [pid 6242] <... write resumed>) = 4 [pid 5076] lstat("./187/file0", [pid 6243] close(3 [pid 6242] close(3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6244 [pid 6243] <... close resumed>) = 0 [pid 6242] <... close resumed>) = 0 [pid 5076] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6244 attached [pid 6243] symlink("/dev/binderfs", "./binderfs" [pid 6242] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] chdir("./186" [pid 6243] <... symlink resumed>) = 0 [pid 6242] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6244] <... chdir resumed>) = 0 [pid 6243] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 4 [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6243] <... memfd_create resumed>) = 3 [pid 5076] fstat(4, [pid 6244] <... prctl resumed>) = 0 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6242] memfd_create("syzkaller", 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 168.291213][ T6240] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6244] setpgid(0, 0 [pid 6243] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6242] <... memfd_create resumed>) = 3 [pid 6240] <... mount resumed>) = 0 [pid 5076] getdents64(4, [pid 6244] <... setpgid resumed>) = 0 [pid 6240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6240] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 6244] <... openat resumed>) = 3 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6240] chdir("./file0" [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6244] write(3, "1000", 4 [pid 6242] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6240] <... chdir resumed>) = 0 [pid 5076] close(4 [pid 6244] <... write resumed>) = 4 [pid 6240] ioctl(4, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 6244] close(3 [pid 6240] <... ioctl resumed>) = 0 [pid 5076] rmdir("./187/file0" [pid 6244] <... close resumed>) = 0 [pid 6240] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 6244] symlink("/dev/binderfs", "./binderfs" [pid 6240] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6244] <... symlink resumed>) = 0 [pid 6240] exit_group(0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6244] memfd_create("syzkaller", 0 [pid 6240] <... exit_group resumed>) = ? [pid 5076] close(3 [pid 6244] <... memfd_create resumed>) = 3 [pid 6240] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6240, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] rmdir("./187" [pid 6244] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./188", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5080] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6245 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./194/binderfs"./strace-static-x86_64: Process 6245 attached ) = 0 [pid 6245] chdir("./188" [pid 5080] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] <... chdir resumed>) = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6245] write(3, "1000", 4) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] memfd_create("syzkaller", 0 [pid 6241] <... write resumed>) = 2097152 [pid 6245] <... memfd_create resumed>) = 3 [pid 6244] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6241] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... umount2 resumed>) = 0 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6243] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] lstat("./194/file0", [pid 6241] <... munmap resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6241] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6241] <... openat resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6241] ioctl(4, LOOP_SET_FD, 3 [pid 5080] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./194/file0") = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./194") = 0 [pid 5080] mkdir("./195", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6241] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 6241] close(3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6246 ./strace-static-x86_64: Process 6246 attached [pid 6246] chdir("./195") = 0 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6246] setpgid(0, 0) = 0 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6241] <... close resumed>) = 0 [pid 6241] mkdir("./file0", 0777 [pid 6246] <... openat resumed>) = 3 [pid 6241] <... mkdir resumed>) = 0 [pid 6246] write(3, "1000", 4 [pid 6241] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6246] <... write resumed>) = 4 [pid 6246] close(3) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6246] memfd_create("syzkaller", 0) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 168.464466][ T6241] loop2: detected capacity change from 0 to 4096 [pid 6245] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6242] <... write resumed>) = 2097152 [pid 6242] munmap(0x7fa49b4d5000, 2097152 [pid 6243] <... write resumed>) = 2097152 [pid 6242] <... munmap resumed>) = 0 [pid 6241] <... mount resumed>) = 0 [pid 6243] munmap(0x7fa49b4d5000, 2097152 [pid 6242] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6244] <... write resumed>) = 2097152 [pid 6243] <... munmap resumed>) = 0 [pid 6242] <... openat resumed>) = 4 [pid 6244] munmap(0x7fa49b4d5000, 2097152 [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6241] <... openat resumed>) = 3 [pid 6243] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 168.514239][ T6241] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6243] ioctl(4, LOOP_SET_FD, 3 [pid 6244] <... munmap resumed>) = 0 [pid 6241] chdir("./file0" [pid 6244] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6242] <... ioctl resumed>) = 0 [pid 6241] <... chdir resumed>) = 0 [pid 6244] <... openat resumed>) = 4 [pid 6242] close(3 [pid 6241] ioctl(4, LOOP_CLR_FD [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 6242] <... close resumed>) = 0 [pid 6241] <... ioctl resumed>) = 0 [pid 6241] close(4 [pid 6243] <... ioctl resumed>) = 0 [pid 6241] <... close resumed>) = 0 [pid 6243] close(3) = 0 [pid 6243] mkdir("./file0", 0777) = 0 [pid 6243] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6241] exit_group(0 [pid 6242] mkdir("./file0", 0777 [pid 6241] <... exit_group resumed>) = ? [pid 6242] <... mkdir resumed>) = 0 [pid 6241] +++ exited with 0 +++ [pid 6242] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6246] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 168.569478][ T6242] loop3: detected capacity change from 0 to 4096 [ 168.572607][ T6243] loop4: detected capacity change from 0 to 4096 [ 168.586544][ T6244] loop0: detected capacity change from 0 to 4096 [ 168.607070][ T6242] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6244] <... ioctl resumed>) = 0 [pid 5077] lstat("./191/binderfs", [pid 6244] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6244] <... close resumed>) = 0 [pid 5077] unlink("./191/binderfs" [pid 6245] <... write resumed>) = 2097152 [pid 6244] mkdir("./file0", 0777 [pid 5077] <... unlink resumed>) = 0 [pid 6245] munmap(0x7fa49b4d5000, 2097152 [pid 6244] <... mkdir resumed>) = 0 [pid 5077] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 168.610908][ T6243] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6244] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6246] <... write resumed>) = 2097152 [pid 6245] <... munmap resumed>) = 0 [pid 6246] munmap(0x7fa49b4d5000, 2097152 [pid 6245] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6245] ioctl(4, LOOP_SET_FD, 3 [pid 6242] <... mount resumed>) = 0 [pid 6242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6242] chdir("./file0") = 0 [pid 6242] ioctl(4, LOOP_CLR_FD) = 0 [pid 6242] close(4 [pid 6245] <... ioctl resumed>) = 0 [pid 6242] <... close resumed>) = 0 [pid 6242] exit_group(0 [pid 6245] close(3) = 0 [pid 6242] <... exit_group resumed>) = ? [pid 6246] <... munmap resumed>) = 0 [pid 6245] mkdir("./file0", 0777 [pid 6246] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6242] +++ exited with 0 +++ [pid 6246] <... openat resumed>) = 4 [pid 6245] <... mkdir resumed>) = 0 [pid 6243] <... mount resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = 0 [pid 6243] <... openat resumed>) = 3 [pid 6243] chdir("./file0") = 0 [pid 6243] ioctl(4, LOOP_CLR_FD [pid 5077] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] <... ioctl resumed>) = 0 [pid 6243] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6246] ioctl(4, LOOP_SET_FD, 3 [pid 6245] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6243] <... close resumed>) = 0 [pid 5077] lstat("./191/file0", [pid 6243] exit_group(0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6243] <... exit_group resumed>) = ? [pid 5077] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 168.656004][ T6244] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 168.672091][ T6245] loop1: detected capacity change from 0 to 4096 [pid 5077] close(4) = 0 [pid 5077] rmdir("./191/file0") = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./191") = 0 [pid 5077] mkdir("./192", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6247 [pid 5078] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 6246] <... ioctl resumed>) = 0 [pid 5079] fstat(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6246] close(3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, ./strace-static-x86_64: Process 6247 attached [pid 6246] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6247] chdir("./192" [pid 6246] mkdir("./file0", 0777 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6247] <... chdir resumed>) = 0 [pid 6246] <... mkdir resumed>) = 0 [pid 5079] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 168.709494][ T6246] loop5: detected capacity change from 0 to 4096 [ 168.719122][ T6245] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6246] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6244] <... mount resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./192/binderfs", [pid 6247] <... prctl resumed>) = 0 [pid 6244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] lstat("./195/binderfs", [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6247] setpgid(0, 0 [pid 6244] <... openat resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6247] <... setpgid resumed>) = 0 [pid 6244] chdir("./file0" [pid 5079] unlink("./195/binderfs" [pid 5078] unlink("./192/binderfs" [pid 6247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6244] <... chdir resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 6247] <... openat resumed>) = 3 [pid 6244] ioctl(4, LOOP_CLR_FD [pid 5079] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 6247] write(3, "1000", 4 [pid 6244] <... ioctl resumed>) = 0 [pid 6247] <... write resumed>) = 4 [pid 6244] close(4 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6247] close(3 [pid 6244] <... close resumed>) = 0 [pid 6247] <... close resumed>) = 0 [pid 6247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6247] memfd_create("syzkaller", 0) = 3 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6245] <... mount resumed>) = 0 [pid 6244] exit_group(0 [pid 5079] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 6245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6244] <... exit_group resumed>) = ? [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6245] <... openat resumed>) = 3 [pid 6245] chdir("./file0" [pid 6244] +++ exited with 0 +++ [pid 5079] lstat("./195/file0", [pid 6245] <... chdir resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6245] ioctl(4, LOOP_CLR_FD [pid 5079] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6245] close(4 [pid 5079] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6245] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] lstat("./192/file0", [pid 5075] <... restart_syscall resumed>) = 0 [pid 6245] exit_group(0 [pid 5079] fstat(4, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 168.760153][ T6246] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6247] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6245] <... exit_group resumed>) = ? [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] +++ exited with 0 +++ [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(4, [pid 5078] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] fstat(4, [pid 5075] <... openat resumed>) = 3 [pid 5079] close(4 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] fstat(3, [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] rmdir("./195/file0" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5075] lstat("./186/binderfs", [pid 5079] <... close resumed>) = 0 [pid 5078] rmdir("./192/file0" [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] rmdir("./195" [pid 5078] <... rmdir resumed>) = 0 [pid 5075] unlink("./186/binderfs" [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 5079] mkdir("./196", 0777 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 6247] <... write resumed>) = 2097152 [pid 6246] <... mount resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] rmdir("./192" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] <... umount2 resumed>) = 0 [pid 6247] munmap(0x7fa49b4d5000, 2097152 [pid 6246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6247] <... munmap resumed>) = 0 [pid 6246] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6246] chdir("./file0" [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] mkdir("./193", 0777 [pid 6246] <... chdir resumed>) = 0 [pid 5079] close(3 [pid 6247] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6246] ioctl(4, LOOP_CLR_FD [pid 5079] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6247] <... openat resumed>) = 4 [pid 6246] <... ioctl resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] ioctl(4, LOOP_SET_FD, 3 [pid 6246] close(4 [pid 5076] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6246] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6246] exit_group(0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6248 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] fstat(3, [pid 5075] lstat("./186/file0", [pid 6246] <... exit_group resumed>) = ? [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6246] +++ exited with 0 +++ [pid 5078] close(3 [pid 5076] getdents64(3, [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... restart_syscall resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] lstat("./188/binderfs", [pid 5075] umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6248 attached [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] chdir("./196" [pid 5076] unlink("./188/binderfs" [pid 6248] <... chdir resumed>) = 0 [pid 5080] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6249 [pid 5076] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] <... prctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 6248] setpgid(0, 0 [pid 5080] <... openat resumed>) = 3 [pid 5075] fstat(4, ./strace-static-x86_64: Process 6249 attached [pid 6248] <... setpgid resumed>) = 0 [pid 6247] <... ioctl resumed>) = 0 [pid 5080] fstat(3, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6249] chdir("./193" [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6247] close(3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 6249] <... chdir resumed>) = 0 [pid 6248] <... openat resumed>) = 3 [pid 6247] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6248] write(3, "1000", 4 [pid 6247] mkdir("./file0", 0777 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6249] <... prctl resumed>) = 0 [pid 6248] <... write resumed>) = 4 [pid 5080] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6249] setpgid(0, 0 [pid 6248] close(3 [pid 6247] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6249] <... setpgid resumed>) = 0 [pid 6248] <... close resumed>) = 0 [pid 6247] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] lstat("./195/binderfs", [pid 5076] lstat("./188/file0", [pid 5075] close(4 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6248] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... close resumed>) = 0 [pid 6248] <... symlink resumed>) = 0 [pid 5076] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./186/file0" [pid 6248] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 6248] <... memfd_create resumed>) = 3 [ 168.907520][ T6247] loop2: detected capacity change from 0 to 4096 [pid 5076] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6248] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] fstat(4, [pid 5075] close(3 [pid 6249] <... openat resumed>) = 3 [pid 6247] <... mount resumed>) = 0 [pid 5080] unlink("./195/binderfs" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... close resumed>) = 0 [pid 6249] write(3, "1000", 4 [pid 6247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... unlink resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] rmdir("./186" [pid 6249] <... write resumed>) = 4 [pid 6247] <... openat resumed>) = 3 [pid 5080] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6249] close(3 [pid 6248] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6247] chdir("./file0" [pid 5080] <... umount2 resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 6249] <... close resumed>) = 0 [pid 6247] <... chdir resumed>) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs" [pid 6247] ioctl(4, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] mkdir("./187", 0777 [pid 6249] <... symlink resumed>) = 0 [pid 6247] <... ioctl resumed>) = 0 [pid 5076] close(4 [pid 6249] memfd_create("syzkaller", 0 [pid 6247] close(4 [pid 5075] <... mkdir resumed>) = 0 [pid 6249] <... memfd_create resumed>) = 3 [pid 6247] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6247] exit_group(0 [pid 6249] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6247] <... exit_group resumed>) = ? [pid 6247] +++ exited with 0 +++ [pid 5076] rmdir("./188/file0" [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6247, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5077] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 168.968597][ T6247] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 5076] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(3, [pid 5076] close(3 [pid 5075] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] lstat("./195/file0", [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] rmdir("./188" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./192/binderfs", [pid 5076] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] unlink("./192/binderfs" [pid 5076] mkdir("./189", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6250 [pid 5080] <... openat resumed>) = 4 [pid 5077] <... unlink resumed>) = 0 [pid 5077] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5076] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6250 attached [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6250] chdir("./187" [pid 5080] getdents64(4, [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5080] close(4 [pid 5076] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6250] <... chdir resumed>) = 0 [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6250] setpgid(0, 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6251 [pid 5080] rmdir("./195/file0" [pid 6250] <... setpgid resumed>) = 0 [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... rmdir resumed>) = 0 [pid 6250] <... openat resumed>) = 3 [pid 6250] write(3, "1000", 4 [pid 5080] getdents64(3, [pid 6250] <... write resumed>) = 4 ./strace-static-x86_64: Process 6251 attached [pid 6250] close(3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6251] chdir("./189" [pid 6250] <... close resumed>) = 0 [pid 5080] close(3 [pid 6251] <... chdir resumed>) = 0 [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6250] <... symlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 6251] <... prctl resumed>) = 0 [pid 6250] memfd_create("syzkaller", 0 [pid 5080] rmdir("./195" [pid 6251] setpgid(0, 0 [pid 6250] <... memfd_create resumed>) = 3 [pid 6251] <... setpgid resumed>) = 0 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6250] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... rmdir resumed>) = 0 [pid 6251] <... openat resumed>) = 3 [pid 6248] <... write resumed>) = 2097152 [pid 5080] mkdir("./196", 0777 [pid 6251] write(3, "1000", 4 [pid 6249] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6248] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6251] <... write resumed>) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] memfd_create("syzkaller", 0 [pid 6248] <... munmap resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6251] <... memfd_create resumed>) = 3 [pid 5077] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6251] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6248] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... openat resumed>) = 3 [pid 5077] lstat("./192/file0", [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6248] <... openat resumed>) = 4 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] <... ioctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6252 [pid 5077] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, ./strace-static-x86_64: Process 6252 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 6252] chdir("./196" [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6252] <... chdir resumed>) = 0 [pid 5077] getdents64(4, [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6248] close(3 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6252] <... prctl resumed>) = 0 [pid 6248] <... close resumed>) = 0 [pid 5077] close(4 [pid 6252] setpgid(0, 0 [pid 6248] mkdir("./file0", 0777 [pid 5077] <... close resumed>) = 0 [pid 6252] <... setpgid resumed>) = 0 [pid 5077] rmdir("./192/file0" [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6248] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6252] <... openat resumed>) = 3 [pid 6248] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5077] getdents64(3, [pid 6252] write(3, "1000", 4 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./192") = 0 [pid 5077] mkdir("./193", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 6252] <... write resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6252] close(3) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6253 [pid 6252] symlink("/dev/binderfs", "./binderfs" [pid 6249] <... write resumed>) = 2097152 [pid 6252] <... symlink resumed>) = 0 [pid 6252] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6253 attached ) = 3 [pid 6253] chdir("./193" [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6253] <... chdir resumed>) = 0 [pid 6252] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6250] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6253] write(3, "1000", 4) = 4 [pid 6253] close(3) = 0 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6253] memfd_create("syzkaller", 0) = 3 [ 169.113791][ T6248] loop4: detected capacity change from 0 to 4096 [ 169.145965][ T6248] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6252] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6251] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6249] munmap(0x7fa49b4d5000, 2097152 [pid 6248] <... mount resumed>) = 0 [pid 6253] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6249] <... munmap resumed>) = 0 [pid 6248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6249] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6248] <... openat resumed>) = 3 [pid 6248] chdir("./file0" [pid 6249] <... openat resumed>) = 4 [pid 6248] <... chdir resumed>) = 0 [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6248] ioctl(4, LOOP_CLR_FD) = 0 [pid 6248] close(4) = 0 [pid 6248] exit_group(0) = ? [pid 6253] <... write resumed>) = 2097152 [pid 6253] munmap(0x7fa49b4d5000, 2097152 [pid 6248] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5079] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./196/binderfs") = 0 [pid 5079] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] <... munmap resumed>) = 0 [pid 6253] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6250] <... write resumed>) = 2097152 [pid 6250] munmap(0x7fa49b4d5000, 2097152 [pid 6253] <... openat resumed>) = 4 [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 6250] <... munmap resumed>) = 0 [pid 6249] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6249] close(3 [pid 6250] <... openat resumed>) = 4 [pid 6249] <... close resumed>) = 0 [pid 5079] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6251] <... write resumed>) = 2097152 [pid 6250] ioctl(4, LOOP_SET_FD, 3 [pid 6249] mkdir("./file0", 0777 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6252] <... write resumed>) = 2097152 [pid 6251] munmap(0x7fa49b4d5000, 2097152 [pid 6249] <... mkdir resumed>) = 0 [pid 6249] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6253] <... ioctl resumed>) = 0 [ 169.251564][ T6249] loop3: detected capacity change from 0 to 4096 [ 169.276673][ T6253] loop2: detected capacity change from 0 to 4096 [pid 6253] close(3) = 0 [pid 6253] mkdir("./file0", 0777 [pid 5079] lstat("./196/file0", [pid 6253] <... mkdir resumed>) = 0 [pid 6253] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6251] <... munmap resumed>) = 0 [pid 6252] munmap(0x7fa49b4d5000, 2097152 [pid 6251] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6250] <... ioctl resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6252] <... munmap resumed>) = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6251] <... openat resumed>) = 4 [pid 6250] close(3 [pid 5079] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] <... mount resumed>) = 0 [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6249] chdir("./file0") = 0 [pid 6252] <... openat resumed>) = 4 [ 169.296635][ T6250] loop0: detected capacity change from 0 to 4096 [ 169.303203][ T6249] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 169.325853][ T6253] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 169.342311][ T6251] loop1: detected capacity change from 0 to 4096 [pid 6251] ioctl(4, LOOP_SET_FD, 3 [pid 6250] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] <... mount resumed>) = 0 [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 6250] mkdir("./file0", 0777 [pid 6249] ioctl(4, LOOP_CLR_FD [pid 5079] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6250] <... mkdir resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 6253] <... openat resumed>) = 3 [pid 6250] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] fstat(4, [pid 6253] chdir("./file0" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6253] <... chdir resumed>) = 0 [pid 5079] getdents64(4, [pid 6253] ioctl(4, LOOP_CLR_FD [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6253] <... ioctl resumed>) = 0 [pid 5079] getdents64(4, [pid 6253] close(4 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6253] <... close resumed>) = 0 [pid 5079] close(4 [pid 6253] exit_group(0 [pid 5079] <... close resumed>) = 0 [pid 6253] <... exit_group resumed>) = ? [pid 5079] rmdir("./196/file0" [pid 6253] +++ exited with 0 +++ [pid 5079] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5079] close(3 [pid 5077] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... close resumed>) = 0 [pid 6251] <... ioctl resumed>) = 0 [pid 5079] rmdir("./196" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6251] close(3 [pid 5079] mkdir("./197", 0777 [pid 5077] <... openat resumed>) = 3 [pid 6251] <... close resumed>) = 0 [pid 6249] <... ioctl resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] fstat(3, [pid 6251] mkdir("./file0", 0777 [pid 6249] close(4 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... openat resumed>) = 3 [pid 6251] <... mkdir resumed>) = 0 [pid 6249] <... close resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(3, [pid 6251] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6249] exit_group(0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6249] <... exit_group resumed>) = ? [pid 5079] close(3 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6254 [pid 5077] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./193/binderfs", ./strace-static-x86_64: Process 6254 attached [pid 6249] +++ exited with 0 +++ [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6254] chdir("./197" [pid 5077] unlink("./193/binderfs" [pid 6254] <... chdir resumed>) = 0 [pid 6250] <... mount resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5077] <... unlink resumed>) = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] <... prctl resumed>) = 0 [pid 6250] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] setpgid(0, 0 [pid 6250] chdir("./file0" [pid 5078] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6254] <... setpgid resumed>) = 0 [pid 6250] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6250] ioctl(4, LOOP_CLR_FD [pid 5078] fstat(3, [pid 6254] <... openat resumed>) = 3 [pid 6250] <... ioctl resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6254] write(3, "1000", 4 [pid 6250] close(4 [pid 5078] getdents64(3, [pid 6254] <... write resumed>) = 4 [pid 6250] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6254] close(3 [pid 6250] exit_group(0 [pid 5078] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] <... close resumed>) = 0 [pid 6250] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] symlink("/dev/binderfs", "./binderfs" [pid 6250] +++ exited with 0 +++ [pid 5078] lstat("./193/binderfs", [pid 6254] <... symlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6254] memfd_create("syzkaller", 0 [pid 5078] unlink("./193/binderfs" [pid 6254] <... memfd_create resumed>) = 3 [pid 5078] <... unlink resumed>) = 0 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6252] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6252] close(3 [pid 6251] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6252] <... close resumed>) = 0 [pid 6251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6252] mkdir("./file0", 0777 [pid 6251] <... openat resumed>) = 3 [ 169.348758][ T6250] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 169.348932][ T6252] loop5: detected capacity change from 0 to 4096 [ 169.377631][ T6251] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] lstat("./193/file0", [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 6252] <... mkdir resumed>) = 0 [pid 6251] chdir("./file0" [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6252] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6251] <... chdir resumed>) = 0 [pid 5077] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6251] ioctl(4, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./187/binderfs", [pid 6251] <... ioctl resumed>) = 0 [pid 5078] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./187/binderfs" [pid 5078] lstat("./193/file0", [pid 5075] <... unlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 6251] close(4 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 6251] <... close resumed>) = 0 [pid 5078] rmdir("./193/file0" [pid 5077] fstat(4, [pid 6251] exit_group(0 [pid 5078] <... rmdir resumed>) = 0 [pid 6251] <... exit_group resumed>) = ? [pid 5078] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 6251] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 5078] rmdir("./193" [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=2 /* 0.02 s */} --- [pid 5078] <... rmdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5078] mkdir("./194", 0777 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] close(4 [pid 5076] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5077] rmdir("./193/file0" [pid 5076] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6252] <... mount resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... rmdir resumed>) = 0 [pid 5076] fstat(3, [pid 6252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] close(3 [pid 5077] getdents64(3, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./187/file0", [pid 6252] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 6252] chdir("./file0" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6252] <... chdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6252] ioctl(4, LOOP_CLR_FD [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6255 [pid 5077] rmdir("./193" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6252] <... ioctl resumed>) = 0 [pid 5076] lstat("./189/binderfs", [pid 5075] openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6252] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6252] <... close resumed>) = 0 [pid 5077] mkdir("./194", 0777 [pid 5076] unlink("./189/binderfs" [pid 5075] fstat(4, [pid 6252] exit_group(0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6252] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 169.445569][ T6252] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 5076] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6254] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6252] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6255 attached [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6252, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5077] close(3 [pid 5075] close(4 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] rmdir("./187/file0") = 0 [pid 5080] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6256 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 5076] <... umount2 resumed>) = 0 [pid 5075] rmdir("./187" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6256 attached [pid 6255] chdir("./194" [pid 5080] getdents64(3, [pid 5075] mkdir("./188", 0777 [pid 6256] chdir("./194" [pid 6255] <... chdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... mkdir resumed>) = 0 [pid 6256] <... chdir resumed>) = 0 [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6255] <... prctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6256] <... prctl resumed>) = 0 [pid 6255] setpgid(0, 0 [pid 5080] lstat("./196/binderfs", [pid 5076] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6256] setpgid(0, 0 [pid 6255] <... setpgid resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6256] <... setpgid resumed>) = 0 [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] unlink("./196/binderfs" [pid 5076] lstat("./189/file0", [pid 5075] close(3 [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... close resumed>) = 0 [pid 6256] <... openat resumed>) = 3 [pid 6255] write(3, "1000", 4 [pid 5080] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6256] write(3, "1000", 4 [pid 6255] <... write resumed>) = 4 [pid 6254] <... write resumed>) = 2097152 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] <... write resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6257 [pid 6256] close(3 [pid 6255] close(3 [pid 5076] <... openat resumed>) = 4 [pid 6256] <... close resumed>) = 0 [pid 6255] <... close resumed>) = 0 [pid 5076] fstat(4, [pid 6256] symlink("/dev/binderfs", "./binderfs" [pid 6255] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6256] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 6256] memfd_create("syzkaller", 0 [pid 6255] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6256] <... memfd_create resumed>) = 3 [pid 6254] munmap(0x7fa49b4d5000, 2097152 [pid 5076] getdents64(4, [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6256] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6255] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 6254] <... munmap resumed>) = 0 [pid 5080] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./189/file0" [pid 6255] <... memfd_create resumed>) = 3 [pid 5080] lstat("./196/file0", [pid 5076] <... rmdir resumed>) = 0 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 6255] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5080] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] rmdir("./189" [pid 5080] fstat(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] mkdir("./190", 0777 [pid 5080] getdents64(4, [pid 5076] <... mkdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5080] close(4 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... close resumed>) = 0 [pid 5076] close(3 [pid 5080] rmdir("./196/file0" [pid 5076] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6257 attached [pid 6254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6258 [pid 6257] chdir("./188" [pid 6254] <... openat resumed>) = 4 [pid 5080] close(3) = 0 [pid 6257] <... chdir resumed>) = 0 [pid 6254] ioctl(4, LOOP_SET_FD, 3 [pid 5080] rmdir("./196" [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./197", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6258 attached ) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 6258] chdir("./190" [pid 5080] <... close resumed>) = 0 [pid 6258] <... chdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6257] <... prctl resumed>) = 0 [pid 6254] <... ioctl resumed>) = 0 [pid 6258] <... prctl resumed>) = 0 [pid 6257] setpgid(0, 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6259 [pid 6254] close(3 [pid 6258] setpgid(0, 0 [pid 6257] <... setpgid resumed>) = 0 [pid 6258] <... setpgid resumed>) = 0 [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6254] <... close resumed>) = 0 [pid 6258] <... openat resumed>) = 3 [pid 6258] write(3, "1000", 4 [pid 6257] <... openat resumed>) = 3 [pid 6254] mkdir("./file0", 0777 [pid 6258] <... write resumed>) = 4 [pid 6257] write(3, "1000", 4./strace-static-x86_64: Process 6259 attached [pid 6258] close(3 [pid 6257] <... write resumed>) = 4 [pid 6259] chdir("./197" [pid 6258] <... close resumed>) = 0 [pid 6257] close(3 [pid 6254] <... mkdir resumed>) = 0 [pid 6259] <... chdir resumed>) = 0 [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 6257] <... close resumed>) = 0 [pid 6254] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6258] <... symlink resumed>) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 6259] <... prctl resumed>) = 0 [pid 6258] memfd_create("syzkaller", 0 [pid 6259] setpgid(0, 0 [pid 6258] <... memfd_create resumed>) = 3 [pid 6259] <... setpgid resumed>) = 0 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6258] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6259] <... openat resumed>) = 3 [pid 6257] <... symlink resumed>) = 0 [pid 6256] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6255] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6259] write(3, "1000", 4 [pid 6257] memfd_create("syzkaller", 0 [pid 6259] <... write resumed>) = 4 [pid 6259] close(3 [pid 6257] <... memfd_create resumed>) = 3 [pid 6259] <... close resumed>) = 0 [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6259] memfd_create("syzkaller", 0) = 3 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 169.608608][ T6254] loop4: detected capacity change from 0 to 4096 [ 169.632329][ T6254] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6256] <... write resumed>) = 2097152 [pid 6258] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6256] munmap(0x7fa49b4d5000, 2097152 [pid 6254] <... mount resumed>) = 0 [pid 6254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6254] chdir("./file0" [pid 6259] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6256] <... munmap resumed>) = 0 [pid 6255] <... write resumed>) = 2097152 [pid 6254] <... chdir resumed>) = 0 [pid 6254] ioctl(4, LOOP_CLR_FD [pid 6256] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6254] <... ioctl resumed>) = 0 [pid 6254] close(4) = 0 [pid 6254] exit_group(0 [pid 6256] ioctl(4, LOOP_SET_FD, 3 [pid 6254] <... exit_group resumed>) = ? [pid 6254] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6257] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6255] munmap(0x7fa49b4d5000, 2097152 [pid 5079] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] <... munmap resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6255] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./197/binderfs") = 0 [pid 5079] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] <... ioctl resumed>) = 0 [pid 6256] close(3) = 0 [pid 6256] mkdir("./file0", 0777) = 0 [pid 6255] <... openat resumed>) = 4 [ 169.747264][ T6256] loop2: detected capacity change from 0 to 4096 [pid 6256] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 6258] <... write resumed>) = 2097152 [pid 6255] <... ioctl resumed>) = 0 [pid 6255] close(3) = 0 [pid 6255] mkdir("./file0", 0777) = 0 [pid 6259] <... write resumed>) = 2097152 [pid 6255] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6258] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6258] ioctl(4, LOOP_SET_FD, 3 [pid 6259] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 169.791556][ T6256] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 169.801590][ T6255] loop3: detected capacity change from 0 to 4096 [ 169.821434][ T6255] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 169.829775][ T6258] loop1: detected capacity change from 0 to 4096 [pid 6259] ioctl(4, LOOP_SET_FD, 3 [pid 6257] <... write resumed>) = 2097152 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6258] <... ioctl resumed>) = 0 [pid 6258] close(3) = 0 [pid 5079] lstat("./197/file0", [pid 6258] mkdir("./file0", 0777) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6258] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6257] munmap(0x7fa49b4d5000, 2097152 [pid 6256] <... mount resumed>) = 0 [pid 5079] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] chdir("./file0") = 0 [pid 5079] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6256] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] <... openat resumed>) = 4 [pid 6259] <... ioctl resumed>) = 0 [pid 6256] close(4 [pid 6259] close(3 [pid 6256] <... close resumed>) = 0 [pid 5079] fstat(4, [pid 6259] <... close resumed>) = 0 [pid 6256] exit_group(0 [pid 6259] mkdir("./file0", 0777 [pid 6256] <... exit_group resumed>) = ? [pid 6259] <... mkdir resumed>) = 0 [pid 6256] +++ exited with 0 +++ [ 169.850401][ T6259] loop5: detected capacity change from 0 to 4096 [ 169.880392][ T6258] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6259] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6257] <... munmap resumed>) = 0 [pid 6255] <... mount resumed>) = 0 [pid 6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6255] <... openat resumed>) = 3 [pid 5079] getdents64(4, [pid 6257] <... openat resumed>) = 4 [pid 6255] chdir("./file0" [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6257] ioctl(4, LOOP_SET_FD, 3 [pid 6255] <... chdir resumed>) = 0 [pid 5079] close(4 [pid 5077] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] ioctl(4, LOOP_CLR_FD [pid 5079] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./197/file0" [pid 5077] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... rmdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5079] getdents64(3, [pid 5077] fstat(3, [pid 6255] <... ioctl resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6255] close(4 [pid 5079] close(3) = 0 [pid 5077] getdents64(3, [pid 6255] <... close resumed>) = 0 [pid 5079] rmdir("./197" [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] exit_group(0 [pid 5079] mkdir("./198", 0777 [pid 6255] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./194/binderfs", [pid 5079] <... mkdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] unlink("./194/binderfs" [pid 5079] <... openat resumed>) = 3 [pid 5077] <... unlink resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6255] +++ exited with 0 +++ [pid 5079] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] lstat("./194/file0", [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6260 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6260 attached [pid 6258] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] fstat(4, [pid 6260] chdir("./198" [pid 6258] chdir("./file0" [pid 5078] fstat(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6260] <... chdir resumed>) = 0 [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... ioctl resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6258] ioctl(4, LOOP_CLR_FD [pid 6257] close(3 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6260] <... prctl resumed>) = 0 [pid 6258] <... ioctl resumed>) = 0 [pid 6257] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] getdents64(4, [pid 6260] setpgid(0, 0 [pid 6258] close(4 [ 169.901692][ T6259] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 169.916646][ T6257] loop0: detected capacity change from 0 to 4096 [pid 6257] mkdir("./file0", 0777 [pid 5078] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6260] <... setpgid resumed>) = 0 [pid 6259] <... mount resumed>) = 0 [pid 6258] <... close resumed>) = 0 [pid 6257] <... mkdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6258] exit_group(0 [pid 6257] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5078] lstat("./194/binderfs", [pid 5077] <... close resumed>) = 0 [pid 6260] <... openat resumed>) = 3 [pid 6259] <... openat resumed>) = 3 [pid 6258] <... exit_group resumed>) = ? [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6259] chdir("./file0" [pid 5078] unlink("./194/binderfs" [pid 6259] <... chdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6259] ioctl(4, LOOP_CLR_FD [pid 5078] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6259] <... ioctl resumed>) = 0 [pid 6259] close(4 [pid 5077] rmdir("./194/file0" [pid 6259] <... close resumed>) = 0 [pid 6258] +++ exited with 0 +++ [pid 6260] write(3, "1000", 4 [pid 6259] exit_group(0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6260] <... write resumed>) = 4 [pid 6259] <... exit_group resumed>) = ? [pid 5078] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6260] close(3 [pid 6259] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6260] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5078] lstat("./194/file0", [pid 5077] close(3 [pid 6260] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... close resumed>) = 0 [pid 6260] <... symlink resumed>) = 0 [pid 5078] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./194" [pid 5076] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6260] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6260] <... memfd_create resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 5077] mkdir("./195", 0777 [pid 5076] <... openat resumed>) = 3 [pid 6260] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... openat resumed>) = 3 [pid 5078] fstat(4, [pid 5076] fstat(3, [pid 5080] fstat(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(3, [pid 6257] <... mount resumed>) = 0 [pid 5080] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] getdents64(4, [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6257] <... openat resumed>) = 3 [pid 5080] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] chdir("./file0" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5077] close(3 [pid 5076] lstat("./190/binderfs", [pid 6257] <... chdir resumed>) = 0 [pid 5080] lstat("./197/binderfs", [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6257] ioctl(4, LOOP_CLR_FD [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] rmdir("./194/file0" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] unlink("./190/binderfs" [pid 6257] <... ioctl resumed>) = 0 [pid 5080] unlink("./197/binderfs" [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6257] close(4 [pid 5080] <... unlink resumed>) = 0 [ 169.979076][ T6257] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] getdents64(3, [pid 5076] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6257] <... close resumed>) = 0 [pid 5080] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6261 [pid 5076] <... umount2 resumed>) = 0 [pid 6260] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6257] exit_group(0 [pid 5078] close(3 [pid 5076] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6261 attached [pid 6257] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] rmdir("./194" [pid 5076] lstat("./190/file0", [pid 6261] chdir("./195" [pid 6257] +++ exited with 0 +++ [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6261] <... chdir resumed>) = 0 [pid 5078] mkdir("./195", 0777 [pid 5076] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6261] <... prctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6261] setpgid(0, 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 6261] <... setpgid resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] fstat(4, [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6261] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5076] getdents64(4, [pid 5075] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6261] write(3, "1000", 4 [pid 5080] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6261] <... write resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6261] close(3 [pid 5080] lstat("./197/file0", [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6261] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6262 [pid 5076] close(4 [pid 5075] fstat(3, ./strace-static-x86_64: Process 6262 attached [pid 6261] symlink("/dev/binderfs", "./binderfs" [pid 5080] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6262] chdir("./195" [pid 6261] <... symlink resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./190/file0" [pid 5075] getdents64(3, [pid 6262] <... chdir resumed>) = 0 [pid 6261] memfd_create("syzkaller", 0 [pid 5080] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6261] <... memfd_create resumed>) = 3 [pid 5080] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] <... prctl resumed>) = 0 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] fstat(4, [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6262] setpgid(0, 0 [pid 6261] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] close(3 [pid 5075] lstat("./188/binderfs", [pid 6262] <... setpgid resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./190" [pid 5075] unlink("./188/binderfs" [pid 5080] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] mkdir("./191", 0777 [pid 5075] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 6262] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6262] write(3, "1000", 4 [pid 5080] rmdir("./197/file0" [pid 5076] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6262] <... write resumed>) = 4 [pid 5080] getdents64(3, [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6262] close(3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6262] <... close resumed>) = 0 [pid 5080] close(3 [pid 5076] <... close resumed>) = 0 [pid 6262] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6262] <... symlink resumed>) = 0 [pid 5080] rmdir("./197") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6263 [pid 6262] memfd_create("syzkaller", 0 [pid 5080] mkdir("./198", 0777 [pid 6262] <... memfd_create resumed>) = 3 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6262] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] lstat("./188/file0", ./strace-static-x86_64: Process 6263 attached [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6263] chdir("./191" [pid 5080] close(3 [pid 5075] umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6263] <... chdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6263] <... prctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6263] setpgid(0, 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6264 [pid 5075] fstat(4, [pid 6263] <... setpgid resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(4, [pid 6263] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6264 attached [pid 6263] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 6264] chdir("./198" [pid 6263] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6264] <... chdir resumed>) = 0 [pid 6263] close(3 [pid 5075] close(4 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6263] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6264] <... prctl resumed>) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs" [pid 5075] rmdir("./188/file0" [pid 6264] setpgid(0, 0 [pid 6263] <... symlink resumed>) = 0 [pid 6260] <... write resumed>) = 2097152 [pid 5075] <... rmdir resumed>) = 0 [pid 6264] <... setpgid resumed>) = 0 [pid 6263] memfd_create("syzkaller", 0 [pid 6260] munmap(0x7fa49b4d5000, 2097152 [pid 5075] getdents64(3, [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6263] <... memfd_create resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6264] <... openat resumed>) = 3 [pid 6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(3 [pid 6264] write(3, "1000", 4 [pid 6263] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] <... close resumed>) = 0 [pid 6264] <... write resumed>) = 4 [pid 5075] rmdir("./188" [pid 6264] close(3 [pid 6260] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6264] <... close resumed>) = 0 [pid 6260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] mkdir("./189", 0777 [pid 6264] symlink("/dev/binderfs", "./binderfs" [pid 6260] <... openat resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 6264] <... symlink resumed>) = 0 [pid 6261] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6264] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 6264] <... memfd_create resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6264] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6260] <... ioctl resumed>) = 0 [pid 6260] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6265 [pid 6260] <... close resumed>) = 0 [pid 6260] mkdir("./file0", 0777./strace-static-x86_64: Process 6265 attached [pid 6265] chdir("./189" [pid 6260] <... mkdir resumed>) = 0 [pid 6265] <... chdir resumed>) = 0 [pid 6260] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6262] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6265] <... prctl resumed>) = 0 [pid 6265] setpgid(0, 0) = 0 [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6265] write(3, "1000", 4) = 4 [pid 6265] close(3) = 0 [pid 6265] symlink("/dev/binderfs", "./binderfs" [pid 6264] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6263] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6265] <... symlink resumed>) = 0 [pid 6265] memfd_create("syzkaller", 0) = 3 [pid 6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 170.221409][ T6260] loop4: detected capacity change from 0 to 4096 [ 170.257276][ T6260] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6262] <... write resumed>) = 2097152 [pid 6261] <... write resumed>) = 2097152 [pid 6262] munmap(0x7fa49b4d5000, 2097152 [pid 6261] munmap(0x7fa49b4d5000, 2097152 [pid 6260] <... mount resumed>) = 0 [pid 6261] <... munmap resumed>) = 0 [pid 6260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6262] <... munmap resumed>) = 0 [pid 6261] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6260] <... openat resumed>) = 3 [pid 6262] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6261] <... openat resumed>) = 4 [pid 6260] chdir("./file0" [pid 6264] <... write resumed>) = 2097152 [pid 6262] <... openat resumed>) = 4 [pid 6261] ioctl(4, LOOP_SET_FD, 3 [pid 6260] <... chdir resumed>) = 0 [pid 6264] munmap(0x7fa49b4d5000, 2097152 [pid 6262] ioctl(4, LOOP_SET_FD, 3 [pid 6265] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6260] ioctl(4, LOOP_CLR_FD [pid 6264] <... munmap resumed>) = 0 [pid 6260] <... ioctl resumed>) = 0 [pid 6260] close(4 [pid 6264] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6260] <... close resumed>) = 0 [pid 6260] exit_group(0) = ? [pid 6264] <... openat resumed>) = 4 [pid 6260] +++ exited with 0 +++ [pid 6264] ioctl(4, LOOP_SET_FD, 3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5079] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6262] <... ioctl resumed>) = 0 [pid 6261] <... ioctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6262] close(3 [pid 6261] close(3 [pid 5079] <... openat resumed>) = 3 [pid 6262] <... close resumed>) = 0 [pid 5079] fstat(3, [pid 6261] <... close resumed>) = 0 [pid 6262] mkdir("./file0", 0777 [pid 6261] mkdir("./file0", 0777 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6261] <... mkdir resumed>) = 0 [pid 5079] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6262] <... mkdir resumed>) = 0 [pid 5079] lstat("./198/binderfs", [pid 6262] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6261] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./198/binderfs") = 0 [pid 5079] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6265] <... write resumed>) = 2097152 [pid 6264] <... ioctl resumed>) = 0 [ 170.336657][ T6261] loop2: detected capacity change from 0 to 4096 [ 170.346591][ T6262] loop3: detected capacity change from 0 to 4096 [ 170.364133][ T6264] loop5: detected capacity change from 0 to 4096 [pid 6264] close(3) = 0 [pid 6264] mkdir("./file0", 0777) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 6265] munmap(0x7fa49b4d5000, 2097152 [pid 6264] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6265] <... munmap resumed>) = 0 [pid 6265] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6263] <... write resumed>) = 2097152 [pid 6263] munmap(0x7fa49b4d5000, 2097152 [pid 6265] <... openat resumed>) = 4 [pid 6265] ioctl(4, LOOP_SET_FD, 3 [pid 6263] <... munmap resumed>) = 0 [pid 5079] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6263] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6263] <... openat resumed>) = 4 [pid 5079] lstat("./198/file0", [pid 6263] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6265] <... ioctl resumed>) = 0 [pid 6265] close(3) = 0 [pid 5079] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6263] <... ioctl resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 6263] close(3 [ 170.380317][ T6261] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 170.399421][ T6262] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 170.408827][ T6264] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 170.422823][ T6265] loop0: detected capacity change from 0 to 4096 [pid 5079] fstat(4, [pid 6263] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6265] mkdir("./file0", 0777 [pid 6263] mkdir("./file0", 0777 [pid 5079] getdents64(4, [pid 6265] <... mkdir resumed>) = 0 [pid 6263] <... mkdir resumed>) = 0 [pid 6262] <... mount resumed>) = 0 [pid 6265] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6263] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6262] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6261] <... mount resumed>) = 0 [pid 6262] <... openat resumed>) = 3 [pid 6261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] getdents64(4, [pid 6262] chdir("./file0" [pid 6261] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6262] <... chdir resumed>) = 0 [pid 6261] chdir("./file0" [pid 5079] close(4 [pid 6262] ioctl(4, LOOP_CLR_FD [pid 6261] <... chdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6262] <... ioctl resumed>) = 0 [pid 6261] ioctl(4, LOOP_CLR_FD [pid 5079] rmdir("./198/file0" [pid 6262] close(4 [pid 6261] <... ioctl resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6264] <... mount resumed>) = 0 [pid 6262] <... close resumed>) = 0 [pid 6261] close(4 [pid 5079] getdents64(3, [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6262] exit_group(0 [pid 6261] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6264] <... openat resumed>) = 3 [pid 6262] <... exit_group resumed>) = ? [pid 6261] exit_group(0 [pid 5079] close(3 [pid 6264] chdir("./file0") = 0 [pid 6262] +++ exited with 0 +++ [pid 6261] <... exit_group resumed>) = ? [pid 5079] <... close resumed>) = 0 [pid 6264] ioctl(4, LOOP_CLR_FD [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6262, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 6264] <... ioctl resumed>) = 0 [pid 6261] +++ exited with 0 +++ [pid 5079] rmdir("./198" [pid 6264] close(4) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6264] exit_group(0 [pid 5079] mkdir("./199", 0777 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6264] <... exit_group resumed>) = ? [pid 6263] <... mount resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [ 170.435377][ T6263] loop1: detected capacity change from 0 to 4096 [ 170.457074][ T6265] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 170.467665][ T6263] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6265] <... mount resumed>) = 0 [pid 6264] +++ exited with 0 +++ [pid 6263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6263] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6265] <... openat resumed>) = 3 [pid 6263] chdir("./file0" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 6265] chdir("./file0" [pid 6263] <... chdir resumed>) = 0 [pid 5080] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... openat resumed>) = 3 [pid 5077] fstat(3, [pid 6265] <... chdir resumed>) = 0 [pid 6263] ioctl(4, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5078] fstat(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6265] ioctl(4, LOOP_CLR_FD [pid 6263] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 6265] <... ioctl resumed>) = 0 [pid 6263] close(4 [pid 5080] <... openat resumed>) = 3 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] getdents64(3, [pid 6265] close(4 [pid 6263] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6265] <... close resumed>) = 0 [pid 6263] exit_group(0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6265] exit_group(0 [pid 6263] <... exit_group resumed>) = ? [pid 5080] getdents64(3, [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6266 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6265] <... exit_group resumed>) = ? [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] lstat("./195/binderfs", [pid 6265] +++ exited with 0 +++ [pid 6263] +++ exited with 0 +++ [pid 5080] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] lstat("./195/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./195/binderfs" [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 6266 attached [pid 5080] lstat("./198/binderfs", [pid 5078] <... unlink resumed>) = 0 [pid 5077] unlink("./195/binderfs" [pid 6266] chdir("./199" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 6266] <... chdir resumed>) = 0 [pid 5080] unlink("./198/binderfs" [pid 5077] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] <... prctl resumed>) = 0 [pid 5080] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6266] setpgid(0, 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6266] <... setpgid resumed>) = 0 [pid 5076] fstat(3, [pid 5075] fstat(3, [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6266] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 6266] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6266] <... write resumed>) = 4 [pid 5076] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] <... close resumed>) = 0 [pid 5076] lstat("./191/binderfs", [pid 5075] lstat("./189/binderfs", [pid 6266] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6266] <... symlink resumed>) = 0 [pid 5076] unlink("./191/binderfs" [pid 5075] unlink("./189/binderfs" [pid 6266] memfd_create("syzkaller", 0 [pid 5078] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6266] <... memfd_create resumed>) = 3 [pid 5080] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = 0 [pid 5076] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./195/file0", [pid 5077] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] lstat("./198/file0", [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 4 [pid 5078] fstat(4, [pid 5080] fstat(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5080] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 5080] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] lstat("./195/file0", [pid 5075] <... umount2 resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5080] close(4 [pid 5078] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] rmdir("./195/file0" [pid 5077] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./198/file0" [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5076] lstat("./191/file0", [pid 5075] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] fstat(4, [pid 5080] <... close resumed>) = 0 [pid 5078] rmdir("./195" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] rmdir("./198" [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5078] mkdir("./196", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./189/file0", [pid 5080] mkdir("./199", 0777 [pid 5078] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] fstat(4, [pid 5080] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] rmdir("./195/file0" [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(4 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6267 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6268 [pid 5077] getdents64(3, [pid 5076] rmdir("./191/file0" [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5077] close(3 [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 6268 attached [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./189/file0"./strace-static-x86_64: Process 6267 attached [pid 6268] chdir("./199" [pid 5077] rmdir("./195" [pid 5076] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 6268] <... chdir resumed>) = 0 [pid 6267] chdir("./196" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6267] <... chdir resumed>) = 0 [pid 5077] mkdir("./196", 0777 [pid 5076] rmdir("./191" [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6268] <... prctl resumed>) = 0 [pid 6267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 6268] setpgid(0, 0 [pid 6267] <... prctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] mkdir("./192", 0777 [pid 5075] <... close resumed>) = 0 [pid 6268] <... setpgid resumed>) = 0 [pid 6267] setpgid(0, 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] rmdir("./189" [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6267] <... setpgid resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 6268] <... openat resumed>) = 3 [pid 6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... openat resumed>) = 3 [pid 5075] mkdir("./190", 0777 [pid 6268] write(3, "1000", 4 [pid 6267] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 6268] <... write resumed>) = 4 [pid 6267] write(3, "1000", 4 [pid 6266] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6268] close(3 [pid 6267] <... write resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 6268] <... close resumed>) = 0 [pid 6267] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6268] symlink("/dev/binderfs", "./binderfs" [pid 6267] <... close resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6269 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6268] <... symlink resumed>) = 0 [pid 6267] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 6267] <... symlink resumed>) = 0 [pid 6268] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6270 [pid 5075] <... close resumed>) = 0 [pid 6268] <... memfd_create resumed>) = 3 [pid 6267] memfd_create("syzkaller", 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6270 attached [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6267] <... memfd_create resumed>) = 3 [pid 6270] chdir("./192" [pid 6268] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6271 ./strace-static-x86_64: Process 6269 attached [pid 6267] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6270] <... chdir resumed>) = 0 [pid 6269] chdir("./196" [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6269] <... chdir resumed>) = 0 [pid 6270] <... prctl resumed>) = 0 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6271 attached [pid 6270] setpgid(0, 0 [pid 6269] <... prctl resumed>) = 0 [pid 6271] chdir("./190" [pid 6270] <... setpgid resumed>) = 0 [pid 6269] setpgid(0, 0 [pid 6271] <... chdir resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6269] <... setpgid resumed>) = 0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] <... openat resumed>) = 3 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6271] <... prctl resumed>) = 0 [pid 6270] write(3, "1000", 4 [pid 6269] <... openat resumed>) = 3 [pid 6271] setpgid(0, 0 [pid 6269] write(3, "1000", 4 [pid 6271] <... setpgid resumed>) = 0 [pid 6269] <... write resumed>) = 4 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6269] close(3 [pid 6271] <... openat resumed>) = 3 [pid 6270] <... write resumed>) = 4 [pid 6269] <... close resumed>) = 0 [pid 6271] write(3, "1000", 4 [pid 6270] close(3 [pid 6269] symlink("/dev/binderfs", "./binderfs" [pid 6271] <... write resumed>) = 4 [pid 6270] <... close resumed>) = 0 [pid 6269] <... symlink resumed>) = 0 [pid 6271] close(3 [pid 6270] symlink("/dev/binderfs", "./binderfs" [pid 6269] memfd_create("syzkaller", 0 [pid 6271] <... close resumed>) = 0 [pid 6270] <... symlink resumed>) = 0 [pid 6269] <... memfd_create resumed>) = 3 [pid 6271] symlink("/dev/binderfs", "./binderfs" [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6271] <... symlink resumed>) = 0 [pid 6270] memfd_create("syzkaller", 0 [pid 6269] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6267] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6271] memfd_create("syzkaller", 0 [pid 6270] <... memfd_create resumed>) = 3 [pid 6268] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6266] <... write resumed>) = 2097152 [pid 6271] <... memfd_create resumed>) = 3 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6266] munmap(0x7fa49b4d5000, 2097152 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6266] <... munmap resumed>) = 0 [pid 6271] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6266] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6266] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6266] close(3) = 0 [pid 6266] mkdir("./file0", 0777) = 0 [pid 6266] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6268] <... write resumed>) = 2097152 [pid 6269] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6270] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6268] munmap(0x7fa49b4d5000, 2097152 [pid 6267] <... write resumed>) = 2097152 [pid 6271] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6267] munmap(0x7fa49b4d5000, 2097152 [pid 6268] <... munmap resumed>) = 0 [pid 6268] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6268] ioctl(4, LOOP_SET_FD, 3 [pid 6267] <... munmap resumed>) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6268] <... ioctl resumed>) = 0 [pid 6268] close(3) = 0 [ 170.801683][ T6266] loop4: detected capacity change from 0 to 4096 [ 170.818979][ T6266] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6268] mkdir("./file0", 0777 [pid 6267] <... openat resumed>) = 4 [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 6268] <... mkdir resumed>) = 0 [pid 6268] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6270] <... write resumed>) = 2097152 [pid 6269] <... write resumed>) = 2097152 [pid 6267] <... ioctl resumed>) = 0 [pid 6270] munmap(0x7fa49b4d5000, 2097152 [pid 6269] munmap(0x7fa49b4d5000, 2097152 [pid 6267] close(3 [pid 6266] <... mount resumed>) = 0 [pid 6269] <... munmap resumed>) = 0 [pid 6266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6267] <... close resumed>) = 0 [pid 6267] mkdir("./file0", 0777 [pid 6266] chdir("./file0") = 0 [pid 6266] ioctl(4, LOOP_CLR_FD) = 0 [pid 6266] close(4 [pid 6271] <... write resumed>) = 2097152 [pid 6270] <... munmap resumed>) = 0 [pid 6269] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6267] <... mkdir resumed>) = 0 [pid 6266] <... close resumed>) = 0 [pid 6271] munmap(0x7fa49b4d5000, 2097152 [pid 6270] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6269] <... openat resumed>) = 4 [pid 6267] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6266] exit_group(0 [pid 6271] <... munmap resumed>) = 0 [pid 6270] <... openat resumed>) = 4 [ 170.867502][ T6268] loop5: detected capacity change from 0 to 4096 [ 170.881559][ T6267] loop3: detected capacity change from 0 to 4096 [ 170.883575][ T6268] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6269] ioctl(4, LOOP_SET_FD, 3 [pid 6266] <... exit_group resumed>) = ? [pid 6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 6266] +++ exited with 0 +++ [pid 6271] <... openat resumed>) = 4 [pid 6269] <... ioctl resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6266, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6271] ioctl(4, LOOP_SET_FD, 3 [pid 6270] <... ioctl resumed>) = 0 [pid 6269] close(3 [pid 6270] close(3 [pid 6269] <... close resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 6269] mkdir("./file0", 0777 [pid 6270] mkdir("./file0", 0777 [pid 6269] <... mkdir resumed>) = 0 [pid 6270] <... mkdir resumed>) = 0 [pid 6269] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6270] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6271] <... ioctl resumed>) = 0 [pid 6271] close(3 [pid 5079] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6271] mkdir("./file0", 0777 [pid 5079] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6271] <... mkdir resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 6271] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6267] <... mount resumed>) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 170.924815][ T6267] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 170.935138][ T6269] loop2: detected capacity change from 0 to 4096 [ 170.944727][ T6270] loop1: detected capacity change from 0 to 4096 [ 170.951289][ T6271] loop0: detected capacity change from 0 to 4096 [ 170.958000][ T6269] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6267] <... openat resumed>) = 3 [pid 5079] lstat("./199/binderfs", [pid 6267] chdir("./file0" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6267] <... chdir resumed>) = 0 [pid 5079] unlink("./199/binderfs" [pid 6267] ioctl(4, LOOP_CLR_FD [pid 5079] <... unlink resumed>) = 0 [pid 6267] <... ioctl resumed>) = 0 [pid 5079] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] close(4) = 0 [pid 6267] exit_group(0) = ? [pid 6267] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5078] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./196/binderfs" [pid 6270] <... mount resumed>) = 0 [pid 6269] <... mount resumed>) = 0 [pid 6268] <... mount resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 170.962071][ T6271] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 170.968377][ T6270] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6270] <... openat resumed>) = 3 [pid 6268] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] chdir("./file0" [pid 5079] lstat("./199/file0", [pid 6268] <... chdir resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6268] ioctl(4, LOOP_CLR_FD [pid 5079] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6270] chdir("./file0" [pid 6269] <... openat resumed>) = 3 [pid 6268] close(4 [pid 5079] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6271] <... mount resumed>) = 0 [pid 6270] <... chdir resumed>) = 0 [pid 6268] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] <... umount2 resumed>) = 0 [pid 6268] exit_group(0 [pid 5079] fstat(4, [pid 6268] <... exit_group resumed>) = ? [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6268] +++ exited with 0 +++ [pid 5079] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./199/file0") = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./199") = 0 [pid 5079] mkdir("./200", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6270] ioctl(4, LOOP_CLR_FD [pid 6269] chdir("./file0" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] close(3 [pid 6271] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 6271] chdir("./file0" [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6271] <... chdir resumed>) = 0 [pid 6270] <... ioctl resumed>) = 0 [pid 6269] <... chdir resumed>) = 0 [pid 5080] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] ioctl(4, LOOP_CLR_FD [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6272 [pid 6271] <... ioctl resumed>) = 0 [pid 6270] close(4 [pid 6271] close(4 [pid 6269] ioctl(4, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6270] <... close resumed>) = 0 [pid 6271] <... close resumed>) = 0 [pid 6271] exit_group(0 [pid 6269] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6271] <... exit_group resumed>) = ? [pid 6270] exit_group(0 [pid 6269] close(4 [pid 6271] +++ exited with 0 +++ [pid 6270] <... exit_group resumed>) = ? [pid 6269] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5075] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6272 attached ) = -1 EINVAL (Invalid argument) [pid 6272] chdir("./200" [pid 5075] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] <... chdir resumed>) = 0 [pid 6270] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6269] exit_group(0 [pid 5080] fstat(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] fstat(3, [pid 6272] <... prctl resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6272] setpgid(0, 0 [pid 5075] getdents64(3, [pid 6272] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6269] <... exit_group resumed>) = ? [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] lstat("./196/file0", [pid 5075] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6272] write(3, "1000", 4 [pid 5075] lstat("./190/binderfs", [pid 6272] <... write resumed>) = 4 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6272] close(3 [pid 5075] unlink("./190/binderfs" [pid 6272] <... close resumed>) = 0 [pid 6269] +++ exited with 0 +++ [pid 5080] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] <... symlink resumed>) = 0 [pid 5080] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6272] memfd_create("syzkaller", 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... restart_syscall resumed>) = 0 [pid 6272] <... memfd_create resumed>) = 3 [pid 5080] lstat("./199/binderfs", [pid 5076] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] unlink("./199/binderfs" [pid 5077] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] fstat(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] fstat(3, [pid 5078] fstat(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5076] getdents64(3, [pid 5080] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] lstat("./199/file0", [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] lstat("./196/binderfs", [pid 5080] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5077] unlink("./196/binderfs" [pid 5076] lstat("./192/binderfs", [pid 5075] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] rmdir("./196/file0" [pid 5077] <... unlink resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5077] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5075] lstat("./190/file0", [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = 0 [pid 5076] unlink("./192/binderfs" [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./190/file0") = 0 [pid 5080] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5075] close(3 [pid 5080] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 5076] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./190" [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./196" [pid 5075] <... rmdir resumed>) = 0 [pid 5080] close(4 [pid 5075] mkdir("./191", 0777 [pid 5080] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5080] rmdir("./199/file0" [pid 5078] mkdir("./197", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] lstat("./196/file0", [pid 5075] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5080] getdents64(3, [pid 5078] <... mkdir resumed>) = 0 [pid 5077] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5080] close(3 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... close resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] fstat(4, [pid 5080] rmdir("./199" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6273 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5077] getdents64(4, [pid 5080] mkdir("./200", 0777 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./196/file0" [pid 5080] <... mkdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6273 attached [pid 5077] close(3 [pid 6273] chdir("./191" [pid 5080] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 6273] <... chdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6274 [pid 5077] rmdir("./196" [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... rmdir resumed>) = 0 [pid 6273] <... prctl resumed>) = 0 [pid 5080] close(3 [pid 5077] mkdir("./197", 0777 [pid 6273] setpgid(0, 0 [pid 5080] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6273] <... setpgid resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... openat resumed>) = 3 [pid 6273] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6273] write(3, "1000", 4 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6275 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6273] <... write resumed>) = 4 [pid 5077] close(3 [pid 6273] close(3 [pid 5077] <... close resumed>) = 0 [pid 6273] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6275 attached ./strace-static-x86_64: Process 6274 attached [pid 6273] symlink("/dev/binderfs", "./binderfs" [pid 6272] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 6276 attached [pid 6275] chdir("./200" [pid 6274] chdir("./197" [pid 6273] <... symlink resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6276 [pid 5076] <... umount2 resumed>) = 0 [pid 6276] chdir("./197" [pid 6275] <... chdir resumed>) = 0 [pid 6274] <... chdir resumed>) = 0 [pid 6273] memfd_create("syzkaller", 0 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6273] <... memfd_create resumed>) = 3 [pid 6275] <... prctl resumed>) = 0 [pid 6274] <... prctl resumed>) = 0 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] <... chdir resumed>) = 0 [pid 6275] setpgid(0, 0 [pid 6274] setpgid(0, 0 [pid 6273] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6275] <... setpgid resumed>) = 0 [pid 6274] <... setpgid resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... prctl resumed>) = 0 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6276] setpgid(0, 0 [pid 6275] <... openat resumed>) = 3 [pid 6274] <... openat resumed>) = 3 [pid 5076] lstat("./192/file0", [pid 6276] <... setpgid resumed>) = 0 [pid 6275] write(3, "1000", 4 [pid 6274] write(3, "1000", 4 [pid 6276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6275] <... write resumed>) = 4 [pid 6274] <... write resumed>) = 4 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6275] close(3 [pid 6274] close(3 [pid 6275] <... close resumed>) = 0 [pid 6274] <... close resumed>) = 0 [pid 6275] symlink("/dev/binderfs", "./binderfs" [pid 6274] symlink("/dev/binderfs", "./binderfs" [pid 6276] <... openat resumed>) = 3 [pid 6275] <... symlink resumed>) = 0 [pid 6274] <... symlink resumed>) = 0 [pid 5076] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] write(3, "1000", 4 [pid 6275] memfd_create("syzkaller", 0 [pid 6274] memfd_create("syzkaller", 0 [pid 6275] <... memfd_create resumed>) = 3 [pid 6274] <... memfd_create resumed>) = 3 [pid 6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6275] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6274] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6276] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] close(3) = 0 [pid 5076] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6276] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 4 [pid 6276] <... symlink resumed>) = 0 [pid 5076] fstat(4, [pid 6276] memfd_create("syzkaller", 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6276] <... memfd_create resumed>) = 3 [pid 5076] getdents64(4, [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6276] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] getdents64(4, [pid 6272] <... write resumed>) = 2097152 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./192/file0" [pid 6272] munmap(0x7fa49b4d5000, 2097152 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./192" [pid 6272] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] mkdir("./193", 0777 [pid 6272] <... openat resumed>) = 4 [pid 6272] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6275] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6274] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6277 [pid 6273] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6272] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6277 attached [pid 6272] close(3 [pid 6277] chdir("./193" [pid 6272] <... close resumed>) = 0 [pid 6277] <... chdir resumed>) = 0 [pid 6276] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6272] mkdir("./file0", 0777 [pid 6277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6272] <... mkdir resumed>) = 0 [pid 6277] <... prctl resumed>) = 0 [pid 6272] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6277] setpgid(0, 0) = 0 [ 171.271399][ T6272] loop4: detected capacity change from 0 to 4096 [pid 6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6277] write(3, "1000", 4) = 4 [pid 6277] close(3) = 0 [pid 6277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6277] memfd_create("syzkaller", 0) = 3 [pid 6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6273] <... write resumed>) = 2097152 [ 171.313883][ T6272] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6276] <... write resumed>) = 2097152 [pid 6275] <... write resumed>) = 2097152 [pid 6273] munmap(0x7fa49b4d5000, 2097152 [pid 6276] munmap(0x7fa49b4d5000, 2097152 [pid 6275] munmap(0x7fa49b4d5000, 2097152 [pid 6273] <... munmap resumed>) = 0 [pid 6275] <... munmap resumed>) = 0 [pid 6276] <... munmap resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6275] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6273] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6275] <... openat resumed>) = 4 [pid 6273] <... openat resumed>) = 4 [pid 6276] <... openat resumed>) = 4 [pid 6275] ioctl(4, LOOP_SET_FD, 3 [pid 6273] ioctl(4, LOOP_SET_FD, 3 [pid 6276] ioctl(4, LOOP_SET_FD, 3 [pid 6274] <... write resumed>) = 2097152 [pid 6272] <... mount resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6272] chdir("./file0") = 0 [pid 6272] ioctl(4, LOOP_CLR_FD) = 0 [pid 6272] close(4) = 0 [pid 6272] exit_group(0) = ? [pid 6273] <... ioctl resumed>) = 0 [pid 6273] close(3) = 0 [pid 6273] mkdir("./file0", 0777 [pid 6272] +++ exited with 0 +++ [pid 6273] <... mkdir resumed>) = 0 [pid 6273] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6272, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6277] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6276] <... ioctl resumed>) = 0 [pid 6275] <... ioctl resumed>) = 0 [pid 6274] munmap(0x7fa49b4d5000, 2097152 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 6276] close(3 [pid 6275] close(3 [pid 6274] <... munmap resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 6276] <... close resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6274] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6276] mkdir("./file0", 0777 [pid 6275] mkdir("./file0", 0777 [pid 6274] <... openat resumed>) = 4 [pid 6276] <... mkdir resumed>) = 0 [pid 6275] <... mkdir resumed>) = 0 [ 171.417416][ T6275] loop5: detected capacity change from 0 to 4096 [ 171.425240][ T6273] loop0: detected capacity change from 0 to 4096 [ 171.437739][ T6276] loop2: detected capacity change from 0 to 4096 [ 171.447815][ T6273] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6274] ioctl(4, LOOP_SET_FD, 3 [pid 6273] <... mount resumed>) = 0 [pid 5079] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] <... write resumed>) = 2097152 [pid 6276] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6275] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] munmap(0x7fa49b4d5000, 2097152 [pid 6273] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6277] <... munmap resumed>) = 0 [pid 6273] chdir("./file0" [pid 5079] <... openat resumed>) = 3 [pid 6273] <... chdir resumed>) = 0 [pid 5079] fstat(3, [pid 6273] ioctl(4, LOOP_CLR_FD [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6273] <... ioctl resumed>) = 0 [pid 5079] getdents64(3, [pid 6273] close(4 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6273] <... close resumed>) = 0 [pid 5079] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6273] exit_group(0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] <... openat resumed>) = 4 [pid 6273] <... exit_group resumed>) = ? [pid 5079] lstat("./200/binderfs", [pid 6277] ioctl(4, LOOP_SET_FD, 3 [pid 6273] +++ exited with 0 +++ [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./200/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5079] <... unlink resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5079] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./191/binderfs") = 0 [pid 5075] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] <... ioctl resumed>) = 0 [pid 6277] close(3) = 0 [pid 6277] mkdir("./file0", 0777) = 0 [pid 6277] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6274] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./191/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6274] close(3 [pid 5075] rmdir("./191" [pid 6277] <... mount resumed>) = 0 [pid 6274] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6277] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6274] mkdir("./file0", 0777 [pid 5075] mkdir("./192", 0777 [pid 6275] <... mount resumed>) = 0 [pid 6277] <... openat resumed>) = 3 [pid 6274] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6277] chdir("./file0" [pid 6275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6274] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 171.489156][ T6274] loop3: detected capacity change from 0 to 4096 [ 171.497073][ T6276] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 171.501884][ T6277] loop1: detected capacity change from 0 to 4096 [ 171.506239][ T6275] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 171.520633][ T6277] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6277] <... chdir resumed>) = 0 [pid 6275] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6277] ioctl(4, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6277] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6277] close(4 [pid 6275] chdir("./file0" [pid 5075] close(3 [pid 6277] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6277] exit_group(0 [pid 6275] <... chdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6277] <... exit_group resumed>) = ? [pid 5079] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6278 [pid 5079] lstat("./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./200/file0") = 0 [pid 5079] getdents64(3, [pid 6275] ioctl(4, LOOP_CLR_FD [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6275] <... ioctl resumed>) = 0 [pid 5079] close(3 [pid 6275] close(4 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./200" [pid 6275] <... close resumed>) = 0 [pid 5076] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6275] exit_group(0 [pid 5079] <... rmdir resumed>) = 0 [pid 6275] <... exit_group resumed>) = ? [pid 5079] mkdir("./201", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mkdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 6275] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5076] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] fstat(3, [pid 5080] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6279 [pid 5076] getdents64(3, [pid 5080] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 5076] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] lstat("./193/binderfs", [pid 5080] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6276] <... mount resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./193/binderfs" [pid 6276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] lstat("./200/binderfs", ./strace-static-x86_64: Process 6279 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6276] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 6279] chdir("./201" [pid 6276] chdir("./file0" [pid 5080] unlink("./200/binderfs" [pid 5076] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6279] <... chdir resumed>) = 0 [pid 6276] <... chdir resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6279] setpgid(0, 0) = 0 [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6279] write(3, "1000", 4) = 4 [pid 6279] close(3) = 0 [pid 6279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6279] memfd_create("syzkaller", 0 [pid 6276] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6279] <... memfd_create resumed>) = 3 [pid 6276] <... ioctl resumed>) = 0 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6276] close(4 [pid 6279] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6276] <... close resumed>) = 0 [pid 6274] <... mount resumed>) = 0 [ 171.577190][ T6274] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) ./strace-static-x86_64: Process 6278 attached [pid 6276] exit_group(0 [pid 6274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6274] chdir("./file0") = 0 [pid 6274] ioctl(4, LOOP_CLR_FD) = 0 [pid 6274] close(4) = 0 [pid 6274] exit_group(0) = ? [pid 6274] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6274, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6276] <... exit_group resumed>) = ? [pid 5078] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6276] +++ exited with 0 +++ [pid 5078] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6276, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] lstat("./197/binderfs", [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./197/binderfs" [pid 5077] <... restart_syscall resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 6278] chdir("./192" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6278] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./193/file0" [pid 5077] <... openat resumed>) = 3 [pid 6278] <... prctl resumed>) = 0 [pid 5077] fstat(3, [pid 6278] setpgid(0, 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6278] <... setpgid resumed>) = 0 [pid 5080] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] close(3) = 0 [pid 5076] rmdir("./193") = 0 [pid 6278] <... openat resumed>) = 3 [pid 5080] lstat("./200/file0", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6278] write(3, "1000", 4 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] mkdir("./194", 0777) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6278] <... write resumed>) = 4 [pid 5078] lstat("./197/file0", [pid 5077] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6278] close(3 [pid 5080] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] lstat("./197/binderfs", [pid 6278] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6278] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 6278] <... symlink resumed>) = 0 [pid 5080] fstat(4, [pid 5078] <... openat resumed>) = 4 [pid 5077] unlink("./197/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6278] memfd_create("syzkaller", 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6280 [pid 5078] fstat(4, [pid 6278] <... memfd_create resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6279] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5080] close(4 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6280 attached [pid 6280] chdir("./194") = 0 [pid 6280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6280] setpgid(0, 0) = 0 [pid 6280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6280] write(3, "1000", 4 [pid 6278] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] <... umount2 resumed>) = 0 [pid 6280] <... write resumed>) = 4 [pid 5080] rmdir("./200/file0" [pid 6280] close(3) = 0 [pid 6280] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6280] <... symlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5078] close(4 [pid 6280] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 5078] <... close resumed>) = 0 [pid 6280] <... memfd_create resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5078] rmdir("./197/file0" [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] rmdir("./200" [pid 6280] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... rmdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5080] mkdir("./201", 0777 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./197" [pid 5080] <... openat resumed>) = 3 [pid 5078] <... rmdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] mkdir("./198", 0777 [pid 5080] close(3 [pid 5078] <... mkdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6281 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6282 [pid 5077] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./197/file0", [pid 6279] <... write resumed>) = 2097152 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6282 attached ./strace-static-x86_64: Process 6281 attached [pid 6281] chdir("./201" [pid 5077] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... chdir resumed>) = 0 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6282] chdir("./198" [pid 6281] <... prctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] setpgid(0, 0) = 0 [pid 5077] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6282] <... chdir resumed>) = 0 [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6281] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 6281] write(3, "1000", 4 [pid 5077] fstat(4, [pid 6282] <... prctl resumed>) = 0 [pid 6281] <... write resumed>) = 4 [pid 6279] munmap(0x7fa49b4d5000, 2097152 [pid 6282] setpgid(0, 0 [pid 6281] close(3 [pid 6279] <... munmap resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6282] <... setpgid resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6281] <... symlink resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6282] <... openat resumed>) = 3 [pid 6281] memfd_create("syzkaller", 0 [pid 5077] getdents64(4, [pid 6282] write(3, "1000", 4 [pid 6281] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6282] <... write resumed>) = 4 [pid 6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] close(4 [pid 6282] close(3 [pid 6281] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6279] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 6282] <... close resumed>) = 0 [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 6278] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6282] symlink("/dev/binderfs", "./binderfs" [pid 5077] rmdir("./197/file0" [pid 6282] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6282] memfd_create("syzkaller", 0) = 3 [pid 5077] getdents64(3, [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6280] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6282] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5077] close(3) = 0 [pid 5077] rmdir("./197") = 0 [pid 5077] mkdir("./198", 0777 [pid 6279] <... ioctl resumed>) = 0 [pid 6279] close(3) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6279] mkdir("./file0", 0777 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6279] <... mkdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6279] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6283 ./strace-static-x86_64: Process 6283 attached [pid 6283] chdir("./198") = 0 [pid 6281] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6283] setpgid(0, 0) = 0 [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6283] write(3, "1000", 4) = 4 [pid 6283] close(3) = 0 [pid 6283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6283] memfd_create("syzkaller", 0 [pid 6282] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6280] <... write resumed>) = 2097152 [pid 6278] <... write resumed>) = 2097152 [pid 6283] <... memfd_create resumed>) = 3 [pid 6278] munmap(0x7fa49b4d5000, 2097152 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 171.781942][ T6279] loop4: detected capacity change from 0 to 4096 [ 171.822050][ T6279] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6280] munmap(0x7fa49b4d5000, 2097152 [pid 6278] <... munmap resumed>) = 0 [pid 6278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6280] <... munmap resumed>) = 0 [pid 6278] ioctl(4, LOOP_SET_FD, 3 [pid 6279] <... mount resumed>) = 0 [pid 6280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6280] <... openat resumed>) = 4 [pid 6279] <... openat resumed>) = 3 [pid 6278] <... ioctl resumed>) = 0 [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6279] chdir("./file0") = 0 [pid 6278] close(3 [pid 6279] ioctl(4, LOOP_CLR_FD) = 0 [pid 6279] close(4) = 0 [pid 6278] <... close resumed>) = 0 [pid 6279] exit_group(0 [pid 6278] mkdir("./file0", 0777 [pid 6279] <... exit_group resumed>) = ? [pid 6279] +++ exited with 0 +++ [pid 6278] <... mkdir resumed>) = 0 [pid 6278] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5079] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./201/binderfs") = 0 [pid 5079] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6280] <... ioctl resumed>) = 0 [pid 6280] close(3) = 0 [pid 6280] mkdir("./file0", 0777) = 0 [pid 6280] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6283] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6282] <... write resumed>) = 2097152 [pid 6281] <... write resumed>) = 2097152 [ 171.891039][ T6278] loop0: detected capacity change from 0 to 4096 [ 171.902070][ T6280] loop1: detected capacity change from 0 to 4096 [ 171.929380][ T6278] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5079] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6282] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 6281] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 6282] <... munmap resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./201/file0") = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] close(3 [pid 6282] <... openat resumed>) = 4 [pid 6281] <... munmap resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6283] <... write resumed>) = 2097152 [pid 6282] ioctl(4, LOOP_SET_FD, 3 [pid 6281] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6278] <... mount resumed>) = 0 [ 171.935091][ T6280] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5079] rmdir("./201" [pid 6283] munmap(0x7fa49b4d5000, 2097152 [pid 6282] <... ioctl resumed>) = 0 [pid 6281] <... openat resumed>) = 4 [pid 6278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6283] <... munmap resumed>) = 0 [pid 6282] close(3 [pid 6281] ioctl(4, LOOP_SET_FD, 3 [pid 6278] <... openat resumed>) = 3 [pid 5079] <... rmdir resumed>) = 0 [pid 6283] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6282] <... close resumed>) = 0 [pid 6281] <... ioctl resumed>) = 0 [pid 6278] chdir("./file0" [pid 5079] mkdir("./202", 0777 [pid 6282] mkdir("./file0", 0777 [pid 6281] close(3 [pid 6278] <... chdir resumed>) = 0 [pid 6283] <... openat resumed>) = 4 [pid 6282] <... mkdir resumed>) = 0 [pid 6281] <... close resumed>) = 0 [pid 6278] ioctl(4, LOOP_CLR_FD [pid 5079] <... mkdir resumed>) = 0 [pid 6283] ioctl(4, LOOP_SET_FD, 3 [pid 6282] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6281] mkdir("./file0", 0777 [pid 6280] <... mount resumed>) = 0 [pid 6278] <... ioctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6281] <... mkdir resumed>) = 0 [ 171.991479][ T6282] loop3: detected capacity change from 0 to 4096 [ 172.011468][ T6281] loop5: detected capacity change from 0 to 4096 [ 172.031689][ T6282] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6278] close(4 [pid 6281] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6278] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 6283] <... ioctl resumed>) = 0 [pid 6280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6278] exit_group(0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6283] close(3 [pid 6280] <... openat resumed>) = 3 [pid 6278] <... exit_group resumed>) = ? [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6283] <... close resumed>) = 0 [pid 6280] chdir("./file0" [pid 6278] +++ exited with 0 +++ [pid 5079] close(3 [pid 6283] mkdir("./file0", 0777 [pid 6280] <... chdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6280] ioctl(4, LOOP_CLR_FD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6278, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6280] <... ioctl resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6280] close(4 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6283] <... mkdir resumed>) = 0 [pid 6280] <... close resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6284 [pid 6283] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6280] exit_group(0) = ? [pid 5075] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6280, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5075] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] fstat(3, [pid 5076] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5076] fstat(3, ./strace-static-x86_64: Process 6284 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6284] chdir("./202" [pid 5076] getdents64(3, [pid 5075] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6284] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./192/binderfs", [pid 6284] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] setpgid(0, 0 [pid 5076] lstat("./194/binderfs", [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6284] <... setpgid resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./192/binderfs" [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] unlink("./194/binderfs" [pid 6284] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 6284] write(3, "1000", 4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6284] <... write resumed>) = 4 [pid 5076] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 172.034871][ T6283] loop2: detected capacity change from 0 to 4096 [ 172.041713][ T6281] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 172.076122][ T6283] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6284] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 6284] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6284] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] <... symlink resumed>) = 0 [pid 6282] <... mount resumed>) = 0 [pid 5075] lstat("./192/file0", [pid 6284] memfd_create("syzkaller", 0 [pid 6282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6284] <... memfd_create resumed>) = 3 [pid 6282] <... openat resumed>) = 3 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] chdir("./file0" [pid 5075] umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6284] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6282] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6282] ioctl(4, LOOP_CLR_FD [pid 6281] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6282] <... ioctl resumed>) = 0 [pid 6281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6282] close(4 [pid 6281] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 6282] <... close resumed>) = 0 [pid 6281] chdir("./file0" [pid 5075] fstat(4, [pid 6282] exit_group(0 [pid 6281] <... chdir resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6282] <... exit_group resumed>) = ? [pid 6281] ioctl(4, LOOP_CLR_FD [pid 6282] +++ exited with 0 +++ [pid 6281] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 6281] close(4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6282, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6281] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6281] exit_group(0 [pid 5075] getdents64(4, [pid 6281] <... exit_group resumed>) = ? [pid 5076] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6281] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5078] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./194/file0", [pid 5075] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./192/file0" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6283] <... mount resumed>) = 0 [pid 5080] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5076] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 6283] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] fstat(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 6283] chdir("./file0" [pid 5080] <... openat resumed>) = 3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6283] <... chdir resumed>) = 0 [pid 5080] fstat(3, [pid 5078] getdents64(3, [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6283] ioctl(4, LOOP_CLR_FD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... openat resumed>) = 4 [pid 5075] close(3 [pid 6284] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6283] <... ioctl resumed>) = 0 [pid 5080] getdents64(3, [pid 5078] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 6283] close(4 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./192" [pid 6283] <... close resumed>) = 0 [pid 5080] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] lstat("./198/binderfs", [pid 5076] getdents64(4, [pid 6283] exit_group(0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6283] <... exit_group resumed>) = ? [pid 5080] lstat("./201/binderfs", [pid 5078] unlink("./198/binderfs" [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./193", 0777 [pid 5078] <... unlink resumed>) = 0 [pid 6283] +++ exited with 0 +++ [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5080] unlink("./201/binderfs" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] <... mkdir resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5077] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] close(4 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... close resumed>) = 0 [pid 5080] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./194/file0" [pid 5075] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./198/binderfs", [pid 5080] lstat("./201/file0", [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] unlink("./198/binderfs" [pid 5076] getdents64(3, [pid 5080] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5080] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = 0 [pid 5076] close(3 [pid 5080] <... openat resumed>) = 4 [pid 5078] lstat("./198/file0", [pid 5077] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./194" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./198/file0", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5080] getdents64(4, [pid 5078] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./195", 0777 [pid 6284] <... write resumed>) = 2097152 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6284] munmap(0x7fa49b4d5000, 2097152 [pid 5080] getdents64(4, [pid 5078] fstat(4, [pid 5077] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6285 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6285 attached [pid 6284] <... munmap resumed>) = 0 [pid 5080] close(4 [pid 5078] getdents64(4, [pid 5077] fstat(4, [pid 6285] chdir("./193" [pid 5080] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6285] <... chdir resumed>) = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] rmdir("./201/file0" [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6284] <... openat resumed>) = 4 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6285] <... prctl resumed>) = 0 [pid 6284] ioctl(4, LOOP_SET_FD, 3 [pid 5080] getdents64(3, [pid 5078] close(4 [pid 5077] getdents64(4, [pid 5076] close(3 [pid 6285] setpgid(0, 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./198/file0" [pid 5077] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] rmdir("./198/file0" [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6285] <... setpgid resumed>) = 0 [pid 5080] close(3 [pid 5078] close(3 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6285] <... openat resumed>) = 3 [pid 5080] rmdir("./201" [pid 5078] rmdir("./198" [pid 5077] close(3 [pid 6285] write(3, "1000", 4 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6285] <... write resumed>) = 4 [pid 5080] mkdir("./202", 0777 [pid 5078] mkdir("./199", 0777 [pid 5077] rmdir("./198" [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6286 [pid 6285] close(3 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6286 attached [pid 6285] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] mkdir("./199", 0777 [pid 6286] chdir("./195" [pid 6285] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... mkdir resumed>) = 0 [pid 6286] <... chdir resumed>) = 0 [pid 6285] <... symlink resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6285] memfd_create("syzkaller", 0 [pid 6284] <... ioctl resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... openat resumed>) = 3 [pid 6286] <... prctl resumed>) = 0 [pid 6285] <... memfd_create resumed>) = 3 [pid 6284] close(3 [pid 5080] close(3 [pid 5078] close(3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6286] setpgid(0, 0 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6284] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6286] <... setpgid resumed>) = 0 [pid 6285] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6284] mkdir("./file0", 0777 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 6286] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6287 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6286] write(3, "1000", 4 [pid 6284] <... mkdir resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6288 [pid 6286] <... write resumed>) = 4 [pid 6284] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6289 [pid 6286] close(3./strace-static-x86_64: Process 6287 attached ) = 0 [pid 6287] chdir("./199" [pid 6286] symlink("/dev/binderfs", "./binderfs" [pid 6287] <... chdir resumed>) = 0 [pid 6286] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6289 attached [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6286] memfd_create("syzkaller", 0 [pid 6289] chdir("./199" [pid 6287] <... prctl resumed>) = 0 [pid 6286] <... memfd_create resumed>) = 3 [ 172.274707][ T6284] loop4: detected capacity change from 0 to 4096 [pid 6289] <... chdir resumed>) = 0 [pid 6287] setpgid(0, 0 [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] <... setpgid resumed>) = 0 [pid 6286] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6289] <... prctl resumed>) = 0 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6288 attached [pid 6289] setpgid(0, 0 [pid 6287] <... openat resumed>) = 3 [pid 6289] <... setpgid resumed>) = 0 [pid 6288] chdir("./202" [pid 6287] write(3, "1000", 4 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6287] <... write resumed>) = 4 [pid 6289] <... openat resumed>) = 3 [pid 6287] close(3 [pid 6289] write(3, "1000", 4 [pid 6287] <... close resumed>) = 0 [pid 6289] <... write resumed>) = 4 [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 6289] close(3 [pid 6288] <... chdir resumed>) = 0 [pid 6287] <... symlink resumed>) = 0 [pid 6289] <... close resumed>) = 0 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] memfd_create("syzkaller", 0 [pid 6289] symlink("/dev/binderfs", "./binderfs" [pid 6287] <... memfd_create resumed>) = 3 [pid 6288] <... prctl resumed>) = 0 [pid 6289] <... symlink resumed>) = 0 [pid 6288] setpgid(0, 0 [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6289] memfd_create("syzkaller", 0 [pid 6288] <... setpgid resumed>) = 0 [pid 6287] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6289] <... memfd_create resumed>) = 3 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 172.317799][ T6284] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] <... openat resumed>) = 3 [pid 6289] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6288] write(3, "1000", 4 [pid 6285] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6288] <... write resumed>) = 4 [pid 6288] close(3) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6288] memfd_create("syzkaller", 0) = 3 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6286] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6289] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6287] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6284] <... mount resumed>) = 0 [pid 6284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6284] chdir("./file0") = 0 [pid 6284] ioctl(4, LOOP_CLR_FD) = 0 [pid 6284] close(4) = 0 [pid 6284] exit_group(0) = ? [pid 6284] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5079] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6288] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6285] <... write resumed>) = 2097152 [pid 5079] unlink("./202/binderfs" [pid 6286] <... write resumed>) = 2097152 [pid 5079] <... unlink resumed>) = 0 [pid 6285] munmap(0x7fa49b4d5000, 2097152 [pid 5079] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5079] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... munmap resumed>) = 0 [pid 6285] <... munmap resumed>) = 0 [pid 5079] lstat("./202/file0", [pid 6285] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6285] <... openat resumed>) = 4 [pid 5079] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6286] ioctl(4, LOOP_SET_FD, 3 [pid 5079] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] <... write resumed>) = 2097152 [pid 6285] <... ioctl resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 6285] close(3 [pid 5079] fstat(4, [pid 6285] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6285] mkdir("./file0", 0777 [pid 5079] getdents64(4, [pid 6285] <... mkdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6289] <... write resumed>) = 2097152 [pid 6285] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] getdents64(4, [pid 6289] munmap(0x7fa49b4d5000, 2097152 [pid 6287] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6289] <... munmap resumed>) = 0 [pid 6287] <... munmap resumed>) = 0 [pid 5079] close(4 [pid 6286] <... ioctl resumed>) = 0 [pid 6286] close(3) = 0 [pid 6286] mkdir("./file0", 0777) = 0 [pid 5079] <... close resumed>) = 0 [pid 6288] <... write resumed>) = 2097152 [pid 6286] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] rmdir("./202/file0" [pid 6287] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] <... rmdir resumed>) = 0 [pid 6289] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6288] munmap(0x7fa49b4d5000, 2097152 [pid 6287] <... openat resumed>) = 4 [pid 5079] getdents64(3, [pid 6289] <... openat resumed>) = 4 [pid 6287] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [ 172.577165][ T6285] loop0: detected capacity change from 0 to 4096 [ 172.580515][ T6286] loop1: detected capacity change from 0 to 4096 [ 172.609013][ T6285] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6289] ioctl(4, LOOP_SET_FD, 3 [pid 6288] <... munmap resumed>) = 0 [pid 5079] close(3 [pid 6289] <... ioctl resumed>) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 6288] <... openat resumed>) = 4 [pid 6285] <... mount resumed>) = 0 [pid 5079] rmdir("./202" [pid 6288] ioctl(4, LOOP_SET_FD, 3 [pid 6285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6289] close(3 [pid 6288] <... ioctl resumed>) = 0 [pid 6287] <... ioctl resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6289] <... close resumed>) = 0 [pid 6288] close(3 [pid 6287] close(3 [pid 6285] <... openat resumed>) = 3 [pid 5079] mkdir("./203", 0777 [pid 6289] mkdir("./file0", 0777 [pid 6287] <... close resumed>) = 0 [pid 6285] chdir("./file0" [pid 6289] <... mkdir resumed>) = 0 [pid 6288] <... close resumed>) = 0 [pid 6287] mkdir("./file0", 0777 [pid 6285] <... chdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 6289] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6288] mkdir("./file0", 0777 [pid 6287] <... mkdir resumed>) = 0 [pid 6285] ioctl(4, LOOP_CLR_FD [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6288] <... mkdir resumed>) = 0 [pid 6287] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6286] <... mount resumed>) = 0 [pid 6285] <... ioctl resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 6285] close(4 [pid 5079] <... close resumed>) = 0 [pid 6288] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6290 [pid 6285] <... close resumed>) = 0 [ 172.621645][ T6286] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 172.634563][ T6287] loop3: detected capacity change from 0 to 4096 [ 172.642169][ T6289] loop2: detected capacity change from 0 to 4096 [ 172.652122][ T6288] loop5: detected capacity change from 0 to 4096 [ 172.668512][ T6289] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) ./strace-static-x86_64: Process 6290 attached [pid 6286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6285] exit_group(0 [pid 6290] chdir("./203" [pid 6286] <... openat resumed>) = 3 [pid 6285] <... exit_group resumed>) = ? [pid 6290] <... chdir resumed>) = 0 [pid 6286] chdir("./file0") = 0 [pid 6286] ioctl(4, LOOP_CLR_FD [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6286] <... ioctl resumed>) = 0 [pid 6285] +++ exited with 0 +++ [pid 6287] <... mount resumed>) = 0 [pid 6290] <... prctl resumed>) = 0 [pid 6289] <... mount resumed>) = 0 [pid 6287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6286] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6285, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6290] setpgid(0, 0 [pid 6289] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6287] <... openat resumed>) = 3 [pid 6286] <... close resumed>) = 0 [pid 6290] <... setpgid resumed>) = 0 [pid 6289] <... openat resumed>) = 3 [pid 6287] chdir("./file0" [pid 6286] exit_group(0 [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6289] chdir("./file0" [pid 6287] <... chdir resumed>) = 0 [pid 6286] <... exit_group resumed>) = ? [pid 5075] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6290] <... openat resumed>) = 3 [pid 6289] <... chdir resumed>) = 0 [pid 6288] <... mount resumed>) = 0 [pid 6287] ioctl(4, LOOP_CLR_FD [pid 6286] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] write(3, "1000", 4 [pid 6289] ioctl(4, LOOP_CLR_FD [pid 6288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6287] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5075] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6290] <... write resumed>) = 4 [pid 6289] <... ioctl resumed>) = 0 [pid 6288] <... openat resumed>) = 3 [pid 6287] close(4 [pid 5075] <... openat resumed>) = 3 [pid 6290] close(3 [pid 6289] close(4 [pid 6288] chdir("./file0" [pid 6287] <... close resumed>) = 0 [pid 5075] fstat(3, [pid 6290] <... close resumed>) = 0 [pid 6289] <... close resumed>) = 0 [pid 6288] <... chdir resumed>) = 0 [pid 6287] exit_group(0 [pid 5076] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6290] symlink("/dev/binderfs", "./binderfs" [pid 6289] exit_group(0 [pid 6288] ioctl(4, LOOP_CLR_FD [pid 6287] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 6290] <... symlink resumed>) = 0 [ 172.679080][ T6287] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 172.689177][ T6288] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6289] <... exit_group resumed>) = ? [pid 6288] <... ioctl resumed>) = 0 [pid 6287] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6290] memfd_create("syzkaller", 0 [pid 6289] +++ exited with 0 +++ [pid 6288] close(4 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6290] <... memfd_create resumed>) = 3 [pid 6288] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] exit_group(0 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] fstat(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6290] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6288] <... exit_group resumed>) = ? [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./193/binderfs", [pid 6288] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5078] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./193/binderfs" [pid 5080] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5076] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5075] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] lstat("./195/binderfs", [pid 5080] fstat(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] lstat("./199/binderfs", [pid 5078] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] unlink("./199/binderfs" [pid 5078] lstat("./199/binderfs", [pid 5077] <... unlink resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./199/binderfs" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 5076] unlink("./195/binderfs" [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5080] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./199/file0", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./202/binderfs", [pid 5075] lstat("./193/file0", [pid 5077] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] unlink("./202/binderfs" [pid 5075] umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5077] fstat(4, [pid 5075] fstat(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 5078] lstat("./199/file0", [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5078] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6290] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5078] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5077] close(4 [pid 5078] fstat(4, [pid 5077] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] rmdir("./199/file0" [pid 5078] getdents64(4, [pid 5075] rmdir("./193/file0" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... rmdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5077] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 5077] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5078] rmdir("./199/file0" [pid 5077] rmdir("./199" [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] mkdir("./200", 0777 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5078] rmdir("./199" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] mkdir("./200", 0777 [pid 5077] close(3 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6291 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5075] close(3 [pid 5078] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] rmdir("./193" [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6292 ./strace-static-x86_64: Process 6291 attached [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./194", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6291] chdir("./200" [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6292 attached [pid 6292] chdir("./200" [pid 6291] <... chdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6292] <... chdir resumed>) = 0 [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] close(3 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6291] <... prctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6292] <... prctl resumed>) = 0 [pid 6291] setpgid(0, 0 [pid 6292] setpgid(0, 0 [pid 6291] <... setpgid resumed>) = 0 [pid 6292] <... setpgid resumed>) = 0 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6291] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6293 [pid 6292] <... openat resumed>) = 3 [pid 6291] write(3, "1000", 4 [pid 6292] write(3, "1000", 4 [pid 6291] <... write resumed>) = 4 [pid 6292] <... write resumed>) = 4 [pid 6291] close(3 [pid 5080] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] close(3 [pid 6291] <... close resumed>) = 0 [pid 6292] <... close resumed>) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6293 attached [pid 6292] symlink("/dev/binderfs", "./binderfs" [pid 6291] <... symlink resumed>) = 0 [pid 5080] lstat("./202/file0", [pid 5076] <... umount2 resumed>) = 0 [pid 6293] chdir("./194" [pid 6292] <... symlink resumed>) = 0 [pid 6291] memfd_create("syzkaller", 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] <... chdir resumed>) = 0 [pid 6292] memfd_create("syzkaller", 0 [pid 6291] <... memfd_create resumed>) = 3 [pid 5080] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6292] <... memfd_create resumed>) = 3 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6293] <... prctl resumed>) = 0 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6291] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6292] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6293] setpgid(0, 0 [pid 5080] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] lstat("./195/file0", [pid 6293] <... setpgid resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] fstat(4, [pid 5076] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] <... openat resumed>) = 3 [pid 6290] <... write resumed>) = 2097152 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6293] write(3, "1000", 4 [pid 5080] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6293] <... write resumed>) = 4 [pid 6293] close(3 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(4, [pid 6293] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6293] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] fstat(4, [pid 6290] munmap(0x7fa49b4d5000, 2097152 [pid 6293] <... symlink resumed>) = 0 [pid 5080] close(4) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./202/file0" [pid 5076] getdents64(4, [pid 6293] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 6293] <... memfd_create resumed>) = 3 [pid 5080] getdents64(3, [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6293] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] close(3 [pid 5076] close(4 [pid 6290] <... munmap resumed>) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6290] <... openat resumed>) = 4 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 6292] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] rmdir("./202" [pid 5076] rmdir("./195/file0" [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] mkdir("./203", 0777 [pid 5076] close(3 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./195" [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] <... rmdir resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] mkdir("./196", 0777 [pid 5080] close(3) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6294 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6291] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6290] <... ioctl resumed>) = 0 [pid 6290] close(3) = 0 [pid 6290] mkdir("./file0", 0777 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6295 [pid 6290] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6294 attached [pid 6290] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 6295 attached [ 172.930334][ T6290] loop4: detected capacity change from 0 to 4096 [pid 6294] chdir("./203" [pid 6295] chdir("./196" [pid 6294] <... chdir resumed>) = 0 [pid 6295] <... chdir resumed>) = 0 [pid 6295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6295] setpgid(0, 0) = 0 [pid 6294] <... prctl resumed>) = 0 [pid 6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6294] setpgid(0, 0 [pid 6295] <... openat resumed>) = 3 [pid 6295] write(3, "1000", 4) = 4 [pid 6295] close(3) = 0 [pid 6295] symlink("/dev/binderfs", "./binderfs" [pid 6294] <... setpgid resumed>) = 0 [pid 6295] <... symlink resumed>) = 0 [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6295] memfd_create("syzkaller", 0 [pid 6294] <... openat resumed>) = 3 [pid 6295] <... memfd_create resumed>) = 3 [pid 6294] write(3, "1000", 4 [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6294] <... write resumed>) = 4 [pid 6295] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6294] close(3) = 0 [pid 6294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6294] memfd_create("syzkaller", 0) = 3 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6291] <... write resumed>) = 2097152 [pid 6293] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6292] <... write resumed>) = 2097152 [ 172.985939][ T6290] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6292] munmap(0x7fa49b4d5000, 2097152 [pid 6291] munmap(0x7fa49b4d5000, 2097152 [pid 6292] <... munmap resumed>) = 0 [pid 6290] <... mount resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6291] <... munmap resumed>) = 0 [pid 6290] chdir("./file0" [pid 6292] <... openat resumed>) = 4 [pid 6291] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6290] <... chdir resumed>) = 0 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 6291] <... openat resumed>) = 4 [pid 6290] ioctl(4, LOOP_CLR_FD [pid 6292] <... ioctl resumed>) = 0 [pid 6291] ioctl(4, LOOP_SET_FD, 3 [pid 6290] <... ioctl resumed>) = 0 [pid 6290] close(4) = 0 [pid 6290] exit_group(0) = ? [pid 6290] +++ exited with 0 +++ [pid 6292] close(3 [pid 6291] <... ioctl resumed>) = 0 [pid 6292] <... close resumed>) = 0 [pid 6291] close(3 [pid 6292] mkdir("./file0", 0777 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6290, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6291] <... close resumed>) = 0 [pid 5079] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6291] mkdir("./file0", 0777 [pid 5079] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] <... mkdir resumed>) = 0 [pid 6291] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] lstat("./203/binderfs", [pid 6292] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./203/binderfs" [pid 6295] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6294] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... unlink resumed>) = 0 [pid 6293] <... write resumed>) = 2097152 [pid 5079] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./203/file0", [pid 6293] <... munmap resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6293] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6293] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6293] ioctl(4, LOOP_SET_FD, 3 [pid 5079] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [ 173.072778][ T6292] loop3: detected capacity change from 0 to 4096 [ 173.079940][ T6291] loop2: detected capacity change from 0 to 4096 [ 173.101478][ T6291] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 173.112223][ T6292] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 5079] rmdir("./203/file0") = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./203") = 0 [pid 5079] mkdir("./204", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6293] <... ioctl resumed>) = 0 [pid 6293] close(3) = 0 [pid 6293] mkdir("./file0", 0777) = 0 [pid 6293] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 6291] <... mount resumed>) = 0 [pid 6292] <... mount resumed>) = 0 [pid 6291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6291] chdir("./file0" [pid 6292] <... openat resumed>) = 3 [pid 6291] <... chdir resumed>) = 0 [pid 6292] chdir("./file0" [pid 6291] ioctl(4, LOOP_CLR_FD [pid 6292] <... chdir resumed>) = 0 [pid 6291] <... ioctl resumed>) = 0 [pid 6292] ioctl(4, LOOP_CLR_FD [pid 6291] close(4 [pid 6292] <... ioctl resumed>) = 0 [pid 6291] <... close resumed>) = 0 [pid 6292] close(4 [pid 6291] exit_group(0 [pid 6292] <... close resumed>) = 0 [pid 6291] <... exit_group resumed>) = ? [pid 6292] exit_group(0 [pid 6291] +++ exited with 0 +++ [pid 6292] <... exit_group resumed>) = ? [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6292] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6296 [pid 5077] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5078] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6296 attached [pid 5078] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 6296] chdir("./204" [pid 5078] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6296] <... chdir resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] <... prctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] lstat("./200/binderfs", [pid 6296] setpgid(0, 0 [pid 5078] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6296] <... setpgid resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] unlink("./200/binderfs" [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] lstat("./200/binderfs", [pid 5077] <... unlink resumed>) = 0 [pid 6296] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] write(3, "1000", 4 [pid 5078] unlink("./200/binderfs" [pid 6296] <... write resumed>) = 4 [pid 6295] <... write resumed>) = 2097152 [pid 6294] <... write resumed>) = 2097152 [pid 5078] <... unlink resumed>) = 0 [ 173.134842][ T6293] loop0: detected capacity change from 0 to 4096 [ 173.164929][ T6293] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6296] close(3 [pid 5078] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] <... close resumed>) = 0 [pid 6295] munmap(0x7fa49b4d5000, 2097152 [pid 6294] munmap(0x7fa49b4d5000, 2097152 [pid 5077] <... umount2 resumed>) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs" [pid 6295] <... munmap resumed>) = 0 [pid 6294] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6296] <... symlink resumed>) = 0 [pid 6295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6294] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6295] <... openat resumed>) = 4 [pid 6294] <... openat resumed>) = 4 [pid 6296] memfd_create("syzkaller", 0 [pid 6295] ioctl(4, LOOP_SET_FD, 3 [pid 6294] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] <... memfd_create resumed>) = 3 [pid 6295] <... ioctl resumed>) = 0 [pid 6293] <... mount resumed>) = 0 [pid 5078] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6295] close(3 [pid 6293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./200/file0", [pid 6296] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6295] <... close resumed>) = 0 [pid 6294] <... ioctl resumed>) = 0 [pid 6293] <... openat resumed>) = 3 [pid 5078] lstat("./200/file0", [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6294] close(3) = 0 [pid 6294] mkdir("./file0", 0777) = 0 [pid 6294] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6293] chdir("./file0" [pid 6295] mkdir("./file0", 0777 [pid 6293] <... chdir resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6295] <... mkdir resumed>) = 0 [pid 6293] ioctl(4, LOOP_CLR_FD [pid 5078] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6293] <... ioctl resumed>) = 0 [ 173.245973][ T6295] loop1: detected capacity change from 0 to 4096 [ 173.270388][ T6294] loop5: detected capacity change from 0 to 4096 [pid 6293] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6293] <... close resumed>) = 0 [pid 6293] exit_group(0 [pid 5077] <... openat resumed>) = 4 [pid 6293] <... exit_group resumed>) = ? [pid 5078] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(4, [pid 6293] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 4 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5078] fstat(4, [pid 5077] getdents64(4, [pid 5075] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5077] getdents64(4, [pid 5075] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 5077] close(4 [pid 5075] fstat(3, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] close(4 [pid 5077] rmdir("./200/file0" [pid 5075] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] rmdir("./200/file0" [pid 5077] getdents64(3, [pid 5075] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6294] <... mount resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] <... mount resumed>) = 0 [pid 6294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] getdents64(3, [pid 5077] close(3 [pid 5075] lstat("./194/binderfs", [pid 6295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6294] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6296] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6295] <... openat resumed>) = 3 [pid 6294] chdir("./file0" [pid 5078] close(3 [pid 5077] rmdir("./200" [pid 5075] unlink("./194/binderfs" [pid 6295] chdir("./file0" [pid 6294] <... chdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6295] <... chdir resumed>) = 0 [pid 6294] ioctl(4, LOOP_CLR_FD [pid 5078] rmdir("./200" [pid 5077] mkdir("./201", 0777 [pid 5075] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6295] ioctl(4, LOOP_CLR_FD [pid 6294] <... ioctl resumed>) = 0 [ 173.288075][ T6294] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 173.304058][ T6295] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6294] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 6296] <... write resumed>) = 2097152 [pid 6295] <... ioctl resumed>) = 0 [pid 6294] <... close resumed>) = 0 [pid 5078] mkdir("./201", 0777 [pid 5077] <... mkdir resumed>) = 0 [pid 6296] munmap(0x7fa49b4d5000, 2097152 [pid 6295] close(4 [pid 6294] exit_group(0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6296] <... munmap resumed>) = 0 [pid 6295] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 6295] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6295] <... exit_group resumed>) = ? [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6295] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6294] <... exit_group resumed>) = ? [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6297 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 6296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6298 [pid 6296] <... openat resumed>) = 4 [pid 6296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6294] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6297 attached ) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6298 attached [pid 6298] chdir("./201" [pid 5076] <... openat resumed>) = 3 [pid 6298] <... chdir resumed>) = 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6297] chdir("./201" [pid 5080] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] setpgid(0, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./194/file0", [pid 6298] <... setpgid resumed>) = 0 [pid 6297] <... chdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6298] <... openat resumed>) = 3 [pid 6297] <... prctl resumed>) = 0 [pid 5080] fstat(3, [pid 5076] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] write(3, "1000", 4 [pid 6297] setpgid(0, 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... write resumed>) = 4 [pid 6297] <... setpgid resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] lstat("./196/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] close(3) = 0 [pid 6298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6298] memfd_create("syzkaller", 0 [pid 6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6296] close(3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] <... memfd_create resumed>) = 3 [pid 6297] <... openat resumed>) = 3 [pid 6296] <... close resumed>) = 0 [pid 5080] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./196/binderfs" [pid 6298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6297] write(3, "1000", 4 [pid 6296] mkdir("./file0", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 6298] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6297] <... write resumed>) = 4 [pid 5080] lstat("./203/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5075] fstat(4, [pid 6297] close(3 [pid 6296] <... mkdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6297] <... close resumed>) = 0 [pid 6296] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] unlink("./203/binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 5075] getdents64(4, [pid 6297] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6297] <... symlink resumed>) = 0 [pid 5080] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6297] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6297] <... memfd_create resumed>) = 3 [pid 5075] close(4 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6297] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] rmdir("./194/file0" [pid 6298] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./194") = 0 [pid 5075] mkdir("./195", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] lstat("./196/file0", [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] close(3 [pid 5076] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6299 [pid 5080] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6296] <... mount resumed>) = 0 [pid 5080] lstat("./203/file0", [pid 5076] getdents64(4, ./strace-static-x86_64: Process 6299 attached [pid 6296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6296] <... openat resumed>) = 3 [pid 5080] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 6299] chdir("./195" [pid 6296] chdir("./file0" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6299] <... chdir resumed>) = 0 [pid 6296] <... chdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 173.393547][ T6296] loop4: detected capacity change from 0 to 4096 [ 173.432345][ T6296] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5076] close(4 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6296] ioctl(4, LOOP_CLR_FD [pid 5080] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6299] <... prctl resumed>) = 0 [pid 6296] <... ioctl resumed>) = 0 [pid 5080] fstat(4, [pid 5076] rmdir("./196/file0" [pid 6299] setpgid(0, 0 [pid 6296] close(4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6299] <... setpgid resumed>) = 0 [pid 6296] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] getdents64(3, [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6296] exit_group(0 [pid 6299] <... openat resumed>) = 3 [pid 6296] <... exit_group resumed>) = ? [pid 5080] getdents64(4, [pid 5076] close(3 [pid 6299] write(3, "1000", 4 [pid 6296] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 6299] <... write resumed>) = 4 [pid 5080] close(4 [pid 5076] rmdir("./196" [pid 6299] close(3 [pid 5080] <... close resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... rmdir resumed>) = 0 [pid 6299] <... close resumed>) = 0 [pid 5080] rmdir("./203/file0" [pid 5079] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./197", 0777 [pid 6299] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 6299] <... symlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5079] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6299] memfd_create("syzkaller", 0 [pid 5080] close(3 [pid 5079] fstat(3, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6299] <... memfd_create resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] rmdir("./203" [pid 5079] getdents64(3, [pid 5076] close(3 [pid 6299] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6298] <... write resumed>) = 2097152 [pid 6297] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... close resumed>) = 0 [pid 5080] mkdir("./204", 0777 [pid 5079] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6298] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] lstat("./204/binderfs", [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6300 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] unlink("./204/binderfs" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... unlink resumed>) = 0 [pid 5080] close(3 [pid 5079] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... munmap resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 6298] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6300 attached [pid 6298] <... openat resumed>) = 4 [pid 6300] chdir("./197" [pid 6298] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6301 [pid 6300] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6301 attached [pid 6301] chdir("./204") = 0 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6298] <... ioctl resumed>) = 0 [pid 6301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6300] <... prctl resumed>) = 0 [pid 6298] close(3 [pid 6301] <... prctl resumed>) = 0 [pid 6300] setpgid(0, 0 [pid 6298] <... close resumed>) = 0 [pid 6301] setpgid(0, 0 [pid 6300] <... setpgid resumed>) = 0 [pid 6299] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6298] mkdir("./file0", 0777 [pid 6301] <... setpgid resumed>) = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... openat resumed>) = 3 [pid 6298] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... openat resumed>) = 3 [pid 6300] write(3, "1000", 4 [pid 6298] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] lstat("./204/file0", [pid 6301] write(3, "1000", 4 [pid 6300] <... write resumed>) = 4 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6301] <... write resumed>) = 4 [pid 5079] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6301] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... openat resumed>) = 4 [pid 6301] <... symlink resumed>) = 0 [pid 5079] fstat(4, [pid 6301] memfd_create("syzkaller", 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6301] <... memfd_create resumed>) = 3 [pid 5079] getdents64(4, [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6301] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6300] close(3 [pid 5079] getdents64(4, [pid 6300] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6300] symlink("/dev/binderfs", "./binderfs" [pid 5079] close(4 [pid 6300] <... symlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./204/file0") = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 5079] getdents64(3, [pid 6300] <... memfd_create resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] close(3 [pid 6300] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./204") = 0 [pid 5079] mkdir("./205", 0777 [pid 6297] <... write resumed>) = 2097152 [pid 5079] <... mkdir resumed>) = 0 [pid 6297] munmap(0x7fa49b4d5000, 2097152 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6297] <... munmap resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6302 [pid 6297] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6302 attached ) = 4 [pid 6302] chdir("./205" [ 173.557946][ T6298] loop3: detected capacity change from 0 to 4096 [ 173.579630][ T6298] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6297] ioctl(4, LOOP_SET_FD, 3 [pid 6302] <... chdir resumed>) = 0 [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6302] setpgid(0, 0) = 0 [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6302] write(3, "1000", 4) = 4 [pid 6302] close(3) = 0 [pid 6302] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6302] memfd_create("syzkaller", 0) = 3 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6299] <... write resumed>) = 2097152 [pid 6297] <... ioctl resumed>) = 0 [pid 6297] close(3) = 0 [pid 6297] mkdir("./file0", 0777 [pid 6298] <... mount resumed>) = 0 [pid 6297] <... mkdir resumed>) = 0 [ 173.627330][ T6297] loop2: detected capacity change from 0 to 4096 [pid 6297] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6298] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6299] munmap(0x7fa49b4d5000, 2097152 [pid 6301] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6300] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6299] <... munmap resumed>) = 0 [pid 6298] chdir("./file0" [pid 6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6298] <... chdir resumed>) = 0 [pid 6299] <... openat resumed>) = 4 [pid 6298] ioctl(4, LOOP_CLR_FD [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 6298] <... ioctl resumed>) = 0 [pid 6298] close(4) = 0 [ 173.671055][ T6297] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6298] exit_group(0) = ? [pid 6298] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6299] <... ioctl resumed>) = 0 [pid 6299] close(3 [pid 5078] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6299] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] mkdir("./file0", 0777 [pid 5078] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6299] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6299] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5078] fstat(3, [pid 6297] <... mount resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6302] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] getdents64(3, [pid 6297] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6297] chdir("./file0" [pid 5078] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... chdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6297] ioctl(4, LOOP_CLR_FD [pid 5078] lstat("./201/binderfs", [pid 6297] <... ioctl resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6297] close(4 [pid 5078] unlink("./201/binderfs" [pid 6297] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6297] exit_group(0 [pid 5078] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... exit_group resumed>) = ? [pid 6297] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6300] <... write resumed>) = 2097152 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6300] munmap(0x7fa49b4d5000, 2097152 [pid 6299] <... mount resumed>) = 0 [pid 5078] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 173.725859][ T6299] loop0: detected capacity change from 0 to 4096 [ 173.763350][ T6299] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] lstat("./201/file0", [pid 6300] <... munmap resumed>) = 0 [pid 6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6301] <... write resumed>) = 2097152 [pid 6300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6300] <... openat resumed>) = 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] munmap(0x7fa49b4d5000, 2097152 [pid 6300] ioctl(4, LOOP_SET_FD, 3 [pid 6299] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6301] <... munmap resumed>) = 0 [pid 5078] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6300] <... ioctl resumed>) = 0 [pid 6299] chdir("./file0" [pid 5078] getdents64(4, [pid 5077] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6300] close(3 [pid 6299] <... chdir resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6301] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6300] <... close resumed>) = 0 [pid 6299] ioctl(4, LOOP_CLR_FD [pid 5078] close(4 [pid 5077] fstat(3, [pid 6301] <... openat resumed>) = 4 [pid 6300] mkdir("./file0", 0777 [pid 6299] <... ioctl resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6301] ioctl(4, LOOP_SET_FD, 3 [pid 6300] <... mkdir resumed>) = 0 [pid 6299] close(4 [pid 5078] rmdir("./201/file0" [pid 5077] getdents64(3, [pid 6300] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6299] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6299] exit_group(0 [pid 5078] getdents64(3, [pid 5077] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./201") = 0 [pid 5078] mkdir("./202", 0777 [pid 6299] <... exit_group resumed>) = ? [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6299] +++ exited with 0 +++ [pid 5078] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] lstat("./201/binderfs", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] close(3 [pid 5077] unlink("./201/binderfs" [pid 5078] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] <... ioctl resumed>) = 0 [pid 6301] close(3 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6303 [pid 6301] <... close resumed>) = 0 [pid 5075] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] mkdir("./file0", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 173.831343][ T6300] loop1: detected capacity change from 0 to 4096 [ 173.844852][ T6301] loop5: detected capacity change from 0 to 4096 [ 173.854539][ T6300] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6301] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6303 attached [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6302] <... write resumed>) = 2097152 [pid 5075] getdents64(3, [pid 6302] munmap(0x7fa49b4d5000, 2097152 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./195/binderfs", [pid 6303] chdir("./202" [pid 6302] <... munmap resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6303] <... chdir resumed>) = 0 [pid 5075] unlink("./195/binderfs" [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6303] <... prctl resumed>) = 0 [pid 5077] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6303] setpgid(0, 0 [pid 6302] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6303] <... setpgid resumed>) = 0 [pid 6302] <... openat resumed>) = 4 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6302] ioctl(4, LOOP_SET_FD, 3 [pid 5077] lstat("./201/file0", [pid 6303] <... openat resumed>) = 3 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6303] write(3, "1000", 4 [pid 5075] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6303] <... write resumed>) = 4 [pid 5077] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6303] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./195/file0", [pid 6303] <... close resumed>) = 0 [pid 6300] <... mount resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6303] symlink("/dev/binderfs", "./binderfs" [pid 6300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5075] umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6303] <... symlink resumed>) = 0 [pid 6300] <... openat resumed>) = 3 [pid 5077] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6303] memfd_create("syzkaller", 0 [pid 6300] chdir("./file0" [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6303] <... memfd_create resumed>) = 3 [pid 6300] <... chdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6300] ioctl(4, LOOP_CLR_FD [pid 5075] fstat(4, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6303] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6300] <... ioctl resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6300] close(4 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 6300] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6302] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 6302] close(3 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6302] <... close resumed>) = 0 [pid 5075] close(4 [pid 6302] mkdir("./file0", 0777 [pid 5075] <... close resumed>) = 0 [pid 6302] <... mkdir resumed>) = 0 [pid 5075] rmdir("./195/file0" [pid 6302] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 173.885915][ T6301] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 173.918632][ T6302] loop4: detected capacity change from 0 to 4096 [pid 5075] <... rmdir resumed>) = 0 [pid 6300] exit_group(0 [pid 5077] close(4 [pid 5075] getdents64(3, [pid 6300] <... exit_group resumed>) = ? [pid 5077] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6300] +++ exited with 0 +++ [pid 5077] rmdir("./201/file0" [pid 5075] rmdir("./195" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6300, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 5075] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] mkdir("./196", 0777 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5077] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6301] <... mount resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] rmdir("./201" [pid 5076] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6301] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6301] chdir("./file0" [pid 5077] mkdir("./202", 0777 [pid 5076] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 6301] <... chdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 6301] ioctl(4, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] fstat(3, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6301] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6301] close(4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(3, [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6304 [pid 6301] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6301] exit_group(0 [pid 5077] close(3 [pid 5076] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] <... exit_group resumed>) = ? [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6301] +++ exited with 0 +++ [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6301, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5076] unlink("./197/binderfs" [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6305 [pid 5076] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6304 attached [pid 5080] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] chdir("./196"./strace-static-x86_64: Process 6305 attached ) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6305] chdir("./202" [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] <... chdir resumed>) = 0 [pid 6304] <... prctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6304] setpgid(0, 0 [pid 5080] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] lstat("./197/file0", [pid 6305] <... prctl resumed>) = 0 [pid 6304] <... setpgid resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6305] setpgid(0, 0 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 173.961579][ T6302] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5080] fstat(3, [pid 5076] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] <... setpgid resumed>) = 0 [pid 6304] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6304] write(3, "1000", 4 [pid 5080] getdents64(3, [pid 5076] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6305] <... openat resumed>) = 3 [pid 6304] <... write resumed>) = 4 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... openat resumed>) = 4 [pid 6305] write(3, "1000", 4 [pid 6304] close(3 [pid 5080] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 6305] <... write resumed>) = 4 [pid 6304] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6305] close(3 [pid 6304] symlink("/dev/binderfs", "./binderfs" [pid 6302] <... mount resumed>) = 0 [pid 5080] lstat("./204/binderfs", [pid 5076] getdents64(4, [pid 6303] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6305] <... close resumed>) = 0 [pid 6304] <... symlink resumed>) = 0 [pid 6302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6305] symlink("/dev/binderfs", "./binderfs" [pid 6302] <... openat resumed>) = 3 [pid 5080] unlink("./204/binderfs" [pid 5076] getdents64(4, [pid 6305] <... symlink resumed>) = 0 [pid 6304] memfd_create("syzkaller", 0 [pid 6302] chdir("./file0" [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6305] memfd_create("syzkaller", 0 [pid 6304] <... memfd_create resumed>) = 3 [pid 6302] <... chdir resumed>) = 0 [pid 5080] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(4 [pid 6305] <... memfd_create resumed>) = 3 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6302] ioctl(4, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6304] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6302] <... ioctl resumed>) = 0 [pid 5076] rmdir("./197/file0" [pid 6305] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6302] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 6302] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6302] exit_group(0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6302] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = 0 [pid 5076] close(3 [pid 6303] <... write resumed>) = 2097152 [pid 6302] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 6303] munmap(0x7fa49b4d5000, 2097152 [pid 5076] rmdir("./197" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6302, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5076] <... rmdir resumed>) = 0 [pid 5079] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./198", 0777 [pid 5080] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 6303] <... munmap resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6303] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] lstat("./204/file0", [pid 5079] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6303] <... openat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] fstat(3, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6304] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 5080] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5076] close(3 [pid 5080] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5079] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] fstat(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./205/binderfs", [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6306 [pid 5080] getdents64(4, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] unlink("./205/binderfs" [pid 5080] getdents64(4, [pid 5079] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4) = 0 [pid 5080] rmdir("./204/file0") = 0 ./strace-static-x86_64: Process 6306 attached [pid 5080] getdents64(3, [pid 6306] chdir("./198" [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6306] <... chdir resumed>) = 0 [pid 5080] close(3 [pid 6306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... close resumed>) = 0 [pid 6306] <... prctl resumed>) = 0 [pid 5080] rmdir("./204" [pid 6306] setpgid(0, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 6306] <... setpgid resumed>) = 0 [pid 5080] mkdir("./205", 0777 [pid 6306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6303] <... ioctl resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 6306] <... openat resumed>) = 3 [pid 6303] close(3 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6306] write(3, "1000", 4 [pid 6303] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 6306] <... write resumed>) = 4 [pid 6303] mkdir("./file0", 0777 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6306] close(3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6306] <... close resumed>) = 0 [pid 6303] <... mkdir resumed>) = 0 [pid 5080] close(3 [pid 6306] symlink("/dev/binderfs", "./binderfs" [pid 6303] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... close resumed>) = 0 [pid 6306] <... symlink resumed>) = 0 [pid 6305] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6306] memfd_create("syzkaller", 0 [pid 5079] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] <... memfd_create resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6307 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] lstat("./205/file0", [pid 6306] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6304] <... write resumed>) = 2097152 [pid 5079] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6307 attached [pid 5079] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6307] chdir("./205" [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, [pid 6307] <... chdir resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6304] <... munmap resumed>) = 0 [pid 5079] getdents64(4, [pid 6307] <... prctl resumed>) = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6307] setpgid(0, 0 [pid 6304] <... openat resumed>) = 4 [pid 5079] getdents64(4, [pid 6307] <... setpgid resumed>) = 0 [pid 6304] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] close(4) = 0 [pid 5079] rmdir("./205/file0") = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [ 174.120974][ T6303] loop3: detected capacity change from 0 to 4096 [ 174.158227][ T6303] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6307] <... openat resumed>) = 3 [pid 5079] rmdir("./205" [pid 6307] write(3, "1000", 4 [pid 5079] <... rmdir resumed>) = 0 [pid 6307] <... write resumed>) = 4 [pid 5079] mkdir("./206", 0777 [pid 6307] close(3 [pid 5079] <... mkdir resumed>) = 0 [pid 6307] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6307] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... openat resumed>) = 3 [pid 6307] <... symlink resumed>) = 0 [pid 6304] <... ioctl resumed>) = 0 [pid 6303] <... mount resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 6307] memfd_create("syzkaller", 0 [pid 6304] close(3 [pid 6303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6307] <... memfd_create resumed>) = 3 [pid 6304] <... close resumed>) = 0 [pid 6303] <... openat resumed>) = 3 [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6305] <... write resumed>) = 2097152 [pid 6304] mkdir("./file0", 0777 [pid 6303] chdir("./file0" [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6308 ./strace-static-x86_64: Process 6308 attached [pid 6307] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6306] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6305] munmap(0x7fa49b4d5000, 2097152 [pid 6304] <... mkdir resumed>) = 0 [pid 6303] <... chdir resumed>) = 0 [pid 6308] chdir("./206" [pid 6305] <... munmap resumed>) = 0 [pid 6308] <... chdir resumed>) = 0 [ 174.197675][ T6304] loop0: detected capacity change from 0 to 4096 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6304] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6303] ioctl(4, LOOP_CLR_FD [pid 6308] setpgid(0, 0) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6303] <... ioctl resumed>) = 0 [pid 6308] <... openat resumed>) = 3 [pid 6305] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6308] write(3, "1000", 4 [pid 6305] <... openat resumed>) = 4 [pid 6308] <... write resumed>) = 4 [pid 6305] ioctl(4, LOOP_SET_FD, 3 [pid 6308] close(3 [pid 6303] close(4 [pid 6308] <... close resumed>) = 0 [pid 6303] <... close resumed>) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6308] memfd_create("syzkaller", 0) = 3 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6306] <... write resumed>) = 2097152 [pid 6303] exit_group(0) = ? [pid 6303] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5078] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6306] munmap(0x7fa49b4d5000, 2097152 [pid 5078] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6307] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6306] <... munmap resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] fstat(3, [pid 6306] <... openat resumed>) = 4 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 174.271451][ T6304] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 174.276785][ T6305] loop2: detected capacity change from 0 to 4096 [pid 6306] ioctl(4, LOOP_SET_FD, 3 [pid 6304] <... mount resumed>) = 0 [pid 5078] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./202/binderfs") = 0 [pid 6305] <... ioctl resumed>) = 0 [pid 5078] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6306] <... ioctl resumed>) = 0 [pid 6305] close(3 [pid 6304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... umount2 resumed>) = 0 [pid 6306] close(3 [pid 6305] <... close resumed>) = 0 [pid 6304] <... openat resumed>) = 3 [pid 6306] <... close resumed>) = 0 [pid 6305] mkdir("./file0", 0777 [pid 6304] chdir("./file0" [pid 6306] mkdir("./file0", 0777 [pid 6305] <... mkdir resumed>) = 0 [pid 6304] <... chdir resumed>) = 0 [pid 6305] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6304] ioctl(4, LOOP_CLR_FD [pid 6307] <... write resumed>) = 2097152 [pid 6306] <... mkdir resumed>) = 0 [pid 6304] <... ioctl resumed>) = 0 [pid 6307] munmap(0x7fa49b4d5000, 2097152 [pid 6306] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6304] close(4) = 0 [pid 5078] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6304] exit_group(0 [pid 5078] <... openat resumed>) = 4 [pid 6308] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [ 174.341345][ T6306] loop1: detected capacity change from 0 to 4096 [ 174.370024][ T6305] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] close(4 [pid 6304] <... exit_group resumed>) = ? [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./202/file0" [pid 6304] +++ exited with 0 +++ [pid 5078] <... rmdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6307] <... munmap resumed>) = 0 [pid 5078] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./202") = 0 [pid 5075] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6307] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] mkdir("./203", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6307] <... openat resumed>) = 4 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6307] ioctl(4, LOOP_SET_FD, 3 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5075] fstat(3, [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] getdents64(3, [pid 5078] close(3 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./196/binderfs", [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6309 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./196/binderfs") = 0 [pid 5075] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6309 attached [pid 6307] <... ioctl resumed>) = 0 [pid 5075] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] chdir("./203" [pid 6307] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6309] <... chdir resumed>) = 0 [pid 6307] <... close resumed>) = 0 [pid 5075] lstat("./196/file0", [pid 6309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6307] mkdir("./file0", 0777 [pid 6305] <... mount resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6309] <... prctl resumed>) = 0 [pid 6305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] setpgid(0, 0 [pid 6307] <... mkdir resumed>) = 0 [pid 6305] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6309] <... setpgid resumed>) = 0 [pid 6307] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 174.391067][ T6306] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 174.422634][ T6307] loop5: detected capacity change from 0 to 4096 [pid 6305] chdir("./file0" [pid 5075] openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6305] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6309] <... openat resumed>) = 3 [pid 6305] ioctl(4, LOOP_CLR_FD [pid 5075] fstat(4, [pid 6309] write(3, "1000", 4 [pid 6305] <... ioctl resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6309] <... write resumed>) = 4 [pid 6305] close(4 [pid 5075] getdents64(4, [pid 6309] close(3 [pid 6305] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6309] <... close resumed>) = 0 [pid 6305] exit_group(0 [pid 5075] getdents64(4, [pid 6309] symlink("/dev/binderfs", "./binderfs" [pid 6308] <... write resumed>) = 2097152 [pid 6305] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6309] <... symlink resumed>) = 0 [pid 6305] +++ exited with 0 +++ [pid 5075] close(4 [pid 6309] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 6309] <... memfd_create resumed>) = 3 [pid 6308] munmap(0x7fa49b4d5000, 2097152 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5075] rmdir("./196/file0" [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6306] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6309] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] getdents64(3, [pid 6306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 6306] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 6306] chdir("./file0" [pid 5077] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./196" [pid 6308] <... munmap resumed>) = 0 [pid 6306] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 6308] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6306] ioctl(4, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] mkdir("./197", 0777 [pid 6308] <... openat resumed>) = 4 [pid 6306] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6306] close(4 [pid 5077] fstat(3, [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6306] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6306] exit_group(0 [pid 5077] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6306] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6306] +++ exited with 0 +++ [pid 5077] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6306, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6310 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./202/binderfs", [pid 5076] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6310 attached [pid 5077] unlink("./202/binderfs" [pid 5076] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6310] chdir("./197" [pid 5076] <... openat resumed>) = 3 [pid 6310] <... chdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] fstat(3, [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6310] <... prctl resumed>) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 6310] setpgid(0, 0 [pid 6308] close(3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6310] <... setpgid resumed>) = 0 [pid 6308] <... close resumed>) = 0 [pid 5076] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6308] mkdir("./file0", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6310] <... openat resumed>) = 3 [pid 6308] <... mkdir resumed>) = 0 [pid 5076] lstat("./198/binderfs", [pid 6310] write(3, "1000", 4 [pid 6308] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6310] <... write resumed>) = 4 [ 174.456578][ T6307] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 174.488637][ T6308] loop4: detected capacity change from 0 to 4096 [pid 5076] unlink("./198/binderfs" [pid 6310] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 6310] <... close resumed>) = 0 [pid 5076] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6310] memfd_create("syzkaller", 0) = 3 [pid 6310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5077] lstat("./202/file0", [pid 5076] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] lstat("./198/file0", [pid 5077] fstat(4, [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4) = 0 [pid 5077] rmdir("./202/file0") = 0 [pid 5076] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5077] close(3) = 0 [pid 5076] fstat(4, [pid 5077] rmdir("./202" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./203", 0777 [pid 5076] getdents64(4, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [ 174.523511][ T6308] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] close(4 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5076] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./198/file0" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6307] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6311 [pid 5076] getdents64(3, [pid 6307] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6307] chdir("./file0" [pid 5076] close(3./strace-static-x86_64: Process 6311 attached ) = 0 [pid 6311] chdir("./203" [pid 6307] <... chdir resumed>) = 0 [pid 6311] <... chdir resumed>) = 0 [pid 6307] ioctl(4, LOOP_CLR_FD [pid 5076] rmdir("./198" [pid 6311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6307] <... ioctl resumed>) = 0 [pid 6311] <... prctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6307] close(4 [pid 6311] setpgid(0, 0 [pid 6307] <... close resumed>) = 0 [pid 5076] mkdir("./199", 0777 [pid 6311] <... setpgid resumed>) = 0 [pid 6308] <... mount resumed>) = 0 [pid 6307] exit_group(0 [pid 6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6307] <... exit_group resumed>) = ? [pid 6311] <... openat resumed>) = 3 [pid 6308] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 6311] write(3, "1000", 4 [pid 6308] chdir("./file0" [pid 6311] <... write resumed>) = 4 [pid 6308] <... chdir resumed>) = 0 [pid 6311] close(3 [pid 6308] ioctl(4, LOOP_CLR_FD [pid 6307] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6311] <... close resumed>) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 6311] symlink("/dev/binderfs", "./binderfs" [pid 6308] close(4 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6311] <... symlink resumed>) = 0 [pid 6310] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6308] <... close resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6311] memfd_create("syzkaller", 0 [pid 6309] <... write resumed>) = 2097152 [pid 6308] exit_group(0 [pid 6311] <... memfd_create resumed>) = 3 [pid 6309] munmap(0x7fa49b4d5000, 2097152 [pid 6308] <... exit_group resumed>) = ? [pid 6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6309] <... munmap resumed>) = 0 [pid 6308] +++ exited with 0 +++ [pid 5080] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 6311] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6308, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5080] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 5079] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5079] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6309] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] <... openat resumed>) = 3 [pid 6309] <... openat resumed>) = 4 [pid 5080] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] fstat(3, [pid 6309] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./205/binderfs", [pid 5079] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] unlink("./205/binderfs" [pid 5079] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./206/binderfs", [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6312 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] unlink("./206/binderfs") = 0 [pid 5079] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6312 attached [pid 6312] chdir("./199") = 0 [pid 6312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6312] setpgid(0, 0) = 0 [pid 6312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6312] write(3, "1000", 4) = 4 [pid 6312] close(3) = 0 [pid 6312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6312] memfd_create("syzkaller", 0 [pid 6309] <... ioctl resumed>) = 0 [pid 6312] <... memfd_create resumed>) = 3 [pid 6309] close(3 [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6309] <... close resumed>) = 0 [pid 6312] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6309] mkdir("./file0", 0777) = 0 [pid 6309] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... umount2 resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [ 174.675992][ T6309] loop3: detected capacity change from 0 to 4096 [pid 6310] <... write resumed>) = 2097152 [pid 5080] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./205/file0", [pid 5079] lstat("./206/file0", [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6310] munmap(0x7fa49b4d5000, 2097152 [pid 5080] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 4 [pid 6310] <... munmap resumed>) = 0 [pid 5080] fstat(4, [pid 5079] fstat(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5079] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 5079] getdents64(4, [pid 6310] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6310] <... openat resumed>) = 4 [pid 5080] close(4 [pid 5079] close(4 [pid 6310] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6310] <... ioctl resumed>) = 0 [pid 5080] rmdir("./205/file0" [pid 5079] rmdir("./206/file0" [pid 6311] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5079] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 5079] close(3 [pid 5080] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5080] rmdir("./205" [pid 5079] rmdir("./206" [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5080] mkdir("./206", 0777 [pid 5079] mkdir("./207", 0777 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6310] close(3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6313 [pid 6310] <... close resumed>) = 0 [pid 6310] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 6313 attached [pid 6310] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6313] chdir("./206") = 0 [pid 5079] <... openat resumed>) = 3 [ 174.717306][ T6309] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 174.742620][ T6310] loop0: detected capacity change from 0 to 4096 [pid 6313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6313] <... prctl resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6313] setpgid(0, 0 [pid 5079] close(3 [pid 6313] <... setpgid resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6313] <... openat resumed>) = 3 [pid 6313] write(3, "1000", 4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6314 [pid 6313] <... write resumed>) = 4 [pid 6312] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6313] close(3) = 0 [pid 6313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6313] memfd_create("syzkaller", 0 [pid 6309] <... mount resumed>) = 0 [pid 6313] <... memfd_create resumed>) = 3 [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6309] <... openat resumed>) = 3 [pid 6313] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6309] chdir("./file0"./strace-static-x86_64: Process 6314 attached [pid 6311] <... write resumed>) = 2097152 [pid 6309] <... chdir resumed>) = 0 [pid 6314] chdir("./207" [pid 6309] ioctl(4, LOOP_CLR_FD [pid 6314] <... chdir resumed>) = 0 [pid 6309] <... ioctl resumed>) = 0 [pid 6309] close(4 [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6309] <... close resumed>) = 0 [pid 6309] exit_group(0 [pid 6314] <... prctl resumed>) = 0 [pid 6309] <... exit_group resumed>) = ? [pid 6314] setpgid(0, 0 [pid 6309] +++ exited with 0 +++ [pid 6314] <... setpgid resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6309, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6311] munmap(0x7fa49b4d5000, 2097152 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 6314] <... openat resumed>) = 3 [pid 5078] <... restart_syscall resumed>) = 0 [pid 6314] write(3, "1000", 4) = 4 [pid 6314] close(3 [pid 5078] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6314] <... close resumed>) = 0 [ 174.779930][ T6310] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6314] symlink("/dev/binderfs", "./binderfs" [pid 6311] <... munmap resumed>) = 0 [pid 6310] <... mount resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6314] <... symlink resumed>) = 0 [pid 6310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6314] memfd_create("syzkaller", 0 [pid 6311] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6310] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 6314] <... memfd_create resumed>) = 3 [pid 6312] <... write resumed>) = 2097152 [pid 6311] <... openat resumed>) = 4 [pid 6310] chdir("./file0" [pid 5078] fstat(3, [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6312] munmap(0x7fa49b4d5000, 2097152 [pid 6311] ioctl(4, LOOP_SET_FD, 3 [pid 6310] <... chdir resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6314] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6310] ioctl(4, LOOP_CLR_FD [pid 6313] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6312] <... munmap resumed>) = 0 [pid 6311] <... ioctl resumed>) = 0 [pid 6310] <... ioctl resumed>) = 0 [pid 5078] getdents64(3, [pid 6314] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6312] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6311] close(3 [pid 6310] close(4 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6313] <... write resumed>) = 2097152 [pid 6312] <... openat resumed>) = 4 [pid 6311] <... close resumed>) = 0 [pid 5078] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] munmap(0x7fa49b4d5000, 2097152 [pid 6312] ioctl(4, LOOP_SET_FD, 3 [pid 6311] mkdir("./file0", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6313] <... munmap resumed>) = 0 [pid 6311] <... mkdir resumed>) = 0 [pid 6310] <... close resumed>) = 0 [pid 5078] lstat("./203/binderfs", [pid 6312] <... ioctl resumed>) = 0 [pid 6311] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6310] exit_group(0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6312] close(3 [pid 6310] <... exit_group resumed>) = ? [pid 5078] unlink("./203/binderfs" [pid 6313] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6312] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6313] <... openat resumed>) = 4 [pid 6312] mkdir("./file0", 0777 [pid 5078] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] ioctl(4, LOOP_SET_FD, 3 [pid 6312] <... mkdir resumed>) = 0 [pid 6310] +++ exited with 0 +++ [ 174.889083][ T6311] loop2: detected capacity change from 0 to 4096 [ 174.916165][ T6312] loop1: detected capacity change from 0 to 4096 [ 174.928460][ T6311] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6314] <... write resumed>) = 2097152 [pid 6313] <... ioctl resumed>) = 0 [pid 6312] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6311] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6314] munmap(0x7fa49b4d5000, 2097152 [pid 6313] close(3 [pid 6311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6313] <... close resumed>) = 0 [pid 6313] mkdir("./file0", 0777 [pid 5075] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6313] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6314] <... munmap resumed>) = 0 [pid 6311] <... openat resumed>) = 3 [pid 5078] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./197/binderfs" [pid 6311] chdir("./file0" [pid 5075] <... unlink resumed>) = 0 [pid 6311] <... chdir resumed>) = 0 [pid 5075] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6311] ioctl(4, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./197/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./197") = 0 [pid 6311] <... ioctl resumed>) = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] mkdir("./198", 0777 [pid 6314] <... openat resumed>) = 4 [pid 6311] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 6311] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6315 ./strace-static-x86_64: Process 6315 attached [pid 6314] ioctl(4, LOOP_SET_FD, 3 [pid 6311] exit_group(0 [ 174.942284][ T6313] loop5: detected capacity change from 0 to 4096 [ 174.965963][ T6312] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 174.979200][ T6313] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] lstat("./203/file0", [pid 6315] chdir("./198" [pid 6314] <... ioctl resumed>) = 0 [pid 6311] <... exit_group resumed>) = ? [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6315] <... chdir resumed>) = 0 [pid 6314] close(3 [pid 6311] +++ exited with 0 +++ [pid 5078] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6314] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6311, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6315] <... prctl resumed>) = 0 [pid 6314] mkdir("./file0", 0777 [pid 6312] <... mount resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6315] setpgid(0, 0 [pid 6314] <... mkdir resumed>) = 0 [pid 6312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... openat resumed>) = 4 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6315] <... setpgid resumed>) = 0 [pid 6314] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6312] <... openat resumed>) = 3 [pid 5078] fstat(4, [pid 6315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6313] <... mount resumed>) = 0 [pid 6312] chdir("./file0" [pid 6313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6312] <... chdir resumed>) = 0 [pid 5077] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] <... openat resumed>) = 3 [pid 6312] ioctl(4, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6313] chdir("./file0" [pid 6312] <... ioctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6313] <... chdir resumed>) = 0 [pid 6312] close(4 [pid 5077] <... openat resumed>) = 3 [pid 6313] ioctl(4, LOOP_CLR_FD [pid 6312] <... close resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 6315] <... openat resumed>) = 3 [pid 6313] <... ioctl resumed>) = 0 [pid 6312] exit_group(0 [pid 5078] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6315] write(3, "1000", 4 [pid 6313] close(4 [pid 6312] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(3, [pid 6315] <... write resumed>) = 4 [pid 6313] <... close resumed>) = 0 [pid 6312] +++ exited with 0 +++ [pid 5078] getdents64(4, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6315] close(3 [pid 6313] exit_group(0 [pid 5077] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6312, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6315] <... close resumed>) = 0 [pid 6313] <... exit_group resumed>) = ? [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] symlink("/dev/binderfs", "./binderfs" [pid 6313] +++ exited with 0 +++ [pid 5077] lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] close(4 [pid 5077] unlink("./203/binderfs" [pid 6315] <... symlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [ 175.019531][ T6314] loop4: detected capacity change from 0 to 4096 [ 175.053087][ T6314] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] memfd_create("syzkaller", 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 5078] rmdir("./203/file0" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] <... memfd_create resumed>) = 3 [pid 6314] <... mount resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... rmdir resumed>) = 0 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... restart_syscall resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6315] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6314] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] fstat(3, [pid 5080] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 6314] chdir("./file0" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6314] <... chdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6314] ioctl(4, LOOP_CLR_FD [pid 5080] <... openat resumed>) = 3 [pid 5078] rmdir("./203" [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6314] <... ioctl resumed>) = 0 [pid 5080] fstat(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6314] close(4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] mkdir("./204", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6314] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] lstat("./203/file0", [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] lstat("./199/binderfs", [pid 5080] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6314] exit_group(0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6314] <... exit_group resumed>) = ? [pid 5080] lstat("./206/binderfs", [pid 5077] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] unlink("./199/binderfs" [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6314] +++ exited with 0 +++ [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5080] unlink("./206/binderfs" [pid 5078] <... openat resumed>) = 3 [pid 5077] fstat(4, [pid 5076] <... unlink resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6314, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] getdents64(4, [pid 5079] <... restart_syscall resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./203/file0" [pid 5079] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5079] fstat(3, [pid 5077] getdents64(3, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] getdents64(3, [pid 5077] close(3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5079] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5077] rmdir("./203" [pid 5080] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./207/binderfs", [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] mkdir("./204", 0777 [pid 5080] lstat("./206/file0", [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] unlink("./207/binderfs" [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6316 [pid 5077] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... openat resumed>) = 4 [pid 5077] close(3./strace-static-x86_64: Process 6316 attached [pid 5080] fstat(4, [pid 5077] <... close resumed>) = 0 [pid 6316] chdir("./204" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6316] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6317 [pid 6316] <... prctl resumed>) = 0 [pid 5080] getdents64(4, [pid 6316] setpgid(0, 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6316] <... setpgid resumed>) = 0 [pid 5080] close(4 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... close resumed>) = 0 [pid 6316] <... openat resumed>) = 3 [pid 5080] rmdir("./206/file0" [pid 6316] write(3, "1000", 4./strace-static-x86_64: Process 6317 attached ) = 4 [pid 6317] chdir("./204" [pid 6316] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 6317] <... chdir resumed>) = 0 [pid 6316] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 6317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6316] symlink("/dev/binderfs", "./binderfs" [pid 6317] <... prctl resumed>) = 0 [pid 6316] <... symlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6317] setpgid(0, 0 [pid 6316] memfd_create("syzkaller", 0 [pid 5080] close(3 [pid 6317] <... setpgid resumed>) = 0 [pid 6316] <... memfd_create resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 6317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] rmdir("./206" [pid 5079] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6317] <... openat resumed>) = 3 [pid 6316] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6317] write(3, "1000", 4 [pid 5080] mkdir("./207", 0777 [pid 5079] lstat("./207/file0", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6317] <... write resumed>) = 4 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6317] close(3 [pid 5080] <... mkdir resumed>) = 0 [pid 5079] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./199/file0", [pid 6317] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6317] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6317] <... symlink resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] <... openat resumed>) = 4 [pid 5076] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6317] memfd_create("syzkaller", 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] fstat(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6317] <... memfd_create resumed>) = 3 [pid 5080] close(3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 5079] getdents64(4, [pid 6317] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 4 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 5076] fstat(4, [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6318 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./207/file0" [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6318 attached [pid 5079] close(3 [pid 5076] getdents64(4, [pid 6318] chdir("./207" [pid 5079] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6318] <... chdir resumed>) = 0 [pid 5079] rmdir("./207" [pid 5076] close(4 [pid 6318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6315] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6318] <... prctl resumed>) = 0 [pid 5079] mkdir("./208", 0777 [pid 5076] rmdir("./199/file0" [pid 6318] setpgid(0, 0 [pid 5079] <... mkdir resumed>) = 0 [pid 6318] <... setpgid resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 6318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 6318] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6318] write(3, "1000", 4 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 6318] <... write resumed>) = 4 [pid 5079] close(3 [pid 5076] <... close resumed>) = 0 [pid 6318] close(3 [pid 5079] <... close resumed>) = 0 [pid 5076] rmdir("./199" [pid 6318] <... close resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6318] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 6318] <... symlink resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6319 [pid 5076] mkdir("./200", 0777 [pid 6318] memfd_create("syzkaller", 0) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 6318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6319 attached [pid 6319] chdir("./208" [pid 5076] <... openat resumed>) = 3 [pid 6319] <... chdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6317] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6315] <... write resumed>) = 2097152 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6319] <... prctl resumed>) = 0 [pid 6316] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5076] close(3 [pid 6319] setpgid(0, 0 [pid 5076] <... close resumed>) = 0 [pid 6319] <... setpgid resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6319] write(3, "1000", 4 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6320 [pid 6319] <... write resumed>) = 4 [pid 6315] munmap(0x7fa49b4d5000, 2097152 [pid 6319] close(3) = 0 [pid 6319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6319] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 6320 attached [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6320] chdir("./200") = 0 [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6315] <... munmap resumed>) = 0 [pid 6320] <... prctl resumed>) = 0 [pid 6315] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6320] setpgid(0, 0 [pid 6315] <... openat resumed>) = 4 [pid 6320] <... setpgid resumed>) = 0 [pid 6315] ioctl(4, LOOP_SET_FD, 3 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6320] write(3, "1000", 4) = 4 [pid 6320] close(3) = 0 [pid 6320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] memfd_create("syzkaller", 0) = 3 [pid 6320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6315] <... ioctl resumed>) = 0 [pid 6320] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6316] <... write resumed>) = 2097152 [pid 6315] close(3 [pid 6318] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6317] <... write resumed>) = 2097152 [pid 6317] munmap(0x7fa49b4d5000, 2097152 [pid 6316] munmap(0x7fa49b4d5000, 2097152 [pid 6315] <... close resumed>) = 0 [pid 6317] <... munmap resumed>) = 0 [pid 6317] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6317] ioctl(4, LOOP_SET_FD, 3 [pid 6316] <... munmap resumed>) = 0 [pid 6315] mkdir("./file0", 0777 [pid 6316] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6315] <... mkdir resumed>) = 0 [pid 6316] <... openat resumed>) = 4 [pid 6315] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6316] ioctl(4, LOOP_SET_FD, 3 [pid 6317] <... ioctl resumed>) = 0 [ 175.332288][ T6315] loop0: detected capacity change from 0 to 4096 [pid 6317] close(3) = 0 [pid 6317] mkdir("./file0", 0777) = 0 [pid 6317] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6319] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6316] <... ioctl resumed>) = 0 [pid 6316] close(3) = 0 [pid 6316] mkdir("./file0", 0777 [pid 6318] <... write resumed>) = 2097152 [pid 6315] <... mount resumed>) = 0 [pid 6319] <... write resumed>) = 2097152 [pid 6318] munmap(0x7fa49b4d5000, 2097152 [pid 6316] <... mkdir resumed>) = 0 [pid 6319] munmap(0x7fa49b4d5000, 2097152 [pid 6318] <... munmap resumed>) = 0 [pid 6316] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6320] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6319] <... munmap resumed>) = 0 [pid 6318] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6317] <... mount resumed>) = 0 [ 175.391066][ T6317] loop2: detected capacity change from 0 to 4096 [ 175.400226][ T6315] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 175.407244][ T6317] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 175.410120][ T6316] loop3: detected capacity change from 0 to 4096 [pid 6315] <... openat resumed>) = 3 [pid 6317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6315] chdir("./file0" [pid 6319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6318] <... openat resumed>) = 4 [pid 6317] <... openat resumed>) = 3 [pid 6315] <... chdir resumed>) = 0 [pid 6319] <... openat resumed>) = 4 [pid 6318] ioctl(4, LOOP_SET_FD, 3 [pid 6317] chdir("./file0" [pid 6315] ioctl(4, LOOP_CLR_FD [pid 6319] ioctl(4, LOOP_SET_FD, 3 [pid 6317] <... chdir resumed>) = 0 [pid 6315] <... ioctl resumed>) = 0 [pid 6317] ioctl(4, LOOP_CLR_FD [pid 6315] close(4 [pid 6317] <... ioctl resumed>) = 0 [pid 6315] <... close resumed>) = 0 [pid 6317] close(4 [pid 6315] exit_group(0 [pid 6317] <... close resumed>) = 0 [pid 6315] <... exit_group resumed>) = ? [pid 6317] exit_group(0 [pid 6315] +++ exited with 0 +++ [pid 6317] <... exit_group resumed>) = ? [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6315, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 6317] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6317, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5077] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6319] <... ioctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5075] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5075] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] lstat("./204/binderfs", [pid 5075] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] close(3 [pid 6318] <... ioctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 175.466099][ T6316] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 175.480852][ T6318] loop5: detected capacity change from 0 to 4096 [ 175.491120][ T6319] loop4: detected capacity change from 0 to 4096 [pid 5077] unlink("./204/binderfs" [pid 5075] lstat("./198/binderfs", [pid 6320] <... write resumed>) = 2097152 [pid 6319] <... close resumed>) = 0 [pid 6318] close(3 [pid 5077] <... unlink resumed>) = 0 [pid 6320] munmap(0x7fa49b4d5000, 2097152 [pid 6319] mkdir("./file0", 0777 [pid 6318] <... close resumed>) = 0 [pid 6316] <... mount resumed>) = 0 [pid 5077] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6320] <... munmap resumed>) = 0 [pid 6319] <... mkdir resumed>) = 0 [pid 6318] mkdir("./file0", 0777 [pid 6316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] unlink("./198/binderfs" [pid 6319] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6318] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6318] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6316] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 6320] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6320] ioctl(4, LOOP_SET_FD, 3 [pid 6316] chdir("./file0" [pid 5077] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] ioctl(4, LOOP_CLR_FD [pid 5077] lstat("./204/file0", [pid 6316] <... ioctl resumed>) = 0 [pid 6316] close(4 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6320] <... ioctl resumed>) = 0 [pid 6316] <... close resumed>) = 0 [pid 5077] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] exit_group(0) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6316] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5078] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5078] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 5078] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] rmdir("./204/file0" [pid 5078] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5078] lstat("./204/binderfs", [pid 5077] getdents64(3, [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6320] close(3 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6320] <... close resumed>) = 0 [pid 5078] unlink("./204/binderfs" [pid 6320] mkdir("./file0", 0777 [pid 5078] <... unlink resumed>) = 0 [pid 5077] close(3 [pid 6320] <... mkdir resumed>) = 0 [pid 5078] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 175.539717][ T6319] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 175.541928][ T6320] loop1: detected capacity change from 0 to 4096 [ 175.556108][ T6318] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6320] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./204") = 0 [pid 5077] mkdir("./205", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6318] <... mount resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 6318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 6318] <... openat resumed>) = 3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6318] chdir("./file0") = 0 [pid 6318] ioctl(4, LOOP_CLR_FD) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6321 [pid 6318] close(4) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6318] exit_group(0) = ? [pid 6318] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6318, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6319] <... mount resumed>) = 0 [pid 6319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6319] chdir("./file0" [pid 5080] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6319] <... chdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 6319] ioctl(4, LOOP_CLR_FD [pid 5080] fstat(3, ./strace-static-x86_64: Process 6321 attached [pid 6319] <... ioctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6319] close(4 [pid 5080] getdents64(3, [pid 6321] chdir("./205" [pid 6319] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] exit_group(0 [pid 5080] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6321] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6319] +++ exited with 0 +++ [pid 5080] lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] lstat("./198/file0", [pid 6321] <... prctl resumed>) = 0 [pid 5080] unlink("./207/binderfs" [pid 6321] setpgid(0, 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6321] <... setpgid resumed>) = 0 [pid 5080] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6321] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6321] write(3, "1000", 4 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6321] <... write resumed>) = 4 [pid 5079] <... openat resumed>) = 3 [pid 6321] close(3 [pid 5079] fstat(3, [pid 5075] <... openat resumed>) = 4 [pid 6321] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] fstat(4, [pid 6321] symlink("/dev/binderfs", "./binderfs" [pid 5079] getdents64(3, [pid 5080] <... umount2 resumed>) = 0 [ 175.588607][ T6320] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6321] <... symlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] getdents64(4, [pid 6321] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] <... memfd_create resumed>) = 3 [pid 5075] getdents64(4, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] lstat("./208/binderfs", [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6321] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5080] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./207/file0") = 0 [pid 5080] getdents64(3, [pid 6320] <... mount resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] unlink("./208/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5080] close(3 [pid 6320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... close resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5075] rmdir("./198/file0" [pid 5079] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6320] <... openat resumed>) = 3 [pid 5080] rmdir("./207" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 6320] chdir("./file0" [pid 5080] <... rmdir resumed>) = 0 [pid 5078] lstat("./204/file0", [pid 6320] <... chdir resumed>) = 0 [pid 5080] mkdir("./208", 0777 [pid 6320] ioctl(4, LOOP_CLR_FD [pid 5080] <... mkdir resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 6320] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6320] close(4 [pid 5080] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 6320] <... close resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6320] exit_group(0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 6320] <... exit_group resumed>) = ? [pid 5080] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5075] rmdir("./198" [pid 6321] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6320] +++ exited with 0 +++ [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6322 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(4, [pid 5076] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... rmdir resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] getdents64(4, [pid 5076] unlink("./200/binderfs" [pid 5075] mkdir("./199", 0777 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6322 attached [pid 6322] chdir("./208" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] close(4) = 0 [pid 6322] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] rmdir("./204/file0" [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] setpgid(0, 0) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5078] getdents64(3, [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] close(3 [pid 5075] close(3 [pid 6322] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5078] rmdir("./204" [pid 6322] write(3, "1000", 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6322] <... write resumed>) = 4 [pid 5078] <... rmdir resumed>) = 0 [pid 6322] close(3) = 0 [pid 6322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] mkdir("./205", 0777 [pid 6322] memfd_create("syzkaller", 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6323 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] <... memfd_create resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] lstat("./200/file0", [pid 5078] close(3./strace-static-x86_64: Process 6323 attached [pid 6322] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6323] chdir("./199" [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6323] <... chdir resumed>) = 0 [pid 5076] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] <... prctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6323] setpgid(0, 0 [pid 5076] <... openat resumed>) = 4 [pid 6323] <... setpgid resumed>) = 0 [pid 5076] fstat(4, [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6324 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6323] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 6323] write(3, "1000", 4 [pid 5079] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6323] <... write resumed>) = 4 [pid 5076] getdents64(4, [pid 6323] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6323] <... close resumed>) = 0 [pid 5076] close(4 [pid 6323] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6324 attached [pid 6323] <... symlink resumed>) = 0 [pid 5079] lstat("./208/file0", [pid 5076] rmdir("./200/file0" [pid 6324] chdir("./205" [pid 6323] memfd_create("syzkaller", 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6323] <... memfd_create resumed>) = 3 [pid 5079] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6324] <... chdir resumed>) = 0 [pid 6323] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6321] <... write resumed>) = 2097152 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./200" [pid 6324] <... prctl resumed>) = 0 [pid 6321] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... openat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./201", 0777 [pid 6324] setpgid(0, 0 [pid 5079] fstat(4, [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6324] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5079] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] close(3 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... close resumed>) = 0 [pid 6324] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6324] write(3, "1000", 4 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6325 [pid 6324] <... write resumed>) = 4 [pid 5079] close(4 [pid 6324] close(3 [pid 6321] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6325 attached [pid 6324] <... close resumed>) = 0 [pid 6321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 6324] symlink("/dev/binderfs", "./binderfs" [pid 6321] <... openat resumed>) = 4 [pid 5079] rmdir("./208/file0" [pid 6324] <... symlink resumed>) = 0 [pid 6325] chdir("./201") = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6321] ioctl(4, LOOP_SET_FD, 3 [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6325] setpgid(0, 0) = 0 [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6324] memfd_create("syzkaller", 0 [pid 6325] write(3, "1000", 4) = 4 [pid 6325] close(3) = 0 [pid 6325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6325] memfd_create("syzkaller", 0) = 3 [pid 6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6324] <... memfd_create resumed>) = 3 [pid 6321] <... ioctl resumed>) = 0 [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6321] close(3 [pid 5079] close(3 [pid 6324] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6321] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6322] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6321] mkdir("./file0", 0777 [pid 5079] rmdir("./208" [pid 6321] <... mkdir resumed>) = 0 [pid 6321] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./209", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6323] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6326 ./strace-static-x86_64: Process 6326 attached [pid 6326] chdir("./209") = 0 [pid 6326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6326] setpgid(0, 0) = 0 [pid 6326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6322] <... write resumed>) = 2097152 [ 175.785453][ T6321] loop2: detected capacity change from 0 to 4096 [ 175.815219][ T6321] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6326] write(3, "1000", 4 [pid 6325] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6326] <... write resumed>) = 4 [pid 6326] close(3) = 0 [pid 6326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6326] memfd_create("syzkaller", 0) = 3 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6324] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6321] <... mount resumed>) = 0 [pid 6321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6321] chdir("./file0") = 0 [pid 6322] munmap(0x7fa49b4d5000, 2097152 [pid 6321] ioctl(4, LOOP_CLR_FD) = 0 [pid 6322] <... munmap resumed>) = 0 [pid 6321] close(4) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6321] exit_group(0 [pid 6322] <... openat resumed>) = 4 [pid 6321] <... exit_group resumed>) = ? [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 6321] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6323] <... write resumed>) = 2097152 [pid 5077] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6323] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./205/binderfs", [pid 6322] <... ioctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6322] close(3 [pid 5077] unlink("./205/binderfs" [pid 6322] <... close resumed>) = 0 [pid 6322] mkdir("./file0", 0777 [pid 5077] <... unlink resumed>) = 0 [pid 5077] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... mkdir resumed>) = 0 [pid 6322] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6323] <... ioctl resumed>) = 0 [pid 6323] close(3) = 0 [pid 6323] mkdir("./file0", 0777) = 0 [pid 6325] <... write resumed>) = 2097152 [ 175.917189][ T6322] loop5: detected capacity change from 0 to 4096 [ 175.942522][ T6323] loop0: detected capacity change from 0 to 4096 [ 175.956919][ T6322] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6323] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6325] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6325] ioctl(4, LOOP_SET_FD, 3 [pid 6324] <... write resumed>) = 2097152 [pid 6324] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6324] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6324] ioctl(4, LOOP_SET_FD, 3 [pid 6325] <... ioctl resumed>) = 0 [pid 6325] close(3) = 0 [pid 6325] mkdir("./file0", 0777) = 0 [pid 6325] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6326] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... umount2 resumed>) = 0 [ 175.977308][ T6323] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 175.994891][ T6325] loop1: detected capacity change from 0 to 4096 [ 176.016647][ T6324] loop3: detected capacity change from 0 to 4096 [pid 6324] <... ioctl resumed>) = 0 [pid 5077] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6324] <... close resumed>) = 0 [pid 5077] lstat("./205/file0", [pid 6324] mkdir("./file0", 0777 [pid 6322] <... mount resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6324] <... mkdir resumed>) = 0 [pid 6322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6322] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 6324] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6322] chdir("./file0") = 0 [pid 5077] fstat(4, [pid 6322] ioctl(4, LOOP_CLR_FD) = 0 [pid 6322] close(4) = 0 [pid 6322] exit_group(0) = ? [pid 6322] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6322, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5080] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./208/binderfs") = 0 [pid 5080] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6326] <... write resumed>) = 2097152 [pid 6323] <... mount resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6326] munmap(0x7fa49b4d5000, 2097152 [pid 6323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6323] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 6326] <... munmap resumed>) = 0 [pid 6325] <... mount resumed>) = 0 [pid 6323] chdir("./file0" [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6323] <... chdir resumed>) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6325] <... openat resumed>) = 3 [pid 6323] ioctl(4, LOOP_CLR_FD [pid 5077] close(4 [pid 6326] <... openat resumed>) = 4 [pid 6325] chdir("./file0" [pid 6323] <... ioctl resumed>) = 0 [ 176.060841][ T6325] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 176.099750][ T6324] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 6325] <... chdir resumed>) = 0 [pid 6323] close(4 [pid 5077] <... close resumed>) = 0 [pid 6325] ioctl(4, LOOP_CLR_FD [pid 6323] <... close resumed>) = 0 [pid 6325] <... ioctl resumed>) = 0 [pid 6323] exit_group(0 [pid 6325] close(4 [pid 6323] <... exit_group resumed>) = ? [pid 6325] <... close resumed>) = 0 [pid 6323] +++ exited with 0 +++ [pid 6325] exit_group(0 [pid 5080] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6325] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6325] +++ exited with 0 +++ [pid 5080] lstat("./208/file0", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./205/file0" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5077] getdents64(3, [pid 5080] fstat(4, [pid 5076] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] fstat(3, [pid 5080] getdents64(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, [pid 5080] getdents64(4, [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5076] lstat("./201/binderfs", [pid 5080] rmdir("./208/file0" [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] unlink("./201/binderfs" [pid 5080] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3) = 0 [pid 5080] rmdir("./208") = 0 [pid 5080] mkdir("./209", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 6326] <... ioctl resumed>) = 0 [pid 6324] <... mount resumed>) = 0 [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6327 attached [pid 6326] close(3 [pid 6324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6326] <... close resumed>) = 0 [pid 6324] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6327 [pid 5076] lstat("./201/file0", [pid 6327] chdir("./209" [pid 5077] rmdir("./205" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] <... chdir resumed>) = 0 [pid 6326] mkdir("./file0", 0777 [pid 6324] chdir("./file0" [pid 5076] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6326] <... mkdir resumed>) = 0 [pid 6324] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [pid 6327] <... prctl resumed>) = 0 [pid 6326] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6324] ioctl(4, LOOP_CLR_FD [pid 5077] mkdir("./206", 0777 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6327] setpgid(0, 0 [pid 6324] <... ioctl resumed>) = 0 [ 176.163267][ T6326] loop4: detected capacity change from 0 to 4096 [pid 5076] close(4) = 0 [pid 6327] <... setpgid resumed>) = 0 [pid 6324] close(4 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] rmdir("./201/file0" [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 6324] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(3, [pid 5075] fstat(3, [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./201") = 0 [pid 5076] mkdir("./202", 0777 [pid 6324] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6327] <... openat resumed>) = 3 [pid 6324] <... exit_group resumed>) = ? [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6328 [pid 6324] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6327] write(3, "1000", 4 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5077] close(3 [pid 6327] <... write resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6327] <... close resumed>) = 0 [pid 5078] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6328 attached [pid 6327] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./199/binderfs", [pid 6328] chdir("./202" [pid 6327] <... symlink resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6329 [pid 6328] <... chdir resumed>) = 0 [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6328] setpgid(0, 0) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6327] memfd_create("syzkaller", 0 [pid 6328] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 6327] <... memfd_create resumed>) = 3 [pid 5075] unlink("./199/binderfs" [pid 6328] write(3, "1000", 4 [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6328] <... write resumed>) = 4 [pid 6327] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 6328] close(3 [pid 5075] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6328] symlink("/dev/binderfs", "./binderfs" [pid 5078] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6328] <... symlink resumed>) = 0 [pid 6328] memfd_create("syzkaller", 0 [pid 6326] <... mount resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6328] <... memfd_create resumed>) = 3 [pid 5078] lstat("./205/binderfs", [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6328] <... mmap resumed>) = 0x7fa49b4d5000 [ 176.206946][ T6326] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6326] <... openat resumed>) = 3 [pid 5078] unlink("./205/binderfs"./strace-static-x86_64: Process 6329 attached [pid 6326] chdir("./file0" [pid 6329] chdir("./206" [pid 6326] <... chdir resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6329] <... chdir resumed>) = 0 [pid 6327] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6326] ioctl(4, LOOP_CLR_FD) = 0 [pid 6326] close(4) = 0 [pid 6326] exit_group(0) = ? [pid 6326] +++ exited with 0 +++ [pid 5078] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6329] <... prctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6329] setpgid(0, 0 [pid 5075] lstat("./199/file0", [pid 6329] <... setpgid resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6326, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6329] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6329] write(3, "1000", 4) = 4 [pid 5079] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 6329] close(3 [pid 5079] <... openat resumed>) = 3 [pid 5075] fstat(4, [pid 5079] fstat(3, [pid 6329] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6329] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 6329] <... symlink resumed>) = 0 [pid 5079] getdents64(3, [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6329] memfd_create("syzkaller", 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] getdents64(4, [pid 6329] <... memfd_create resumed>) = 3 [pid 5079] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5079] lstat("./209/binderfs", [pid 5075] <... close resumed>) = 0 [pid 6329] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] rmdir("./199/file0" [pid 5079] unlink("./209/binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5079] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./199") = 0 [pid 5075] mkdir("./200", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6330 ./strace-static-x86_64: Process 6330 attached [pid 6330] chdir("./200" [pid 6328] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6330] <... chdir resumed>) = 0 [pid 6330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6330] setpgid(0, 0) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 6330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] write(3, "1000", 4) = 4 [pid 6330] close(3) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6330] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... umount2 resumed>) = 0 [pid 5078] lstat("./205/file0", [pid 6330] <... symlink resumed>) = 0 [pid 6330] memfd_create("syzkaller", 0 [pid 5079] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6330] <... memfd_create resumed>) = 3 [pid 6330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] lstat("./209/file0", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(4, [pid 5079] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] getdents64(4, [pid 5078] close(4 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./205/file0" [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5079] close(4 [pid 5078] getdents64(3, [pid 6327] <... write resumed>) = 2097152 [pid 6327] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] rmdir("./209/file0" [pid 5078] close(3 [pid 6327] <... munmap resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 6327] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./205" [pid 6327] <... openat resumed>) = 4 [pid 5079] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] mkdir("./206", 0777 [pid 6327] ioctl(4, LOOP_SET_FD, 3 [pid 5079] rmdir("./209") = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5079] mkdir("./210", 0777 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6329] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6327] <... ioctl resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6327] close(3 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6327] <... close resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6327] mkdir("./file0", 0777 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] close(3 [pid 6328] <... write resumed>) = 2097152 [pid 6327] <... mkdir resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... close resumed>) = 0 [pid 6328] munmap(0x7fa49b4d5000, 2097152 [pid 6327] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] close(3 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6328] <... munmap resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6330] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6331 [pid 6328] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6332 [pid 6328] <... openat resumed>) = 4 [pid 6329] <... write resumed>) = 2097152 [pid 6328] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6331 attached ./strace-static-x86_64: Process 6332 attached [pid 6329] munmap(0x7fa49b4d5000, 2097152 [pid 6328] <... ioctl resumed>) = 0 [ 176.428063][ T6327] loop5: detected capacity change from 0 to 4096 [ 176.467476][ T6327] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6332] chdir("./210" [pid 6331] chdir("./206" [pid 6329] <... munmap resumed>) = 0 [pid 6328] close(3 [pid 6332] <... chdir resumed>) = 0 [pid 6331] <... chdir resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6328] <... close resumed>) = 0 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6329] <... openat resumed>) = 4 [pid 6328] mkdir("./file0", 0777 [pid 6332] <... prctl resumed>) = 0 [pid 6331] <... prctl resumed>) = 0 [pid 6329] ioctl(4, LOOP_SET_FD, 3 [pid 6328] <... mkdir resumed>) = 0 [pid 6331] setpgid(0, 0) = 0 [pid 6329] <... ioctl resumed>) = 0 [pid 6332] setpgid(0, 0 [pid 6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6328] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6332] <... setpgid resumed>) = 0 [pid 6331] <... openat resumed>) = 3 [pid 6331] write(3, "1000", 4 [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6331] <... write resumed>) = 4 [pid 6331] close(3 [pid 6327] <... mount resumed>) = 0 [pid 6332] <... openat resumed>) = 3 [pid 6332] write(3, "1000", 4 [pid 6331] <... close resumed>) = 0 [pid 6327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6332] <... write resumed>) = 4 [pid 6331] symlink("/dev/binderfs", "./binderfs" [pid 6327] <... openat resumed>) = 3 [pid 6327] chdir("./file0" [pid 6332] close(3 [pid 6331] <... symlink resumed>) = 0 [pid 6327] <... chdir resumed>) = 0 [pid 6327] ioctl(4, LOOP_CLR_FD) = 0 [pid 6327] close(4 [pid 6332] <... close resumed>) = 0 [pid 6331] memfd_create("syzkaller", 0 [pid 6329] close(3 [pid 6327] <... close resumed>) = 0 [pid 6332] symlink("/dev/binderfs", "./binderfs" [pid 6331] <... memfd_create resumed>) = 3 [pid 6330] <... write resumed>) = 2097152 [pid 6329] <... close resumed>) = 0 [pid 6327] exit_group(0 [pid 6332] <... symlink resumed>) = 0 [pid 6331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6332] memfd_create("syzkaller", 0 [pid 6331] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6329] mkdir("./file0", 0777 [pid 6327] <... exit_group resumed>) = ? [pid 6332] <... memfd_create resumed>) = 3 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 176.481512][ T6328] loop1: detected capacity change from 0 to 4096 [ 176.503491][ T6329] loop2: detected capacity change from 0 to 4096 [ 176.513345][ T6328] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6330] munmap(0x7fa49b4d5000, 2097152 [pid 6329] <... mkdir resumed>) = 0 [pid 6328] <... mount resumed>) = 0 [pid 6327] +++ exited with 0 +++ [pid 6330] <... munmap resumed>) = 0 [pid 6329] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 6330] <... openat resumed>) = 4 [pid 6328] chdir("./file0" [pid 5080] <... restart_syscall resumed>) = 0 [pid 6330] ioctl(4, LOOP_SET_FD, 3 [pid 6328] <... chdir resumed>) = 0 [pid 6328] ioctl(4, LOOP_CLR_FD) = 0 [pid 6328] close(4 [pid 5080] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6330] <... ioctl resumed>) = 0 [pid 6328] <... close resumed>) = 0 [pid 6328] exit_group(0) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6328] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 6330] close(3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6332] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6330] <... close resumed>) = 0 [pid 5080] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] mkdir("./file0", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6330] <... mkdir resumed>) = 0 [pid 5080] lstat("./209/binderfs", [pid 6330] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 176.577725][ T6329] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 176.590000][ T6330] loop0: detected capacity change from 0 to 4096 [pid 5080] unlink("./209/binderfs") = 0 [pid 5076] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] <... write resumed>) = 2097152 [pid 5080] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] munmap(0x7fa49b4d5000, 2097152 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, [pid 6329] <... mount resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6331] <... munmap resumed>) = 0 [pid 6329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 6331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6329] <... openat resumed>) = 3 [pid 6331] <... openat resumed>) = 4 [pid 6329] chdir("./file0" [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6331] ioctl(4, LOOP_SET_FD, 3 [pid 6329] <... chdir resumed>) = 0 [ 176.632388][ T6330] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5076] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] <... ioctl resumed>) = 0 [pid 6329] ioctl(4, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] <... write resumed>) = 2097152 [pid 6331] close(3 [pid 6330] <... mount resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] lstat("./202/binderfs", [pid 6332] munmap(0x7fa49b4d5000, 2097152 [pid 6331] <... close resumed>) = 0 [pid 6329] <... ioctl resumed>) = 0 [pid 5080] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6331] mkdir("./file0", 0777 [pid 6330] <... openat resumed>) = 3 [pid 6329] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./202/binderfs" [pid 6331] <... mkdir resumed>) = 0 [pid 6330] chdir("./file0" [pid 6329] <... close resumed>) = 0 [pid 6330] <... chdir resumed>) = 0 [pid 6329] exit_group(0 [pid 6330] ioctl(4, LOOP_CLR_FD [pid 6329] <... exit_group resumed>) = ? [pid 6331] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6330] <... ioctl resumed>) = 0 [pid 6329] +++ exited with 0 +++ [pid 5080] lstat("./209/file0", [pid 5076] <... unlink resumed>) = 0 [pid 6330] close(4 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6330] <... close resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6330] exit_group(0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6330] <... exit_group resumed>) = ? [pid 6330] +++ exited with 0 +++ [pid 5077] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6330, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] fstat(3, [pid 5077] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5080] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] lstat("./206/binderfs", [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 5077] unlink("./206/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] <... munmap resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] lstat("./200/binderfs", [pid 6332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] getdents64(4, [pid 5077] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6332] <... openat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] unlink("./200/binderfs" [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 5080] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 176.674270][ T6331] loop3: detected capacity change from 0 to 4096 [ 176.705384][ T6331] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 6332] <... ioctl resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6332] close(3 [pid 5080] rmdir("./209/file0" [pid 5076] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6332] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] mkdir("./file0", 0777 [pid 5080] getdents64(3, [pid 5076] lstat("./202/file0", [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] <... mkdir resumed>) = 0 [pid 5080] close(3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] lstat("./206/file0", [pid 5076] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6332] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] rmdir("./209" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] mkdir("./210", 0777 [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 4 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] fstat(4, [pid 5075] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(4, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4) = 0 [pid 5075] lstat("./200/file0", [pid 6331] <... mount resumed>) = 0 [pid 5077] rmdir("./206/file0" [pid 6331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6331] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] getdents64(3, [pid 5076] getdents64(4, [pid 5075] umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] chdir("./file0" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6331] <... chdir resumed>) = 0 [pid 5080] close(3 [pid 5077] close(3 [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] ioctl(4, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6331] <... ioctl resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] rmdir("./206" [pid 5076] close(4 [pid 5075] fstat(4, [pid 6331] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6331] <... close resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6333 [pid 5077] mkdir("./207", 0777 [pid 5076] rmdir("./202/file0" [pid 5075] getdents64(4, [pid 6331] exit_group(0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6331] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(3, [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6333 attached [pid 6331] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6333] chdir("./210" [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] close(4 [pid 6333] <... chdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 6333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./200/file0" [pid 6333] <... prctl resumed>) = 0 [pid 5078] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./202" [pid 5075] <... rmdir resumed>) = 0 [pid 6333] setpgid(0, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(3, [pid 6333] <... setpgid resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... openat resumed>) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6334 [pid 5076] mkdir("./203", 0777 [pid 5075] close(3 [pid 6333] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 5075] <... close resumed>) = 0 [pid 6333] write(3, "1000", 4 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] rmdir("./200" [pid 6333] <... write resumed>) = 4 [pid 5078] getdents64(3, [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6334 attached [pid 6333] close(3 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] mkdir("./201", 0777 [pid 6334] chdir("./207" [pid 6333] <... close resumed>) = 0 [pid 5078] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 6334] <... chdir resumed>) = 0 [pid 6333] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [ 176.738083][ T6332] loop4: detected capacity change from 0 to 4096 [ 176.764212][ T6332] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6333] <... symlink resumed>) = 0 [pid 5078] lstat("./206/binderfs", [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... openat resumed>) = 3 [pid 6334] <... prctl resumed>) = 0 [pid 6333] memfd_create("syzkaller", 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6334] setpgid(0, 0 [pid 6333] <... memfd_create resumed>) = 3 [pid 5078] unlink("./206/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6334] <... setpgid resumed>) = 0 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... unlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 6334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6333] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 6335 attached [pid 6334] <... openat resumed>) = 3 [pid 6332] <... mount resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6334] write(3, "1000", 4 [pid 6332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6335 [pid 6334] <... write resumed>) = 4 [pid 6332] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6336 [pid 6335] chdir("./203" [pid 6334] close(3 [pid 6332] chdir("./file0" [pid 6335] <... chdir resumed>) = 0 [pid 6334] <... close resumed>) = 0 [pid 6332] <... chdir resumed>) = 0 [pid 6335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6334] symlink("/dev/binderfs", "./binderfs" [pid 6332] ioctl(4, LOOP_CLR_FD [pid 5078] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6336 attached [pid 6335] <... prctl resumed>) = 0 [pid 6334] <... symlink resumed>) = 0 [pid 6332] <... ioctl resumed>) = 0 [pid 6336] chdir("./201" [pid 6335] setpgid(0, 0 [pid 6334] memfd_create("syzkaller", 0 [pid 6332] close(4 [pid 6336] <... chdir resumed>) = 0 [pid 6335] <... setpgid resumed>) = 0 [pid 6334] <... memfd_create resumed>) = 3 [pid 6332] <... close resumed>) = 0 [pid 6336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6336] <... prctl resumed>) = 0 [pid 6334] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6336] setpgid(0, 0 [pid 6335] <... openat resumed>) = 3 [pid 6332] exit_group(0 [pid 6336] <... setpgid resumed>) = 0 [pid 6336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6335] write(3, "1000", 4 [pid 6332] <... exit_group resumed>) = ? [pid 5078] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] write(3, "1000", 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] <... write resumed>) = 4 [pid 6335] <... write resumed>) = 4 [pid 5078] lstat("./206/file0", [pid 6336] close(3 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6336] <... close resumed>) = 0 [pid 6332] +++ exited with 0 +++ [pid 6336] symlink("/dev/binderfs", "./binderfs" [pid 6335] close(3 [pid 5078] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] <... symlink resumed>) = 0 [pid 6335] <... close resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6332, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] memfd_create("syzkaller", 0 [pid 6335] symlink("/dev/binderfs", "./binderfs" [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5078] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6336] <... memfd_create resumed>) = 3 [pid 6335] <... symlink resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] fstat(4, [pid 6336] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6335] memfd_create("syzkaller", 0 [pid 6333] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(4, [pid 6335] <... memfd_create resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] getdents64(4, [pid 6335] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] fstat(3, [pid 5078] close(4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] rmdir("./206/file0" [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] <... rmdir resumed>) = 0 [pid 5079] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] getdents64(3, [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] lstat("./210/binderfs", [pid 5078] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5079] unlink("./210/binderfs" [pid 5078] rmdir("./206" [pid 6334] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5079] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] mkdir("./207", 0777 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5079] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 5079] lstat("./210/file0", [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6337 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./210/file0") = 0 ./strace-static-x86_64: Process 6337 attached [pid 5079] getdents64(3, [pid 6337] chdir("./207" [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6337] <... chdir resumed>) = 0 [pid 5079] close(3 [pid 6337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... close resumed>) = 0 [pid 6337] <... prctl resumed>) = 0 [pid 5079] rmdir("./210" [pid 6337] setpgid(0, 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6337] <... setpgid resumed>) = 0 [pid 5079] mkdir("./211", 0777 [pid 6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... mkdir resumed>) = 0 [pid 6337] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6337] write(3, "1000", 4 [pid 5079] <... openat resumed>) = 3 [pid 6337] <... write resumed>) = 4 [pid 6335] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6337] close(3) = 0 [pid 6337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6337] memfd_create("syzkaller", 0) = 3 [pid 6337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6334] <... write resumed>) = 2097152 [pid 6336] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6335] <... write resumed>) = 2097152 [pid 6334] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 6335] munmap(0x7fa49b4d5000, 2097152 [pid 6334] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6333] <... write resumed>) = 2097152 [pid 6334] <... openat resumed>) = 4 [pid 6333] munmap(0x7fa49b4d5000, 2097152 [pid 6334] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... ioctl resumed>) = 0 [pid 6334] <... ioctl resumed>) = 0 [pid 6334] close(3) = 0 [pid 6333] <... munmap resumed>) = 0 [pid 6334] mkdir("./file0", 0777 [pid 6333] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6334] <... mkdir resumed>) = 0 [pid 6333] <... openat resumed>) = 4 [pid 6334] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6333] ioctl(4, LOOP_SET_FD, 3 [pid 5079] close(3 [pid 6336] <... write resumed>) = 2097152 [pid 5079] <... close resumed>) = 0 [pid 6335] <... munmap resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6335] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6338 [pid 6336] munmap(0x7fa49b4d5000, 2097152 [pid 6335] ioctl(4, LOOP_SET_FD, 3 [pid 6336] <... munmap resumed>) = 0 [pid 6333] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6338 attached [pid 6338] chdir("./211") = 0 [pid 6338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6338] setpgid(0, 0) = 0 [ 177.031281][ T6334] loop2: detected capacity change from 0 to 4096 [ 177.048712][ T6334] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 177.058883][ T6333] loop5: detected capacity change from 0 to 4096 [pid 6336] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6337] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6336] <... openat resumed>) = 4 [pid 6335] <... ioctl resumed>) = 0 [pid 6333] close(3 [pid 6338] <... openat resumed>) = 3 [pid 6336] ioctl(4, LOOP_SET_FD, 3 [pid 6335] close(3 [pid 6333] <... close resumed>) = 0 [pid 6338] write(3, "1000", 4 [pid 6335] <... close resumed>) = 0 [pid 6334] <... mount resumed>) = 0 [pid 6333] mkdir("./file0", 0777 [pid 6338] <... write resumed>) = 4 [pid 6336] <... ioctl resumed>) = 0 [pid 6335] mkdir("./file0", 0777 [pid 6334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6338] close(3 [pid 6336] close(3 [pid 6334] <... openat resumed>) = 3 [pid 6333] <... mkdir resumed>) = 0 [pid 6338] <... close resumed>) = 0 [pid 6337] <... write resumed>) = 2097152 [pid 6336] <... close resumed>) = 0 [pid 6335] <... mkdir resumed>) = 0 [pid 6334] chdir("./file0" [pid 6333] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6338] symlink("/dev/binderfs", "./binderfs" [pid 6337] munmap(0x7fa49b4d5000, 2097152 [pid 6336] mkdir("./file0", 0777 [pid 6335] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6334] <... chdir resumed>) = 0 [pid 6338] <... symlink resumed>) = 0 [pid 6338] memfd_create("syzkaller", 0) = 3 [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6336] <... mkdir resumed>) = 0 [pid 6334] ioctl(4, LOOP_CLR_FD) = 0 [ 177.079958][ T6335] loop1: detected capacity change from 0 to 4096 [ 177.096136][ T6336] loop0: detected capacity change from 0 to 4096 [ 177.120553][ T6333] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6336] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6334] close(4) = 0 [pid 6334] exit_group(0) = ? [pid 6334] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6334, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- [pid 6337] <... munmap resumed>) = 0 [pid 5077] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6338] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6337] <... openat resumed>) = 4 [pid 5077] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./207/binderfs") = 0 [pid 5077] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 177.132133][ T6335] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 177.151253][ T6336] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./207/file0", [pid 6337] <... ioctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6337] close(3 [pid 5077] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6337] mkdir("./file0", 0777 [pid 5077] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6337] <... mkdir resumed>) = 0 [pid 6336] <... mount resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6337] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./207/file0") = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [ 177.177757][ T6337] loop3: detected capacity change from 0 to 4096 [pid 5077] rmdir("./207") = 0 [pid 5077] mkdir("./208", 0777 [pid 6336] <... openat resumed>) = 3 [pid 6335] <... mount resumed>) = 0 [pid 6333] <... mount resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6336] chdir("./file0" [pid 6335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6336] <... chdir resumed>) = 0 [pid 6335] <... openat resumed>) = 3 [pid 6333] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 6336] ioctl(4, LOOP_CLR_FD [pid 6335] chdir("./file0" [pid 6333] chdir("./file0" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6336] <... ioctl resumed>) = 0 [pid 6335] <... chdir resumed>) = 0 [pid 6333] <... chdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6336] close(4 [pid 6335] ioctl(4, LOOP_CLR_FD [pid 6333] ioctl(4, LOOP_CLR_FD [pid 5077] close(3 [pid 6336] <... close resumed>) = 0 [pid 6335] <... ioctl resumed>) = 0 [pid 6333] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6335] close(4 [pid 6333] close(4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6336] exit_group(0 [pid 6335] <... close resumed>) = 0 [pid 6333] <... close resumed>) = 0 [pid 6338] <... write resumed>) = 2097152 [pid 6336] <... exit_group resumed>) = ? [pid 6335] exit_group(0 [pid 6333] exit_group(0 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6339 [pid 6335] <... exit_group resumed>) = ? [pid 6333] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6339 attached [pid 6336] +++ exited with 0 +++ [pid 6335] +++ exited with 0 +++ [pid 6333] +++ exited with 0 +++ [pid 6339] chdir("./208" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6336, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6339] <... chdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6335, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6338] munmap(0x7fa49b4d5000, 2097152 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... restart_syscall resumed>) = 0 [pid 6339] <... prctl resumed>) = 0 [pid 6338] <... munmap resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6339] setpgid(0, 0) = 0 [pid 5075] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6339] <... openat resumed>) = 3 [pid 5080] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6339] write(3, "1000", 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 6339] <... write resumed>) = 4 [pid 6338] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] fstat(3, [pid 6339] close(3 [pid 6338] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 3 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6339] <... close resumed>) = 0 [pid 6338] ioctl(4, LOOP_SET_FD, 3 [pid 5080] fstat(3, [pid 5075] getdents64(3, [pid 6339] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6339] <... symlink resumed>) = 0 [ 177.217683][ T6337] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 5080] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] fstat(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6339] <... memfd_create resumed>) = 3 [pid 5080] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./201/binderfs", [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6339] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5080] lstat("./210/binderfs", [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./201/binderfs" [pid 6337] <... mount resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5080] unlink("./210/binderfs" [pid 5076] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] <... openat resumed>) = 3 [pid 5076] lstat("./203/binderfs", [pid 6338] <... ioctl resumed>) = 0 [pid 6338] close(3) = 0 [pid 6338] mkdir("./file0", 0777 [pid 6337] chdir("./file0" [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6338] <... mkdir resumed>) = 0 [pid 6337] <... chdir resumed>) = 0 [pid 6338] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6337] ioctl(4, LOOP_CLR_FD [pid 5076] unlink("./203/binderfs" [pid 5075] <... umount2 resumed>) = 0 [pid 6337] <... ioctl resumed>) = 0 [ 177.274329][ T6338] loop4: detected capacity change from 0 to 4096 [pid 6337] close(4 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./201/file0", [pid 6337] <... close resumed>) = 0 [pid 5076] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] exit_group(0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./210/file0", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6337] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, [pid 6337] +++ exited with 0 +++ [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5076] lstat("./203/file0", [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 5078] <... restart_syscall resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6339] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] close(4 [pid 5075] close(4 [pid 5080] <... close resumed>) = 0 [pid 5078] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5080] rmdir("./210/file0" [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./201/file0" [pid 5080] <... rmdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5078] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] fstat(3, [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5080] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 5080] rmdir("./210" [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./201" [pid 5080] <... rmdir resumed>) = 0 [pid 5078] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5080] mkdir("./211", 0777 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./202", 0777 [pid 5080] <... mkdir resumed>) = 0 [pid 5078] lstat("./207/binderfs", [pid 5076] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... openat resumed>) = 3 [pid 5078] unlink("./207/binderfs" [pid 5076] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] <... unlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./203/file0" [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 5075] close(3 [pid 5080] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 177.328701][ T6338] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... rmdir resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6340 [pid 5078] <... umount2 resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6341 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 6341 attached 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 6341] chdir("./202" [pid 5076] rmdir("./203" [pid 6341] <... chdir resumed>) = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6341] setpgid(0, 0 [pid 5076] mkdir("./204", 0777 [pid 6341] <... setpgid resumed>) = 0 [pid 5078] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 6341] <... openat resumed>) = 3 [pid 5078] lstat("./207/file0", [pid 6341] write(3, "1000", 4 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6341] <... write resumed>) = 4 [pid 5078] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] <... openat resumed>) = 4 [pid 6341] memfd_create("syzkaller", 0 [pid 5078] fstat(4, [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6341] <... memfd_create resumed>) = 3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] getdents64(4, [pid 6341] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6338] <... mount resumed>) = 0 [pid 5078] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 6338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6338] <... openat resumed>) = 3 [pid 5078] close(4 [pid 6338] chdir("./file0" [pid 5078] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6338] <... chdir resumed>) = 0 [pid 5078] rmdir("./207/file0" [pid 5076] close(3 [pid 6338] ioctl(4, LOOP_CLR_FD [pid 5078] <... rmdir resumed>) = 0 [pid 6338] <... ioctl resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 6338] close(4 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6338] <... close resumed>) = 0 [pid 5078] close(3 [pid 6338] exit_group(0 [pid 5078] <... close resumed>) = 0 [pid 6338] <... exit_group resumed>) = ? [pid 5078] rmdir("./207"./strace-static-x86_64: Process 6340 attached [pid 6339] <... write resumed>) = 2097152 [pid 6338] +++ exited with 0 +++ [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6342 [pid 6340] chdir("./211" [pid 5078] mkdir("./208", 0777 [pid 6340] <... chdir resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6338, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5078] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6342 attached [pid 5079] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6342] chdir("./204" [pid 6340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... openat resumed>) = 3 [pid 6342] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6342] <... prctl resumed>) = 0 [pid 6340] <... prctl resumed>) = 0 [pid 5079] fstat(3, [pid 5078] close(3 [pid 6342] setpgid(0, 0 [pid 6340] setpgid(0, 0 [pid 6339] munmap(0x7fa49b4d5000, 2097152 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 6342] <... setpgid resumed>) = 0 [pid 6340] <... setpgid resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6339] <... munmap resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6342] <... openat resumed>) = 3 [pid 5079] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6343 [pid 6342] write(3, "1000", 4 [pid 6340] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... write resumed>) = 4 [pid 6340] write(3, "1000", 4 [pid 5079] lstat("./211/binderfs", [pid 6342] close(3 [pid 6340] <... write resumed>) = 4 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6342] <... close resumed>) = 0 [pid 6340] close(3 [pid 6339] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] unlink("./211/binderfs" [pid 6342] symlink("/dev/binderfs", "./binderfs" [pid 6340] <... close resumed>) = 0 [pid 6339] <... openat resumed>) = 4 [pid 5079] <... unlink resumed>) = 0 [pid 6342] <... symlink resumed>) = 0 [pid 6340] symlink("/dev/binderfs", "./binderfs" [pid 6339] ioctl(4, LOOP_SET_FD, 3 [pid 5079] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] memfd_create("syzkaller", 0 [pid 6340] <... symlink resumed>) = 0 [pid 6339] <... ioctl resumed>) = 0 [pid 6342] <... memfd_create resumed>) = 3 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 ./strace-static-x86_64: Process 6343 attached [pid 6340] memfd_create("syzkaller", 0) = 3 [pid 6343] chdir("./208" [pid 6340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6343] <... chdir resumed>) = 0 [pid 6340] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... umount2 resumed>) = 0 [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6343] <... prctl resumed>) = 0 [pid 6343] setpgid(0, 0) = 0 [pid 5079] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6339] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6339] <... close resumed>) = 0 [pid 6339] mkdir("./file0", 0777 [pid 5079] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] <... openat resumed>) = 3 [pid 6341] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6339] <... mkdir resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 6343] write(3, "1000", 4 [ 177.471219][ T6339] loop2: detected capacity change from 0 to 4096 [pid 6339] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] fstat(4, [pid 6343] <... write resumed>) = 4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6343] close(3 [pid 5079] getdents64(4, [pid 6343] <... close resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6343] symlink("/dev/binderfs", "./binderfs" [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4 [pid 6343] <... symlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./211/file0") = 0 [pid 6343] memfd_create("syzkaller", 0 [pid 5079] getdents64(3, [pid 6343] <... memfd_create resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] close(3 [pid 6343] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./211") = 0 [pid 5079] mkdir("./212", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6344 [pid 6342] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6339] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6344 attached [pid 6339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6344] chdir("./212" [pid 6339] <... openat resumed>) = 3 [pid 6344] <... chdir resumed>) = 0 [pid 6339] chdir("./file0" [pid 6344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6339] <... chdir resumed>) = 0 [pid 6344] <... prctl resumed>) = 0 [pid 6339] ioctl(4, LOOP_CLR_FD [pid 6344] setpgid(0, 0 [pid 6339] <... ioctl resumed>) = 0 [pid 6344] <... setpgid resumed>) = 0 [pid 6341] <... write resumed>) = 2097152 [pid 6339] close(4 [pid 6344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6339] <... close resumed>) = 0 [pid 6344] <... openat resumed>) = 3 [pid 6339] exit_group(0 [pid 6344] write(3, "1000", 4 [pid 6339] <... exit_group resumed>) = ? [ 177.521127][ T6339] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6344] <... write resumed>) = 4 [pid 6339] +++ exited with 0 +++ [pid 6344] close(3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6339, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6344] <... close resumed>) = 0 [pid 6344] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] memfd_create("syzkaller", 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6344] <... memfd_create resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 3 [pid 6344] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6341] munmap(0x7fa49b4d5000, 2097152 [pid 5077] getdents64(3, [pid 6341] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./208/binderfs") = 0 [pid 5077] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6341] ioctl(4, LOOP_SET_FD, 3 [pid 6340] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6342] <... write resumed>) = 2097152 [pid 5077] lstat("./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./208/file0" [pid 6343] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./208") = 0 [pid 5077] mkdir("./209", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6341] <... ioctl resumed>) = 0 [pid 6341] close(3) = 0 [pid 6341] mkdir("./file0", 0777 [pid 6342] munmap(0x7fa49b4d5000, 2097152 [pid 6341] <... mkdir resumed>) = 0 [pid 6342] <... munmap resumed>) = 0 [ 177.615354][ T6341] loop0: detected capacity change from 0 to 4096 [pid 6341] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5077] <... openat resumed>) = 3 [pid 6342] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 6342] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6345 [pid 6344] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152./strace-static-x86_64: Process 6345 attached [pid 6345] chdir("./209") = 0 [pid 6345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6345] setpgid(0, 0) = 0 [pid 6345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6345] write(3, "1000", 4) = 4 [pid 6345] close(3) = 0 [pid 6342] <... ioctl resumed>) = 0 [pid 6345] symlink("/dev/binderfs", "./binderfs" [pid 6342] close(3 [pid 6345] <... symlink resumed>) = 0 [pid 6345] memfd_create("syzkaller", 0 [pid 6342] <... close resumed>) = 0 [pid 6340] <... write resumed>) = 2097152 [pid 6345] <... memfd_create resumed>) = 3 [pid 6342] mkdir("./file0", 0777 [pid 6345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6342] <... mkdir resumed>) = 0 [pid 6340] munmap(0x7fa49b4d5000, 2097152 [pid 6345] <... mmap resumed>) = 0x7fa49b4d5000 [ 177.660997][ T6341] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 177.673542][ T6342] loop1: detected capacity change from 0 to 4096 [pid 6342] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6343] <... write resumed>) = 2097152 [pid 6340] <... munmap resumed>) = 0 [pid 6343] munmap(0x7fa49b4d5000, 2097152 [pid 6340] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6343] <... munmap resumed>) = 0 [pid 6340] <... openat resumed>) = 4 [pid 6340] ioctl(4, LOOP_SET_FD, 3 [pid 6343] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6340] <... ioctl resumed>) = 0 [pid 6343] <... openat resumed>) = 4 [pid 6343] ioctl(4, LOOP_SET_FD, 3 [pid 6340] close(3 [pid 6343] <... ioctl resumed>) = 0 [pid 6341] <... mount resumed>) = 0 [pid 6340] <... close resumed>) = 0 [pid 6343] close(3 [pid 6341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6343] <... close resumed>) = 0 [pid 6342] <... mount resumed>) = 0 [pid 6341] chdir("./file0" [pid 6340] mkdir("./file0", 0777 [pid 6345] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6344] <... write resumed>) = 2097152 [pid 6343] mkdir("./file0", 0777 [pid 6342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6341] <... chdir resumed>) = 0 [pid 6344] munmap(0x7fa49b4d5000, 2097152 [pid 6342] <... openat resumed>) = 3 [pid 6341] ioctl(4, LOOP_CLR_FD [pid 6344] <... munmap resumed>) = 0 [pid 6343] <... mkdir resumed>) = 0 [pid 6342] chdir("./file0" [pid 6341] <... ioctl resumed>) = 0 [pid 6340] <... mkdir resumed>) = 0 [pid 6342] <... chdir resumed>) = 0 [pid 6341] close(4 [pid 6342] ioctl(4, LOOP_CLR_FD [pid 6341] <... close resumed>) = 0 [pid 6340] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6344] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6342] <... ioctl resumed>) = 0 [pid 6341] exit_group(0 [pid 6344] <... openat resumed>) = 4 [pid 6342] close(4 [pid 6341] <... exit_group resumed>) = ? [pid 6344] ioctl(4, LOOP_SET_FD, 3 [pid 6342] <... close resumed>) = 0 [ 177.720796][ T6342] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 177.738527][ T6340] loop5: detected capacity change from 0 to 4096 [ 177.754179][ T6343] loop3: detected capacity change from 0 to 4096 [pid 6341] +++ exited with 0 +++ [pid 6342] exit_group(0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 6342] <... exit_group resumed>) = ? [pid 6342] +++ exited with 0 +++ [pid 5075] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6343] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6342, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./202/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] <... ioctl resumed>) = 0 [pid 6344] close(3) = 0 [pid 6344] mkdir("./file0", 0777) = 0 [pid 6344] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] <... openat resumed>) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./204/binderfs") = 0 [pid 5076] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./202/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./202") = 0 [pid 6345] <... write resumed>) = 2097152 [pid 5075] mkdir("./203", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6346 [pid 6345] munmap(0x7fa49b4d5000, 2097152 [pid 5076] <... umount2 resumed>) = 0 [pid 6345] <... munmap resumed>) = 0 [pid 5076] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6346 attached [ 177.784536][ T6344] loop4: detected capacity change from 0 to 4096 [ 177.789816][ T6340] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 177.803928][ T6343] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 177.814376][ T6344] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) ) = -1 EINVAL (Invalid argument) [pid 6346] chdir("./203") = 0 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6346] setpgid(0, 0) = 0 [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6345] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6346] write(3, "1000", 4 [pid 6345] <... openat resumed>) = 4 [pid 5076] lstat("./204/file0", [pid 6346] <... write resumed>) = 4 [pid 6345] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6346] close(3) = 0 [pid 5076] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6346] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6346] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6346] memfd_create("syzkaller", 0 [pid 6340] <... mount resumed>) = 0 [pid 6346] <... memfd_create resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6346] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6340] <... openat resumed>) = 3 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6340] chdir("./file0" [pid 6344] <... mount resumed>) = 0 [pid 5076] getdents64(4, [pid 6344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6340] <... chdir resumed>) = 0 [pid 6344] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6344] chdir("./file0" [pid 6340] ioctl(4, LOOP_CLR_FD [pid 5076] getdents64(4, [pid 6344] <... chdir resumed>) = 0 [pid 6340] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6344] ioctl(4, LOOP_CLR_FD [pid 6340] close(4 [pid 5076] close(4 [pid 6345] <... ioctl resumed>) = 0 [pid 6344] <... ioctl resumed>) = 0 [pid 6340] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6345] close(3 [pid 6344] close(4 [pid 6340] exit_group(0 [pid 5076] rmdir("./204/file0" [pid 6345] <... close resumed>) = 0 [pid 6344] <... close resumed>) = 0 [pid 6340] <... exit_group resumed>) = ? [pid 6345] mkdir("./file0", 0777 [pid 6344] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 6345] <... mkdir resumed>) = 0 [pid 6344] <... exit_group resumed>) = ? [pid 6343] <... mount resumed>) = 0 [pid 6340] +++ exited with 0 +++ [pid 6345] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6344] +++ exited with 0 +++ [pid 6343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6340, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5076] getdents64(3, [pid 6343] <... openat resumed>) = 3 [ 177.878681][ T6345] loop2: detected capacity change from 0 to 4096 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6344, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6343] chdir("./file0" [pid 5080] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6343] <... chdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] ioctl(4, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 6343] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] close(4 [pid 5080] fstat(3, [pid 5079] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] fstat(3, [pid 5080] getdents64(3, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6343] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] getdents64(3, [pid 5076] rmdir("./204" [pid 5080] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6343] exit_group(0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] <... exit_group resumed>) = ? [pid 5080] lstat("./211/binderfs", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] lstat("./212/binderfs", [pid 5080] unlink("./211/binderfs" [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5079] unlink("./212/binderfs" [pid 6343] +++ exited with 0 +++ [pid 5080] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5076] mkdir("./205", 0777 [pid 5080] <... umount2 resumed>) = 0 [pid 5079] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] lstat("./211/file0", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./212/file0", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5080] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6346] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(3, [pid 5076] close(3 [pid 5080] <... openat resumed>) = 4 [pid 5079] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5079] <... openat resumed>) = 4 [pid 5078] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] fstat(4, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] getdents64(4, [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6347 [pid 5080] getdents64(4, [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] lstat("./208/binderfs", [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] getdents64(4, [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] close(4 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./208/binderfs" [pid 5080] <... close resumed>) = 0 [pid 5079] close(4 [pid 5078] <... unlink resumed>) = 0 [pid 5080] rmdir("./211/file0" [pid 5079] <... close resumed>) = 0 [ 177.935300][ T6345] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5079] rmdir("./212/file0"./strace-static-x86_64: Process 6347 attached [pid 5080] getdents64(3, [pid 5079] <... rmdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] getdents64(3, [pid 5080] close(3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] <... close resumed>) = 0 [pid 5079] close(3 [pid 5080] rmdir("./211" [pid 5079] <... close resumed>) = 0 [pid 6347] chdir("./205" [pid 5080] <... rmdir resumed>) = 0 [pid 5079] rmdir("./212" [pid 6347] <... chdir resumed>) = 0 [pid 5080] mkdir("./212", 0777 [pid 5079] <... rmdir resumed>) = 0 [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... mkdir resumed>) = 0 [pid 5079] mkdir("./213", 0777 [pid 6347] <... prctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... mkdir resumed>) = 0 [pid 6347] setpgid(0, 0 [pid 5080] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6347] <... setpgid resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = 0 [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5080] close(3 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5079] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] write(3, "1000", 4 [pid 6345] <... mount resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./208/file0", [pid 6347] <... write resumed>) = 4 [pid 6345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6349 attached ./strace-static-x86_64: Process 6348 attached [pid 6347] close(3 [pid 6346] <... write resumed>) = 2097152 [pid 6345] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6348 [pid 5078] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6347] <... close resumed>) = 0 [pid 6345] chdir("./file0" [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6349 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6347] symlink("/dev/binderfs", "./binderfs" [pid 6345] <... chdir resumed>) = 0 [pid 5078] fstat(4, [pid 6348] chdir("./212" [pid 6345] ioctl(4, LOOP_CLR_FD [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6347] <... symlink resumed>) = 0 [pid 6345] <... ioctl resumed>) = 0 [pid 5078] getdents64(4, [pid 6345] close(4 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] close(4 [pid 6348] <... chdir resumed>) = 0 [pid 6347] memfd_create("syzkaller", 0 [pid 6345] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6349] chdir("./213" [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6347] <... memfd_create resumed>) = 3 [pid 6346] munmap(0x7fa49b4d5000, 2097152 [pid 6345] exit_group(0 [pid 6349] <... chdir resumed>) = 0 [pid 5078] rmdir("./208/file0" [pid 6349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6348] <... prctl resumed>) = 0 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6345] <... exit_group resumed>) = ? [pid 5078] <... rmdir resumed>) = 0 [pid 6349] <... prctl resumed>) = 0 [pid 5078] getdents64(3, [pid 6349] setpgid(0, 0 [pid 6347] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6349] <... setpgid resumed>) = 0 [pid 5078] close(3 [pid 6349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 6349] <... openat resumed>) = 3 [pid 6345] +++ exited with 0 +++ [pid 6348] setpgid(0, 0 [pid 5078] rmdir("./208" [pid 6349] write(3, "1000", 4 [pid 5078] <... rmdir resumed>) = 0 [pid 6349] <... write resumed>) = 4 [pid 5078] mkdir("./209", 0777 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6345, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6349] close(3 [pid 6348] <... setpgid resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 6349] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... restart_syscall resumed>) = 0 [pid 6349] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... openat resumed>) = 3 [pid 6349] <... symlink resumed>) = 0 [pid 6348] <... openat resumed>) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6349] memfd_create("syzkaller", 0 [pid 6348] write(3, "1000", 4 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6349] <... memfd_create resumed>) = 3 [pid 6348] <... write resumed>) = 4 [pid 5078] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6348] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6349] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6348] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... openat resumed>) = 3 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6346] <... munmap resumed>) = 0 [pid 5077] fstat(3, [pid 6348] <... symlink resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6350 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6348] memfd_create("syzkaller", 0) = 3 [pid 5077] getdents64(3, [pid 6348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6346] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./209/binderfs") = 0 [pid 5077] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6346] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 6346] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 6350 attached [pid 6346] close(3 [pid 6350] chdir("./209" [pid 6346] <... close resumed>) = 0 [pid 6350] <... chdir resumed>) = 0 [pid 6349] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6346] mkdir("./file0", 0777 [pid 6350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6346] <... mkdir resumed>) = 0 [pid 6350] setpgid(0, 0 [pid 6346] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6350] <... setpgid resumed>) = 0 [pid 6350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6347] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6350] <... openat resumed>) = 3 [pid 5077] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] write(3, "1000", 4) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] close(3 [pid 5077] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6350] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6350] symlink("/dev/binderfs", "./binderfs" [pid 5077] fstat(4, [pid 6350] <... symlink resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 6350] memfd_create("syzkaller", 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6350] <... memfd_create resumed>) = 3 [pid 6348] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] getdents64(4, [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6350] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5077] close(4) = 0 [pid 5077] rmdir("./209/file0") = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./209") = 0 [pid 5077] mkdir("./210", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6351 ./strace-static-x86_64: Process 6351 attached [ 178.101340][ T6346] loop0: detected capacity change from 0 to 4096 [ 178.124534][ T6346] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6351] chdir("./210" [pid 6349] <... write resumed>) = 2097152 [pid 6351] <... chdir resumed>) = 0 [pid 6346] <... mount resumed>) = 0 [pid 6351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6351] <... prctl resumed>) = 0 [pid 6351] setpgid(0, 0 [pid 6346] <... openat resumed>) = 3 [pid 6346] chdir("./file0" [pid 6351] <... setpgid resumed>) = 0 [pid 6346] <... chdir resumed>) = 0 [pid 6351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6346] ioctl(4, LOOP_CLR_FD [pid 6351] <... openat resumed>) = 3 [pid 6346] <... ioctl resumed>) = 0 [pid 6351] write(3, "1000", 4 [pid 6346] close(4 [pid 6351] <... write resumed>) = 4 [pid 6351] close(3 [pid 6346] <... close resumed>) = 0 [pid 6351] <... close resumed>) = 0 [pid 6346] exit_group(0 [pid 6351] symlink("/dev/binderfs", "./binderfs" [pid 6347] <... write resumed>) = 2097152 [pid 6346] <... exit_group resumed>) = ? [pid 6351] <... symlink resumed>) = 0 [pid 6351] memfd_create("syzkaller", 0 [pid 6346] +++ exited with 0 +++ [pid 6351] <... memfd_create resumed>) = 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6351] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6350] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6348] <... write resumed>) = 2097152 [pid 6349] munmap(0x7fa49b4d5000, 2097152) = 0 [pid 5075] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6347] munmap(0x7fa49b4d5000, 2097152 [pid 5075] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] munmap(0x7fa49b4d5000, 2097152 [pid 6347] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6348] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 6348] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6349] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6348] <... openat resumed>) = 4 [pid 5075] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6349] <... openat resumed>) = 4 [pid 6348] ioctl(4, LOOP_SET_FD, 3 [pid 6347] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6349] ioctl(4, LOOP_SET_FD, 3 [pid 6347] <... openat resumed>) = 4 [pid 5075] lstat("./203/binderfs", [pid 6349] <... ioctl resumed>) = 0 [pid 6347] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./203/binderfs") = 0 [pid 5075] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6349] close(3 [pid 6348] <... ioctl resumed>) = 0 [pid 6348] close(3) = 0 [pid 6349] <... close resumed>) = 0 [pid 6349] mkdir("./file0", 0777 [pid 6348] mkdir("./file0", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 6348] <... mkdir resumed>) = 0 [pid 6348] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6347] <... ioctl resumed>) = 0 [pid 6349] <... mkdir resumed>) = 0 [pid 6349] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 178.250402][ T6348] loop5: detected capacity change from 0 to 4096 [ 178.261853][ T6349] loop4: detected capacity change from 0 to 4096 [ 178.270123][ T6347] loop1: detected capacity change from 0 to 4096 [pid 6347] close(3) = 0 [pid 6347] mkdir("./file0", 0777) = 0 [pid 6347] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6350] <... write resumed>) = 2097152 [pid 6350] munmap(0x7fa49b4d5000, 2097152 [pid 5075] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6351] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6350] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 6350] ioctl(4, LOOP_SET_FD, 3 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [ 178.300047][ T6348] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 178.304195][ T6349] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 178.323217][ T6347] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5075] rmdir("./203/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6350] <... ioctl resumed>) = 0 [pid 6350] close(3 [pid 5075] rmdir("./203" [pid 6350] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6350] mkdir("./file0", 0777 [pid 6348] <... mount resumed>) = 0 [pid 5075] mkdir("./204", 0777 [pid 6350] <... mkdir resumed>) = 0 [pid 6348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 6350] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6348] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6352 ./strace-static-x86_64: Process 6352 attached [pid 6352] chdir("./204" [pid 6348] chdir("./file0") = 0 [pid 6348] ioctl(4, LOOP_CLR_FD [pid 6352] <... chdir resumed>) = 0 [pid 6348] <... ioctl resumed>) = 0 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6349] <... mount resumed>) = 0 [pid 6347] <... mount resumed>) = 0 [pid 6348] close(4 [pid 6352] <... prctl resumed>) = 0 [pid 6349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6348] <... close resumed>) = 0 [pid 6347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6352] setpgid(0, 0 [pid 6349] <... openat resumed>) = 3 [pid 6348] exit_group(0 [pid 6347] <... openat resumed>) = 3 [pid 6352] <... setpgid resumed>) = 0 [pid 6349] chdir("./file0" [pid 6348] <... exit_group resumed>) = ? [pid 6347] chdir("./file0" [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6351] <... write resumed>) = 2097152 [pid 6349] <... chdir resumed>) = 0 [pid 6347] <... chdir resumed>) = 0 [pid 6352] <... openat resumed>) = 3 [pid 6351] munmap(0x7fa49b4d5000, 2097152 [pid 6349] ioctl(4, LOOP_CLR_FD [pid 6348] +++ exited with 0 +++ [pid 6347] ioctl(4, LOOP_CLR_FD [pid 6352] write(3, "1000", 4 [pid 6351] <... munmap resumed>) = 0 [pid 6349] <... ioctl resumed>) = 0 [pid 6347] <... ioctl resumed>) = 0 [pid 6352] <... write resumed>) = 4 [pid 6349] close(4 [pid 6347] close(4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6352] close(3 [pid 6349] <... close resumed>) = 0 [pid 6347] <... close resumed>) = 0 [ 178.358841][ T6350] loop3: detected capacity change from 0 to 4096 [ 178.396039][ T6350] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 5080] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] <... close resumed>) = 0 [pid 6349] exit_group(0 [pid 6347] exit_group(0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6352] symlink("/dev/binderfs", "./binderfs" [pid 6351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6349] <... exit_group resumed>) = ? [pid 6347] <... exit_group resumed>) = ? [pid 5080] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6352] <... symlink resumed>) = 0 [pid 6351] <... openat resumed>) = 4 [pid 6349] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 5080] <... openat resumed>) = 3 [pid 6352] memfd_create("syzkaller", 0 [pid 6351] ioctl(4, LOOP_SET_FD, 3 [pid 6350] <... mount resumed>) = 0 [pid 5080] fstat(3, [pid 6352] <... memfd_create resumed>) = 3 [pid 6351] <... ioctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6349, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] getdents64(3, [pid 5079] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] <... openat resumed>) = 3 [pid 5080] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6347, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 6350] chdir("./file0" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5076] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] <... chdir resumed>) = 0 [pid 5080] lstat("./212/binderfs", [pid 5079] fstat(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] ioctl(4, LOOP_CLR_FD [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6350] <... ioctl resumed>) = 0 [pid 5080] unlink("./212/binderfs" [pid 5079] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 6350] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] fstat(3, [pid 6350] <... close resumed>) = 0 [pid 5080] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6351] close(3 [pid 6350] exit_group(0 [pid 5080] <... umount2 resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6351] <... close resumed>) = 0 [pid 6350] <... exit_group resumed>) = ? [pid 5080] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] lstat("./213/binderfs", [pid 5076] getdents64(3, [pid 6351] mkdir("./file0", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6351] <... mkdir resumed>) = 0 [pid 6350] +++ exited with 0 +++ [pid 5080] lstat("./212/file0", [pid 5079] unlink("./213/binderfs" [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6351] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... unlink resumed>) = 0 [ 178.461818][ T6351] loop2: detected capacity change from 0 to 4096 [pid 5076] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6350, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./205/binderfs", [pid 5080] <... openat resumed>) = 4 [pid 5078] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] fstat(4, [pid 5078] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] fstat(3, [pid 6352] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5080] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] unlink("./205/binderfs" [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, [pid 5080] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5078] lstat("./209/binderfs", [pid 5080] rmdir("./212/file0" [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] unlink("./209/binderfs" [pid 5080] getdents64(3, [pid 5078] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3) = 0 [pid 5080] rmdir("./212" [pid 5079] <... umount2 resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./213", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] lstat("./213/file0", [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(3 [pid 5079] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6353 attached [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6353 [pid 5079] fstat(4, [pid 5078] <... umount2 resumed>) = 0 [pid 6353] chdir("./213" [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6353] <... chdir resumed>) = 0 [pid 5079] getdents64(4, [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [ 178.506055][ T6351] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6353] <... prctl resumed>) = 0 [pid 5079] getdents64(4, [pid 6353] setpgid(0, 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6353] <... setpgid resumed>) = 0 [pid 5079] close(4) = 0 [pid 5079] rmdir("./213/file0") = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] close(3) = 0 [pid 5079] rmdir("./213") = 0 [pid 5079] mkdir("./214", 0777) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5078] lstat("./209/file0", [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6354 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] write(3, "1000", 4 [pid 5078] <... openat resumed>) = 4 [pid 6353] <... write resumed>) = 4 [pid 5078] fstat(4, [pid 6353] close(3 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6353] <... close resumed>) = 0 [pid 6351] <... mount resumed>) = 0 [pid 5078] getdents64(4, ./strace-static-x86_64: Process 6354 attached [pid 6353] symlink("/dev/binderfs", "./binderfs" [pid 6351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6354] chdir("./214" [pid 6351] <... openat resumed>) = 3 [pid 5078] getdents64(4, [pid 6354] <... chdir resumed>) = 0 [pid 6351] chdir("./file0" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6351] <... chdir resumed>) = 0 [pid 5078] close(4 [pid 6354] <... prctl resumed>) = 0 [pid 6351] ioctl(4, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 6354] setpgid(0, 0 [pid 6353] <... symlink resumed>) = 0 [pid 6351] <... ioctl resumed>) = 0 [pid 5078] rmdir("./209/file0" [pid 6354] <... setpgid resumed>) = 0 [pid 6351] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 6354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6353] memfd_create("syzkaller", 0 [pid 6351] <... close resumed>) = 0 [pid 5078] getdents64(3, [pid 6354] <... openat resumed>) = 3 [pid 6353] <... memfd_create resumed>) = 3 [pid 6351] exit_group(0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6354] write(3, "1000", 4 [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6351] <... exit_group resumed>) = ? [pid 5078] close(3 [pid 6354] <... write resumed>) = 4 [pid 6353] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6351] +++ exited with 0 +++ [pid 5078] <... close resumed>) = 0 [pid 6354] close(3 [pid 5078] rmdir("./209" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6351, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6354] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 6354] symlink("/dev/binderfs", "./binderfs" [pid 5078] mkdir("./210", 0777 [pid 6354] <... symlink resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6354] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] <... memfd_create resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 3 [pid 6354] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] fstat(3, [pid 5076] <... umount2 resumed>) = 0 [pid 5078] close(3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 6352] <... write resumed>) = 2097152 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] munmap(0x7fa49b4d5000, 2097152 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6355 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./210/binderfs", [pid 5076] lstat("./205/file0", [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] unlink("./210/binderfs" [pid 5076] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] <... munmap resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6355 attached [pid 6352] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] chdir("./210" [pid 6352] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6355] <... chdir resumed>) = 0 [pid 6352] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... openat resumed>) = 4 [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] fstat(4, [pid 6355] <... prctl resumed>) = 0 [pid 6355] setpgid(0, 0) = 0 [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6355] write(3, "1000", 4) = 4 [pid 6355] close(3) = 0 [pid 6355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6355] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, [pid 6355] <... memfd_create resumed>) = 3 [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./205/file0") = 0 [pid 5076] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./205") = 0 [pid 5076] mkdir("./206", 0777 [pid 6352] <... ioctl resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6353] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6352] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6352] <... close resumed>) = 0 [pid 5077] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 6352] mkdir("./file0", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6352] <... mkdir resumed>) = 0 [pid 5077] lstat("./210/file0", [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6352] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 178.664825][ T6352] loop0: detected capacity change from 0 to 4096 [pid 5076] close(3 [pid 5077] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6354] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6356 [pid 5077] getdents64(4, [pid 6353] <... write resumed>) = 2097152 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./210/file0") = 0 [pid 5077] getdents64(3, ./strace-static-x86_64: Process 6356 attached 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6356] chdir("./206" [pid 6353] munmap(0x7fa49b4d5000, 2097152 [pid 5077] close(3 [pid 6356] <... chdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] rmdir("./210" [pid 6356] <... prctl resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6356] setpgid(0, 0 [pid 5077] mkdir("./211", 0777 [pid 6356] <... setpgid resumed>) = 0 [pid 6353] <... munmap resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6356] <... openat resumed>) = 3 [pid 6353] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 3 [pid 6356] write(3, "1000", 4 [pid 6353] ioctl(4, LOOP_SET_FD, 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6356] <... write resumed>) = 4 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6357 ./strace-static-x86_64: Process 6357 attached [pid 6356] close(3 [ 178.727985][ T6352] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6357] chdir("./211") = 0 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6357] setpgid(0, 0) = 0 [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6357] write(3, "1000", 4) = 4 [pid 6357] close(3) = 0 [pid 6357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6357] memfd_create("syzkaller", 0 [pid 6356] <... close resumed>) = 0 [pid 6353] <... ioctl resumed>) = 0 [pid 6357] <... memfd_create resumed>) = 3 [pid 6356] symlink("/dev/binderfs", "./binderfs" [pid 6353] close(3 [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6356] <... symlink resumed>) = 0 [pid 6353] <... close resumed>) = 0 [pid 6357] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6353] mkdir("./file0", 0777 [pid 6356] memfd_create("syzkaller", 0 [pid 6353] <... mkdir resumed>) = 0 [pid 6356] <... memfd_create resumed>) = 3 [pid 6353] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6356] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6352] <... mount resumed>) = 0 [pid 6352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6352] chdir("./file0") = 0 [pid 6352] ioctl(4, LOOP_CLR_FD) = 0 [pid 6352] close(4) = 0 [pid 6352] exit_group(0) = ? [pid 6352] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6352, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 178.771520][ T6353] loop5: detected capacity change from 0 to 4096 [ 178.809540][ T6353] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 5075] lstat("./204/binderfs", [pid 6354] <... write resumed>) = 2097152 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./204/binderfs") = 0 [pid 6357] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6354] munmap(0x7fa49b4d5000, 2097152 [pid 5075] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6354] <... munmap resumed>) = 0 [pid 6355] <... write resumed>) = 2097152 [pid 6354] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... umount2 resumed>) = 0 [pid 6354] <... openat resumed>) = 4 [pid 5075] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] munmap(0x7fa49b4d5000, 2097152 [pid 6354] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6353] <... mount resumed>) = 0 [pid 5075] umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] chdir("./file0" [pid 5075] <... openat resumed>) = 4 [pid 6353] <... chdir resumed>) = 0 [pid 5075] fstat(4, [pid 6353] ioctl(4, LOOP_CLR_FD [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6354] <... ioctl resumed>) = 0 [pid 6353] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 6355] <... munmap resumed>) = 0 [pid 6354] close(3 [pid 6353] close(4 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6353] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 6353] exit_group(0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6353] <... exit_group resumed>) = ? [pid 5075] close(4 [pid 6353] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6353, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] rmdir("./204/file0" [pid 6355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6354] mkdir("./file0", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 6355] <... openat resumed>) = 4 [pid 6354] <... mkdir resumed>) = 0 [pid 6356] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] getdents64(3, [pid 6355] ioctl(4, LOOP_SET_FD, 3 [pid 6354] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6355] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5080] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./204" [pid 6357] <... write resumed>) = 2097152 [pid 5080] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5075] mkdir("./205", 0777 [pid 5080] fstat(3, [pid 5075] <... mkdir resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 6355] close(3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6355] <... close resumed>) = 0 [pid 5080] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] munmap(0x7fa49b4d5000, 2097152 [pid 6356] <... write resumed>) = 2097152 [pid 6355] mkdir("./file0", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6356] munmap(0x7fa49b4d5000, 2097152 [pid 6355] <... mkdir resumed>) = 0 [pid 5080] lstat("./213/binderfs", [pid 6356] <... munmap resumed>) = 0 [ 178.900132][ T6354] loop4: detected capacity change from 0 to 4096 [ 178.931528][ T6355] loop3: detected capacity change from 0 to 4096 [ 178.938991][ T6354] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6355] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6356] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6356] <... openat resumed>) = 4 [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 6357] <... munmap resumed>) = 0 [pid 6354] <... mount resumed>) = 0 [pid 5080] unlink("./213/binderfs" [pid 6356] <... ioctl resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 6356] close(3) = 0 [pid 6357] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6356] mkdir("./file0", 0777 [pid 6357] <... openat resumed>) = 4 [pid 6357] ioctl(4, LOOP_SET_FD, 3 [pid 6354] <... openat resumed>) = 3 [pid 6356] <... mkdir resumed>) = 0 [pid 6356] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6354] chdir("./file0" [pid 6357] <... ioctl resumed>) = 0 [pid 6354] <... chdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 6354] ioctl(4, LOOP_CLR_FD [pid 6357] close(3 [pid 6354] <... ioctl resumed>) = 0 [pid 6357] <... close resumed>) = 0 [pid 6354] close(4 [pid 5080] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] mkdir("./file0", 0777 [pid 6355] <... mount resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 6357] <... mkdir resumed>) = 0 [pid 6354] exit_group(0) = ? [pid 6354] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6354, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 6357] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./213/file0" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 178.975852][ T6355] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 178.976795][ T6356] loop1: detected capacity change from 0 to 4096 [ 179.001689][ T6357] loop2: detected capacity change from 0 to 4096 [ 179.008860][ T6356] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5079] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5079] lstat("./214/binderfs", [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] close(3 [pid 5079] unlink("./214/binderfs" [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./213" [pid 5079] <... unlink resumed>) = 0 [pid 6355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 5079] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5080] mkdir("./214", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 6355] chdir("./file0" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6355] <... chdir resumed>) = 0 [pid 6355] ioctl(4, LOOP_CLR_FD [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6358 [pid 6355] <... ioctl resumed>) = 0 [pid 6355] close(4) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 6355] exit_group(0 [pid 5079] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] <... exit_group resumed>) = ? [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 6355] +++ exited with 0 +++ [pid 5079] lstat("./214/file0", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6358 attached [pid 5079] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6358] chdir("./214" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=1 /* 0.01 s */} --- ./strace-static-x86_64: Process 6359 attached [pid 6358] <... chdir resumed>) = 0 [pid 6356] <... mount resumed>) = 0 [pid 6358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6358] <... prctl resumed>) = 0 [pid 6358] setpgid(0, 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6359 [pid 6358] <... setpgid resumed>) = 0 [ 179.042681][ T6357] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] fstat(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] chdir("./205" [pid 6358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6357] <... mount resumed>) = 0 [pid 6356] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6359] <... chdir resumed>) = 0 [pid 6358] <... openat resumed>) = 3 [pid 6357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6356] chdir("./file0" [pid 5079] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 6359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6358] write(3, "1000", 4 [pid 6357] <... openat resumed>) = 3 [pid 6356] <... chdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] fstat(3, [pid 6359] <... prctl resumed>) = 0 [pid 6358] <... write resumed>) = 4 [pid 6357] chdir("./file0" [pid 6356] ioctl(4, LOOP_CLR_FD [pid 5079] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6359] setpgid(0, 0 [pid 6358] close(3 [pid 6357] <... chdir resumed>) = 0 [pid 6356] <... ioctl resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(3, [pid 6359] <... setpgid resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 6357] ioctl(4, LOOP_CLR_FD [pid 6356] close(4 [pid 5079] close(4 [pid 6359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6358] symlink("/dev/binderfs", "./binderfs" [pid 6357] <... ioctl resumed>) = 0 [pid 6356] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6359] <... openat resumed>) = 3 [pid 6358] <... symlink resumed>) = 0 [pid 6357] close(4 [pid 6356] exit_group(0 [pid 5079] rmdir("./214/file0" [pid 5078] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] write(3, "1000", 4 [pid 6358] memfd_create("syzkaller", 0 [pid 6357] <... close resumed>) = 0 [pid 6356] <... exit_group resumed>) = ? [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] <... write resumed>) = 4 [pid 6358] <... memfd_create resumed>) = 3 [pid 6357] exit_group(0 [pid 6356] +++ exited with 0 +++ [pid 5079] getdents64(3, [pid 5078] lstat("./210/binderfs", [pid 6359] close(3 [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6357] <... exit_group resumed>) = ? [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6356, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6359] <... close resumed>) = 0 [pid 6358] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6357] +++ exited with 0 +++ [pid 5079] close(3 [pid 5078] unlink("./210/binderfs" [pid 6359] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 6359] <... symlink resumed>) = 0 [pid 5079] rmdir("./214" [pid 5078] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6359] memfd_create("syzkaller", 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] <... memfd_create resumed>) = 3 [pid 5079] mkdir("./215", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6359] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] fstat(3, [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5076] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] close(3 [pid 5078] lstat("./210/file0", [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./211/binderfs", [pid 5076] fstat(3, [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6360 [pid 5078] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5077] unlink("./211/binderfs" [pid 5078] fstat(4, [pid 5077] <... unlink resumed>) = 0 [pid 5076] getdents64(3, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6360 attached [pid 5078] getdents64(4, [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6360] chdir("./215" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6360] <... chdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] lstat("./206/binderfs", [pid 6360] <... prctl resumed>) = 0 [pid 5078] close(4 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6360] setpgid(0, 0 [pid 5078] <... close resumed>) = 0 [pid 5076] unlink("./206/binderfs" [pid 6360] <... setpgid resumed>) = 0 [pid 5078] rmdir("./210/file0" [pid 6360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6360] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5076] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6360] write(3, "1000", 4 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6360] <... write resumed>) = 4 [pid 5078] close(3 [pid 6360] close(3 [pid 5078] <... close resumed>) = 0 [pid 6360] <... close resumed>) = 0 [pid 5078] rmdir("./210" [pid 6360] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... rmdir resumed>) = 0 [pid 6360] <... symlink resumed>) = 0 [pid 6358] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5078] mkdir("./211", 0777 [pid 6360] memfd_create("syzkaller", 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6360] <... memfd_create resumed>) = 3 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 6360] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] lstat("./211/file0", [pid 5078] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6361 [pid 5077] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, ./strace-static-x86_64: Process 6361 attached 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6361] chdir("./211" [pid 5077] close(4 [pid 6361] <... chdir resumed>) = 0 [pid 6359] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5077] <... close resumed>) = 0 [pid 6361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] rmdir("./211/file0" [pid 6361] <... prctl resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6361] setpgid(0, 0 [pid 5077] getdents64(3, [pid 5076] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6361] <... setpgid resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5076] lstat("./206/file0", [pid 6361] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6361] write(3, "1000", 4 [pid 5077] rmdir("./211" [pid 5076] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6361] <... write resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6361] close(3 [pid 5077] mkdir("./212", 0777 [pid 5076] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6361] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6361] symlink("/dev/binderfs", "./binderfs" [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] fstat(4, [pid 6361] <... symlink resumed>) = 0 [pid 6358] <... write resumed>) = 2097152 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6361] memfd_create("syzkaller", 0 [pid 6358] munmap(0x7fa49b4d5000, 2097152 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6361] <... memfd_create resumed>) = 3 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] getdents64(4, [pid 6361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] close(3 [pid 6361] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6358] <... munmap resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6362 attached [pid 6360] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6359] <... write resumed>) = 2097152 [pid 6358] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6362 [pid 5076] close(4 [pid 6362] chdir("./212" [pid 6359] munmap(0x7fa49b4d5000, 2097152 [pid 6358] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6362] <... chdir resumed>) = 0 [pid 6359] <... munmap resumed>) = 0 [pid 6358] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./206/file0" [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6361] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6359] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 6362] <... prctl resumed>) = 0 [pid 6359] <... openat resumed>) = 4 [pid 6358] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 6362] setpgid(0, 0 [pid 6359] ioctl(4, LOOP_SET_FD, 3 [pid 6358] close(3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6362] <... setpgid resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 5076] close(3 [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6358] mkdir("./file0", 0777 [pid 5076] <... close resumed>) = 0 [pid 6362] <... openat resumed>) = 3 [pid 6358] <... mkdir resumed>) = 0 [pid 5076] rmdir("./206" [pid 6362] write(3, "1000", 4 [pid 6358] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] <... rmdir resumed>) = 0 [pid 6362] <... write resumed>) = 4 [pid 6359] <... ioctl resumed>) = 0 [pid 5076] mkdir("./207", 0777 [pid 6362] close(3 [pid 6359] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 6362] <... close resumed>) = 0 [pid 6359] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6362] symlink("/dev/binderfs", "./binderfs" [pid 6359] mkdir("./file0", 0777 [pid 5076] <... openat resumed>) = 3 [pid 6362] <... symlink resumed>) = 0 [pid 6359] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6362] memfd_create("syzkaller", 0 [pid 6359] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6362] <... memfd_create resumed>) = 3 [pid 5076] close(3 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6361] <... write resumed>) = 2097152 [pid 6360] <... write resumed>) = 2097152 [pid 5076] <... close resumed>) = 0 [pid 6362] <... mmap resumed>) = 0x7fa49b4d5000 [ 179.336081][ T6358] loop5: detected capacity change from 0 to 4096 [ 179.346555][ T6359] loop0: detected capacity change from 0 to 4096 [ 179.360057][ T6358] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6361] munmap(0x7fa49b4d5000, 2097152 [pid 6360] munmap(0x7fa49b4d5000, 2097152 [pid 6358] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6363 attached [pid 6361] <... munmap resumed>) = 0 [pid 6360] <... munmap resumed>) = 0 [pid 6358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6363] chdir("./207" [pid 6361] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6360] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6358] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6363 [pid 6363] <... chdir resumed>) = 0 [pid 6362] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6361] <... openat resumed>) = 4 [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6361] ioctl(4, LOOP_SET_FD, 3 [pid 6360] <... openat resumed>) = 4 [ 179.379820][ T6359] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6358] chdir("./file0" [pid 6363] <... prctl resumed>) = 0 [pid 6360] ioctl(4, LOOP_SET_FD, 3 [pid 6358] <... chdir resumed>) = 0 [pid 6363] setpgid(0, 0 [pid 6362] <... write resumed>) = 2097152 [pid 6361] <... ioctl resumed>) = 0 [pid 6363] <... setpgid resumed>) = 0 [pid 6360] <... ioctl resumed>) = 0 [pid 6359] <... mount resumed>) = 0 [pid 6358] ioctl(4, LOOP_CLR_FD [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6360] close(3 [pid 6358] <... ioctl resumed>) = 0 [pid 6363] <... openat resumed>) = 3 [pid 6360] <... close resumed>) = 0 [pid 6359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6358] close(4 [pid 6363] write(3, "1000", 4 [pid 6360] mkdir("./file0", 0777 [pid 6359] <... openat resumed>) = 3 [pid 6358] <... close resumed>) = 0 [pid 6360] <... mkdir resumed>) = 0 [pid 6358] exit_group(0 [pid 6360] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6358] <... exit_group resumed>) = ? [pid 6363] <... write resumed>) = 4 [pid 6362] munmap(0x7fa49b4d5000, 2097152 [pid 6361] close(3 [pid 6359] chdir("./file0" [pid 6363] close(3 [pid 6362] <... munmap resumed>) = 0 [pid 6361] <... close resumed>) = 0 [pid 6359] <... chdir resumed>) = 0 [pid 6358] +++ exited with 0 +++ [pid 6363] <... close resumed>) = 0 [pid 6362] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6361] mkdir("./file0", 0777 [pid 6359] ioctl(4, LOOP_CLR_FD [pid 6363] symlink("/dev/binderfs", "./binderfs" [pid 6362] <... openat resumed>) = 4 [pid 6361] <... mkdir resumed>) = 0 [pid 6359] <... ioctl resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6358, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6363] <... symlink resumed>) = 0 [pid 6362] ioctl(4, LOOP_SET_FD, 3 [pid 6361] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 179.418634][ T6361] loop3: detected capacity change from 0 to 4096 [ 179.430417][ T6360] loop4: detected capacity change from 0 to 4096 [ 179.446315][ T6360] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6359] close(4 [pid 5080] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] memfd_create("syzkaller", 0 [pid 6362] <... ioctl resumed>) = 0 [pid 6360] <... mount resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6363] <... memfd_create resumed>) = 3 [pid 6362] close(3 [pid 6359] <... close resumed>) = 0 [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6362] <... close resumed>) = 0 [pid 6359] exit_group(0 [pid 6363] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6362] mkdir("./file0", 0777 [pid 6359] <... exit_group resumed>) = ? [pid 6362] <... mkdir resumed>) = 0 [pid 6359] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 6360] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6359, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=4 /* 0.04 s */} --- [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6360] chdir("./file0" [pid 5080] getdents64(3, [pid 5075] <... restart_syscall resumed>) = 0 [pid 6360] <... chdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6360] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6360] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6360] close(4 [pid 5080] lstat("./214/binderfs", [pid 6360] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6360] exit_group(0 [pid 5080] unlink("./214/binderfs" [pid 5075] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6360] <... exit_group resumed>) = ? [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] fstat(3, [pid 6360] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6360, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5079] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5079] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] fstat(3, [pid 5075] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5075] lstat("./205/binderfs", [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./205/binderfs" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./215/binderfs", [pid 5075] <... unlink resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./215/binderfs") = 0 [pid 6361] <... mount resumed>) = 0 [pid 5079] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6361] chdir("./file0") = 0 [pid 6361] ioctl(4, LOOP_CLR_FD) = 0 [pid 6361] close(4) = 0 [pid 6361] exit_group(0) = ? [pid 6361] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6361, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 179.470055][ T6362] loop2: detected capacity change from 0 to 4096 [ 179.478214][ T6361] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 179.505971][ T6362] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 5078] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./211/binderfs") = 0 [pid 5078] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... write resumed>) = 2097152 [pid 6363] munmap(0x7fa49b4d5000, 2097152 [pid 6362] <... mount resumed>) = 0 [pid 6362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6362] chdir("./file0") = 0 [pid 6362] ioctl(4, LOOP_CLR_FD) = 0 [pid 6362] close(4) = 0 [pid 6362] exit_group(0) = ? [pid 6362] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6362, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5077] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./212/binderfs") = 0 [pid 5077] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... munmap resumed>) = 0 [pid 6363] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = 0 [pid 5080] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5080] close(4 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./214/file0" [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5079] <... openat resumed>) = 4 [pid 5079] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5079] close(4) = 0 [pid 5080] rmdir("./214" [pid 5075] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] rmdir("./215/file0" [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] mkdir("./215", 0777 [pid 5078] lstat("./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] lstat("./205/file0", [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 4 [pid 5075] umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] getdents64(3, [pid 5078] getdents64(4, [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] close(3 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5075] fstat(4, [pid 6363] close(3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] close(3 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6363] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 6363] mkdir("./file0", 0777 [pid 5079] rmdir("./215" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6363] <... mkdir resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] close(4 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6364 attached [pid 6363] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] mkdir("./216", 0777 [pid 5078] <... close resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6364 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [ 179.604073][ T6363] loop1: detected capacity change from 0 to 4096 [pid 6364] chdir("./215" [pid 5079] <... mkdir resumed>) = 0 [pid 5078] rmdir("./211/file0" [pid 5077] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 6364] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... rmdir resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 6364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6364] <... prctl resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 5077] lstat("./212/file0", [pid 5075] rmdir("./205/file0" [pid 6364] setpgid(0, 0 [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] rmdir("./211" [pid 6364] <... setpgid resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... rmdir resumed>) = 0 [pid 5077] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 6364] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6364] write(3, "1000", 4) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5075] close(3 [pid 6364] close(3 [pid 5077] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6364] <... close resumed>) = 0 [pid 5075] rmdir("./205" [pid 6364] symlink("/dev/binderfs", "./binderfs" [pid 5077] getdents64(4, [pid 5078] mkdir("./212", 0777 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... rmdir resumed>) = 0 [pid 6364] <... symlink resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6365 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] mkdir("./206", 0777 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3 [pid 6364] memfd_create("syzkaller", 0 [pid 5078] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6364] <... memfd_create resumed>) = 3 [pid 5077] close(4 [pid 5075] <... mkdir resumed>) = 0 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6366 [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6364] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5077] rmdir("./212/file0" [pid 5075] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./212" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./213", 0777) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6367 ./strace-static-x86_64: Process 6365 attached [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6365] chdir("./216") = 0 [pid 5077] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6367 attached [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6367] chdir("./206" [pid 6365] <... prctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6367] <... chdir resumed>) = 0 [pid 6365] setpgid(0, 0 [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6365] <... setpgid resumed>) = 0 [pid 6367] <... prctl resumed>) = 0 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6367] setpgid(0, 0 [pid 6365] <... openat resumed>) = 3 [pid 5077] close(3 [pid 6367] <... setpgid resumed>) = 0 [pid 6365] write(3, "1000", 4 [pid 5077] <... close resumed>) = 0 [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6365] <... write resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6366 attached [pid 6367] <... openat resumed>) = 3 [pid 6365] close(3 [pid 6367] write(3, "1000", 4 [pid 6365] <... close resumed>) = 0 [pid 6367] <... write resumed>) = 4 [pid 6365] symlink("/dev/binderfs", "./binderfs" [pid 6367] close(3 [pid 6366] chdir("./212" [pid 6365] <... symlink resumed>) = 0 [pid 6363] <... mount resumed>) = 0 [pid 6367] <... close resumed>) = 0 [pid 6366] <... chdir resumed>) = 0 [pid 6365] memfd_create("syzkaller", 0 [pid 6363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6368 [pid 6367] symlink("/dev/binderfs", "./binderfs" [pid 6366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6365] <... memfd_create resumed>) = 3 [pid 6363] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6368 attached [pid 6367] <... symlink resumed>) = 0 [pid 6366] <... prctl resumed>) = 0 [pid 6365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6363] chdir("./file0" [pid 6368] chdir("./213" [ 179.656419][ T6363] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6367] memfd_create("syzkaller", 0 [pid 6366] setpgid(0, 0 [pid 6365] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6363] <... chdir resumed>) = 0 [pid 6368] <... chdir resumed>) = 0 [pid 6367] <... memfd_create resumed>) = 3 [pid 6366] <... setpgid resumed>) = 0 [pid 6364] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6363] ioctl(4, LOOP_CLR_FD [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6363] <... ioctl resumed>) = 0 [pid 6368] <... prctl resumed>) = 0 [pid 6367] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6363] close(4 [pid 6368] setpgid(0, 0 [pid 6363] <... close resumed>) = 0 [pid 6368] <... setpgid resumed>) = 0 [pid 6366] <... openat resumed>) = 3 [pid 6363] exit_group(0 [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6363] <... exit_group resumed>) = ? [pid 6368] <... openat resumed>) = 3 [pid 6366] write(3, "1000", 4 [pid 6363] +++ exited with 0 +++ [pid 6368] write(3, "1000", 4) = 4 [pid 6366] <... write resumed>) = 4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6368] close(3) = 0 [pid 6368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6366] close(3 [pid 6368] memfd_create("syzkaller", 0) = 3 [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6366] <... close resumed>) = 0 [pid 6368] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6366] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6366] <... memfd_create resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6366] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./207/binderfs") = 0 [pid 5076] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6368] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6367] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5076] <... umount2 resumed>) = 0 [pid 6364] <... write resumed>) = 2097152 [pid 5076] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6364] munmap(0x7fa49b4d5000, 2097152 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./207/file0", [pid 6364] <... munmap resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6364] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 6364] <... openat resumed>) = 4 [pid 5076] fstat(4, [pid 6364] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./207/file0" [pid 6367] <... write resumed>) = 2097152 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 6364] <... ioctl resumed>) = 0 [pid 6367] munmap(0x7fa49b4d5000, 2097152 [pid 6365] <... write resumed>) = 2097152 [pid 6364] close(3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6366] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6365] munmap(0x7fa49b4d5000, 2097152 [pid 6364] <... close resumed>) = 0 [pid 6367] <... munmap resumed>) = 0 [pid 6365] <... munmap resumed>) = 0 [pid 6364] mkdir("./file0", 0777 [pid 5076] close(3) = 0 [pid 5076] rmdir("./207" [pid 6364] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./208", 0777 [pid 6364] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5076] <... mkdir resumed>) = 0 [pid 6367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6367] <... openat resumed>) = 4 [pid 6365] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 6367] ioctl(4, LOOP_SET_FD, 3 [ 179.865575][ T6364] loop5: detected capacity change from 0 to 4096 [pid 6365] ioctl(4, LOOP_SET_FD, 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6369 ./strace-static-x86_64: Process 6369 attached [pid 6369] chdir("./208" [pid 6368] <... write resumed>) = 2097152 [pid 6369] <... chdir resumed>) = 0 [pid 6368] munmap(0x7fa49b4d5000, 2097152 [pid 6369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6369] setpgid(0, 0) = 0 [pid 6369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6369] write(3, "1000", 4) = 4 [pid 6367] <... ioctl resumed>) = 0 [pid 6369] close(3 [pid 6367] close(3 [pid 6369] <... close resumed>) = 0 [pid 6367] <... close resumed>) = 0 [pid 6369] symlink("/dev/binderfs", "./binderfs" [pid 6367] mkdir("./file0", 0777 [pid 6369] <... symlink resumed>) = 0 [pid 6367] <... mkdir resumed>) = 0 [pid 6369] memfd_create("syzkaller", 0 [pid 6367] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6369] <... memfd_create resumed>) = 3 [pid 6368] <... munmap resumed>) = 0 [ 179.919123][ T6367] loop0: detected capacity change from 0 to 4096 [ 179.922637][ T6364] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 179.925982][ T6365] loop4: detected capacity change from 0 to 4096 [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 6368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6366] <... write resumed>) = 2097152 [pid 6368] <... openat resumed>) = 4 [pid 6366] munmap(0x7fa49b4d5000, 2097152 [pid 6365] <... ioctl resumed>) = 0 [pid 6368] ioctl(4, LOOP_SET_FD, 3 [pid 6366] <... munmap resumed>) = 0 [pid 6365] close(3 [pid 6366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6365] <... close resumed>) = 0 [pid 6368] <... ioctl resumed>) = 0 [pid 6366] <... openat resumed>) = 4 [pid 6365] mkdir("./file0", 0777 [pid 6368] close(3 [pid 6366] ioctl(4, LOOP_SET_FD, 3 [pid 6365] <... mkdir resumed>) = 0 [pid 6368] <... close resumed>) = 0 [pid 6366] <... ioctl resumed>) = 0 [pid 6365] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6364] <... mount resumed>) = 0 [pid 6368] mkdir("./file0", 0777 [pid 6367] <... mount resumed>) = 0 [pid 6364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6369] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6368] <... mkdir resumed>) = 0 [pid 6367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6366] close(3 [pid 6364] <... openat resumed>) = 3 [ 179.966532][ T6367] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 179.987749][ T6368] loop2: detected capacity change from 0 to 4096 [ 180.001016][ T6366] loop3: detected capacity change from 0 to 4096 [pid 6368] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6367] <... openat resumed>) = 3 [pid 6366] <... close resumed>) = 0 [pid 6364] chdir("./file0" [pid 6367] chdir("./file0" [pid 6366] mkdir("./file0", 0777 [pid 6367] <... chdir resumed>) = 0 [pid 6364] <... chdir resumed>) = 0 [pid 6367] ioctl(4, LOOP_CLR_FD [pid 6366] <... mkdir resumed>) = 0 [pid 6364] ioctl(4, LOOP_CLR_FD [pid 6367] <... ioctl resumed>) = 0 [pid 6366] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6364] <... ioctl resumed>) = 0 [pid 6367] close(4 [pid 6364] close(4 [pid 6367] <... close resumed>) = 0 [pid 6364] <... close resumed>) = 0 [pid 6367] exit_group(0 [pid 6364] exit_group(0 [pid 6367] <... exit_group resumed>) = ? [pid 6364] <... exit_group resumed>) = ? [pid 6367] +++ exited with 0 +++ [pid 6364] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6364, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5080] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(3, [pid 5075] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./215/binderfs", [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] getdents64(3, [pid 5080] unlink("./215/binderfs") = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./206/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./215/file0", [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] unlink("./206/binderfs" [pid 6365] <... mount resumed>) = 0 [pid 5080] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 6369] <... write resumed>) = 2097152 [pid 6365] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6369] munmap(0x7fa49b4d5000, 2097152 [pid 6365] chdir("./file0" [pid 5080] <... openat resumed>) = 4 [pid 6365] <... chdir resumed>) = 0 [pid 5080] fstat(4, [pid 6365] ioctl(4, LOOP_CLR_FD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6368] <... mount resumed>) = 0 [ 180.010247][ T6365] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 180.026506][ T6368] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 180.040649][ T6366] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6365] <... ioctl resumed>) = 0 [pid 5080] getdents64(4, [pid 6368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6365] close(4 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6368] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 6369] <... munmap resumed>) = 0 [pid 6368] chdir("./file0" [pid 6365] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6368] <... chdir resumed>) = 0 [pid 6365] exit_group(0 [pid 5080] close(4 [pid 6369] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6368] ioctl(4, LOOP_CLR_FD [pid 6366] <... mount resumed>) = 0 [pid 6365] <... exit_group resumed>) = ? [pid 5080] <... close resumed>) = 0 [pid 6368] <... ioctl resumed>) = 0 [pid 5080] rmdir("./215/file0" [pid 6368] close(4 [pid 6365] +++ exited with 0 +++ [pid 5080] <... rmdir resumed>) = 0 [pid 6369] <... openat resumed>) = 4 [pid 6368] <... close resumed>) = 0 [pid 6366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] getdents64(3, [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6365, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] <... umount2 resumed>) = 0 [pid 6369] ioctl(4, LOOP_SET_FD, 3 [pid 6366] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6368] exit_group(0 [pid 5080] close(3 [pid 6368] <... exit_group resumed>) = ? [pid 6366] chdir("./file0" [pid 5080] <... close resumed>) = 0 [pid 6366] <... chdir resumed>) = 0 [pid 6366] ioctl(4, LOOP_CLR_FD) = 0 [pid 6366] close(4) = 0 [pid 6366] exit_group(0) = ? [pid 6368] +++ exited with 0 +++ [pid 6366] +++ exited with 0 +++ [pid 5080] rmdir("./215" [pid 5079] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6366, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6368, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] lstat("./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5079] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] mkdir("./216", 0777 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, [pid 5080] <... mkdir resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 5079] fstat(3, [pid 5078] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6369] <... ioctl resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 6369] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6369] <... close resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5075] close(4 [pid 6369] mkdir("./file0", 0777 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(3, [pid 5077] fstat(3, [pid 5075] <... close resumed>) = 0 [pid 6369] <... mkdir resumed>) = 0 [pid 5080] close(3 [pid 5079] lstat("./216/binderfs", [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./206/file0" [pid 6369] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... close resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] unlink("./216/binderfs" [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./206") = 0 [pid 5075] mkdir("./207", 0777 [pid 5079] <... unlink resumed>) = 0 [pid 5078] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6370 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5079] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5078] lstat("./212/binderfs", [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] lstat("./213/binderfs", [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6371 ./strace-static-x86_64: Process 6371 attached [pid 6371] chdir("./207") = 0 [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6371] setpgid(0, 0) = 0 [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6371] write(3, "1000", 4) = 4 [pid 6371] close(3) = 0 [pid 6371] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./213/binderfs" [pid 5078] unlink("./212/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 6371] <... symlink resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] memfd_create("syzkaller", 0) = 3 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 ./strace-static-x86_64: Process 6370 attached [pid 6370] chdir("./216" [pid 5077] <... umount2 resumed>) = 0 [pid 6370] <... chdir resumed>) = 0 [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6370] setpgid(0, 0) = 0 [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] <... umount2 resumed>) = 0 [pid 6370] write(3, "1000", 4) = 4 [pid 5077] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6370] <... close resumed>) = 0 [pid 5077] lstat("./213/file0", [pid 6370] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 180.129691][ T6369] loop1: detected capacity change from 0 to 4096 [ 180.160584][ T6369] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6370] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] memfd_create("syzkaller", 0) = 3 [pid 5078] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6370] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] lstat("./212/file0", [pid 5077] fstat(4, [pid 5079] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5079] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] fstat(4, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 6369] <... mount resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 6369] <... openat resumed>) = 3 [pid 5079] getdents64(4, [pid 6369] chdir("./file0" [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6369] <... chdir resumed>) = 0 [pid 5079] close(4 [pid 6369] ioctl(4, LOOP_CLR_FD [pid 5079] <... close resumed>) = 0 [pid 6369] <... ioctl resumed>) = 0 [pid 5079] rmdir("./216/file0" [pid 6369] close(4 [pid 5079] <... rmdir resumed>) = 0 [pid 6369] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 6369] exit_group(0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6369] <... exit_group resumed>) = ? [pid 5079] close(3 [pid 5078] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 6369] +++ exited with 0 +++ [pid 5079] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5079] rmdir("./216" [pid 5077] rmdir("./213/file0" [pid 5078] fstat(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6369, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5079] <... rmdir resumed>) = 0 [pid 5079] mkdir("./217", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5076] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] getdents64(4, [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] close(3 [pid 5076] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./213" [pid 5076] fstat(3, [pid 5079] close(3 [pid 5078] close(4 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] rmdir("./212/file0" [pid 5077] mkdir("./214", 0777 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6372 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... rmdir resumed>) = 0 [pid 5076] lstat("./208/binderfs", [pid 5078] getdents64(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] unlink("./208/binderfs" [pid 5078] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6372 attached [pid 5078] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6372] chdir("./217" [pid 6370] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5078] rmdir("./212" [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = 0 [pid 6372] <... chdir resumed>) = 0 [pid 6372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6372] setpgid(0, 0) = 0 [pid 6372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6372] write(3, "1000", 4) = 4 [pid 6372] close(3) = 0 [pid 6372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6372] memfd_create("syzkaller", 0 [pid 6371] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5078] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 6372] <... memfd_create resumed>) = 3 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] mkdir("./213", 0777 [pid 5077] <... close resumed>) = 0 [pid 6372] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6373 attached ) = 3 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6373 [pid 5076] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./208/file0", [pid 6373] chdir("./214" [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6373] <... chdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, [pid 6373] <... prctl resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 6373] setpgid(0, 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6373] <... setpgid resumed>) = 0 [pid 5076] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./208/file0" [pid 6373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 6373] <... openat resumed>) = 3 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6374 [pid 5076] getdents64(3, [pid 6373] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6373] <... write resumed>) = 4 [pid 5076] close(3 [pid 6373] close(3 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6374 attached [pid 6373] <... close resumed>) = 0 [pid 5076] rmdir("./208" [pid 6374] chdir("./213" [pid 6373] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 6374] <... chdir resumed>) = 0 [pid 5076] mkdir("./209", 0777 [pid 6374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... mkdir resumed>) = 0 [pid 6374] <... prctl resumed>) = 0 [pid 6373] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6374] setpgid(0, 0 [pid 5076] <... openat resumed>) = 3 [pid 6374] <... setpgid resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6373] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6374] <... openat resumed>) = 3 [pid 6373] <... memfd_create resumed>) = 3 [pid 5076] close(3 [pid 6374] write(3, "1000", 4 [pid 6373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6374] <... write resumed>) = 4 [pid 6373] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6374] close(3 [pid 6371] <... write resumed>) = 2097152 [pid 6374] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6375 [pid 6374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6374] memfd_create("syzkaller", 0) = 3 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 ./strace-static-x86_64: Process 6375 attached [pid 6375] chdir("./209") = 0 [pid 6375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6375] setpgid(0, 0) = 0 [pid 6375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6375] write(3, "1000", 4) = 4 [pid 6375] close(3) = 0 [pid 6375] symlink("/dev/binderfs", "./binderfs" [pid 6371] munmap(0x7fa49b4d5000, 2097152 [pid 6375] <... symlink resumed>) = 0 [pid 6371] <... munmap resumed>) = 0 [pid 6370] <... write resumed>) = 2097152 [pid 6375] memfd_create("syzkaller", 0) = 3 [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6370] munmap(0x7fa49b4d5000, 2097152 [pid 6375] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6371] ioctl(4, LOOP_SET_FD, 3 [pid 6370] <... munmap resumed>) = 0 [pid 6372] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6370] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6373] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6370] <... openat resumed>) = 4 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 6371] <... ioctl resumed>) = 0 [pid 6371] close(3) = 0 [pid 6371] mkdir("./file0", 0777) = 0 [pid 6371] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 180.388311][ T6371] loop0: detected capacity change from 0 to 4096 [ 180.421688][ T6370] loop5: detected capacity change from 0 to 4096 [pid 6374] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6370] <... ioctl resumed>) = 0 [pid 6370] close(3) = 0 [pid 6370] mkdir("./file0", 0777) = 0 [pid 6370] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6373] <... write resumed>) = 2097152 [pid 6373] munmap(0x7fa49b4d5000, 2097152 [pid 6375] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6372] <... write resumed>) = 2097152 [pid 6372] munmap(0x7fa49b4d5000, 2097152 [pid 6373] <... munmap resumed>) = 0 [pid 6373] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6372] <... munmap resumed>) = 0 [pid 6373] <... openat resumed>) = 4 [pid 6373] ioctl(4, LOOP_SET_FD, 3 [pid 6372] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 180.446351][ T6371] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 180.474950][ T6370] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 6373] <... ioctl resumed>) = 0 [pid 6370] <... mount resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6373] close(3 [pid 6370] <... openat resumed>) = 3 [pid 6373] <... close resumed>) = 0 [pid 6370] chdir("./file0" [pid 6373] mkdir("./file0", 0777 [pid 6370] <... chdir resumed>) = 0 [pid 6374] <... write resumed>) = 2097152 [pid 6373] <... mkdir resumed>) = 0 [pid 6371] <... mount resumed>) = 0 [pid 6370] ioctl(4, LOOP_CLR_FD [pid 6371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6370] <... ioctl resumed>) = 0 [pid 6373] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6371] chdir("./file0" [pid 6370] close(4 [pid 6371] <... chdir resumed>) = 0 [pid 6371] ioctl(4, LOOP_CLR_FD [pid 6374] munmap(0x7fa49b4d5000, 2097152 [pid 6371] <... ioctl resumed>) = 0 [pid 6371] close(4 [pid 6372] <... ioctl resumed>) = 0 [pid 6371] <... close resumed>) = 0 [pid 6372] close(3 [pid 6371] exit_group(0 [pid 6372] <... close resumed>) = 0 [pid 6371] <... exit_group resumed>) = ? [pid 6372] mkdir("./file0", 0777 [pid 6371] +++ exited with 0 +++ [pid 6370] <... close resumed>) = 0 [pid 6372] <... mkdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 6372] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6375] <... write resumed>) = 2097152 [ 180.520317][ T6373] loop2: detected capacity change from 0 to 4096 [ 180.525062][ T6372] loop4: detected capacity change from 0 to 4096 [pid 5075] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6374] <... munmap resumed>) = 0 [pid 6370] exit_group(0 [pid 5075] fstat(3, [pid 6374] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6370] <... exit_group resumed>) = ? [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6374] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 6374] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6370] +++ exited with 0 +++ [pid 5075] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./207/binderfs", [pid 6375] munmap(0x7fa49b4d5000, 2097152 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./207/binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 6375] <... munmap resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 6375] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] fstat(3, [pid 6375] <... openat resumed>) = 4 [pid 6375] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5080] lstat("./216/binderfs", [pid 5075] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] <... ioctl resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 180.572253][ T6373] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 180.582354][ T6372] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 180.599536][ T6374] loop3: detected capacity change from 0 to 4096 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] close(3 [pid 5080] unlink("./216/binderfs" [pid 5075] lstat("./207/file0", [pid 6374] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6374] mkdir("./file0", 0777 [pid 5080] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./207/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./207") = 0 [pid 5075] mkdir("./208", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6376 [pid 5080] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6376 attached [pid 6375] <... ioctl resumed>) = 0 [pid 6373] <... mount resumed>) = 0 [pid 5080] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] chdir("./208" [pid 6375] close(3 [pid 6373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... chdir resumed>) = 0 [pid 6375] <... close resumed>) = 0 [pid 6373] <... openat resumed>) = 3 [pid 5080] lstat("./216/file0", [pid 6376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6375] mkdir("./file0", 0777 [pid 6373] chdir("./file0" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6376] <... prctl resumed>) = 0 [pid 6375] <... mkdir resumed>) = 0 [pid 6373] <... chdir resumed>) = 0 [pid 5080] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] setpgid(0, 0 [ 180.627581][ T6375] loop1: detected capacity change from 0 to 4096 [ 180.650250][ T6374] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 6375] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6373] ioctl(4, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... setpgid resumed>) = 0 [pid 6373] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6373] close(4 [pid 6372] <... mount resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 6376] <... openat resumed>) = 3 [pid 6373] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 6376] write(3, "1000", 4 [pid 6373] exit_group(0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6376] <... write resumed>) = 4 [pid 6373] <... exit_group resumed>) = ? [pid 6372] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 6376] close(3 [pid 6373] +++ exited with 0 +++ [pid 6372] chdir("./file0" [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6376] <... close resumed>) = 0 [pid 6372] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 6376] symlink("/dev/binderfs", "./binderfs" [pid 6372] ioctl(4, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6373, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 6376] <... symlink resumed>) = 0 [pid 6372] <... ioctl resumed>) = 0 [pid 5080] close(4 [pid 5077] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] memfd_create("syzkaller", 0 [pid 6372] close(4 [pid 5080] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... memfd_create resumed>) = 3 [pid 6372] <... close resumed>) = 0 [pid 5080] rmdir("./216/file0" [pid 5077] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6372] exit_group(0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 6376] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6372] <... exit_group resumed>) = ? [pid 5080] getdents64(3, [pid 5077] fstat(3, [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(3 [pid 5077] getdents64(3, [pid 6372] +++ exited with 0 +++ [pid 5080] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] rmdir("./216" [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6372, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] <... mount resumed>) = 0 [pid 5080] mkdir("./217", 0777 [pid 5077] lstat("./214/binderfs", [pid 6374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... mkdir resumed>) = 0 [ 180.682662][ T6375] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6374] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] unlink("./214/binderfs" [pid 6374] chdir("./file0" [pid 5080] <... openat resumed>) = 3 [pid 5077] <... unlink resumed>) = 0 [pid 6374] <... chdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5079] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6374] ioctl(4, LOOP_CLR_FD [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6377 [pid 6375] <... mount resumed>) = 0 [pid 6375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6375] chdir("./file0") = 0 [pid 6375] ioctl(4, LOOP_CLR_FD) = 0 [pid 6375] close(4 [pid 6374] <... ioctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6375] <... close resumed>) = 0 ./strace-static-x86_64: Process 6377 attached [pid 6375] exit_group(0 [pid 6374] close(4 [pid 5079] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 6377] chdir("./217" [pid 6375] <... exit_group resumed>) = ? [pid 6374] <... close resumed>) = 0 [pid 5079] fstat(3, [pid 6377] <... chdir resumed>) = 0 [pid 6375] +++ exited with 0 +++ [pid 6374] exit_group(0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6374] <... exit_group resumed>) = ? [pid 5079] getdents64(3, [pid 5077] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6375, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6377] <... prctl resumed>) = 0 [pid 6377] setpgid(0, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6377] <... setpgid resumed>) = 0 [pid 6377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6374] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] lstat("./214/file0", [pid 6377] <... openat resumed>) = 3 [pid 5079] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6374, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 6377] write(3, "1000", 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6377] <... write resumed>) = 4 [pid 5079] lstat("./217/binderfs", [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] close(3 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] <... close resumed>) = 0 [pid 5079] unlink("./217/binderfs" [pid 5077] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6377] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... unlink resumed>) = 0 [pid 5078] umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6377] <... symlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(4, [pid 6377] memfd_create("syzkaller", 0 [pid 5078] openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6377] <... memfd_create resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6377] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 6376] <... write resumed>) = 2097152 [pid 5078] getdents64(3, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] close(4 [pid 5078] umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./214/file0" [pid 5078] lstat("./213/binderfs", [pid 5077] <... rmdir resumed>) = 0 [pid 5076] fstat(3, [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] getdents64(3, [pid 5078] unlink("./213/binderfs" [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] close(3 [pid 5078] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] rmdir("./214" [pid 6376] munmap(0x7fa49b4d5000, 2097152 [pid 5079] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] mkdir("./215", 0777 [pid 5076] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] lstat("./217/file0", [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] lstat("./209/binderfs", [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5079] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] unlink("./209/binderfs" [pid 6376] <... munmap resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(3 [pid 5079] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6376] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] fstat(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6376] <... openat resumed>) = 4 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6376] ioctl(4, LOOP_SET_FD, 3 [pid 5078] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6378 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] lstat("./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./213/file0" [pid 5079] getdents64(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, [pid 6376] <... ioctl resumed>) = 0 [pid 5079] getdents64(4, [pid 6376] close(3 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6376] <... close resumed>) = 0 [pid 5079] close(4 [pid 6376] mkdir("./file0", 0777 [pid 5079] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6376] <... mkdir resumed>) = 0 [pid 5079] rmdir("./217/file0" [pid 5078] close(3./strace-static-x86_64: Process 6378 attached [pid 6377] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6376] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] <... rmdir resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] rmdir("./213") = 0 [pid 5078] mkdir("./214", 0777) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5078] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5078] close(3) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6379 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6378] chdir("./215" [pid 5079] close(3 [pid 5076] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] <... chdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 ./strace-static-x86_64: Process 6379 attached [pid 6378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] rmdir("./217" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6379] chdir("./214" [pid 6378] <... prctl resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6379] <... chdir resumed>) = 0 [pid 6378] setpgid(0, 0 [pid 5079] mkdir("./218", 0777 [pid 5076] lstat("./209/file0", [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6378] <... setpgid resumed>) = 0 [pid 6379] <... prctl resumed>) = 0 [pid 6378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... mkdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6379] setpgid(0, 0 [pid 6378] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] <... setpgid resumed>) = 0 [pid 6378] write(3, "1000", 4 [pid 5079] <... openat resumed>) = 3 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6378] <... write resumed>) = 4 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6378] close(3 [pid 6379] <... openat resumed>) = 3 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6378] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6379] write(3, "1000", 4 [pid 6378] symlink("/dev/binderfs", "./binderfs" [pid 5079] close(3 [pid 6379] <... write resumed>) = 4 [pid 6378] <... symlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6379] close(3 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6379] <... close resumed>) = 0 [pid 6378] memfd_create("syzkaller", 0 [pid 5076] fstat(4, [pid 6379] symlink("/dev/binderfs", "./binderfs" [pid 6378] <... memfd_create resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6379] <... symlink resumed>) = 0 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6376] <... mount resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6380 [pid 5076] getdents64(4, [pid 6376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6379] memfd_create("syzkaller", 0 [pid 6376] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6379] <... memfd_create resumed>) = 3 [pid 6378] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6376] chdir("./file0" [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6376] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [pid 6376] ioctl(4, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6379] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6376] <... ioctl resumed>) = 0 [pid 5076] close(4 [pid 6376] close(4) = 0 [pid 5076] <... close resumed>) = 0 [pid 6377] <... write resumed>) = 2097152 [pid 6376] exit_group(0 [pid 5076] rmdir("./209/file0" [pid 6376] <... exit_group resumed>) = ? [pid 6376] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6376, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6380 attached [pid 5076] close(3 [pid 6380] chdir("./218" [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./209" [pid 6380] <... chdir resumed>) = 0 [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./210", 0777 [pid 6380] <... prctl resumed>) = 0 [pid 6380] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 180.871249][ T6376] loop0: detected capacity change from 0 to 4096 [ 180.889966][ T6376] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] fstat(3, [pid 6380] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6380] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6380] <... write resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6380] close(3 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6381 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6380] symlink("/dev/binderfs", "./binderfs" [pid 6377] munmap(0x7fa49b4d5000, 2097152 [pid 5075] lstat("./208/binderfs", [pid 6380] <... symlink resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./208/binderfs"./strace-static-x86_64: Process 6381 attached [pid 6381] chdir("./210" [pid 5075] <... unlink resumed>) = 0 [pid 6381] <... chdir resumed>) = 0 [pid 6380] memfd_create("syzkaller", 0 [pid 5075] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6377] <... munmap resumed>) = 0 [pid 6381] setpgid(0, 0 [pid 6377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6381] <... setpgid resumed>) = 0 [pid 6377] <... openat resumed>) = 4 [pid 6381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6377] ioctl(4, LOOP_SET_FD, 3 [pid 6381] <... openat resumed>) = 3 [pid 6380] <... memfd_create resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 6381] write(3, "1000", 4) = 4 [pid 6381] close(3 [pid 6380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6381] <... close resumed>) = 0 [pid 6381] symlink("/dev/binderfs", "./binderfs" [pid 6380] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6381] <... symlink resumed>) = 0 [pid 6381] memfd_create("syzkaller", 0) = 3 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 5075] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6377] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6377] close(3 [pid 5075] fstat(4, [pid 6377] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6377] mkdir("./file0", 0777 [pid 5075] getdents64(4, [pid 6377] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [ 180.980580][ T6377] loop5: detected capacity change from 0 to 4096 [pid 6377] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./208/file0") = 0 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./208") = 0 [pid 5075] mkdir("./209", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6378] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] close(3 [pid 6379] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6382 ./strace-static-x86_64: Process 6382 attached [pid 6382] chdir("./209") = 0 [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6381] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6382] <... prctl resumed>) = 0 [pid 6382] setpgid(0, 0 [pid 6380] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6382] <... setpgid resumed>) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 181.023118][ T6377] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6382] write(3, "1000", 4) = 4 [pid 6382] close(3) = 0 [pid 6382] symlink("/dev/binderfs", "./binderfs" [pid 6378] <... write resumed>) = 2097152 [pid 6382] <... symlink resumed>) = 0 [pid 6382] memfd_create("syzkaller", 0) = 3 [pid 6377] <... mount resumed>) = 0 [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6378] munmap(0x7fa49b4d5000, 2097152 [pid 6377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6382] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6379] <... write resumed>) = 2097152 [pid 6377] <... openat resumed>) = 3 [pid 6377] chdir("./file0" [pid 6379] munmap(0x7fa49b4d5000, 2097152 [pid 6377] <... chdir resumed>) = 0 [pid 6377] ioctl(4, LOOP_CLR_FD [pid 6379] <... munmap resumed>) = 0 [pid 6377] <... ioctl resumed>) = 0 [pid 6377] close(4) = 0 [pid 6377] exit_group(0) = ? [pid 6378] <... munmap resumed>) = 0 [pid 6377] +++ exited with 0 +++ [pid 6379] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6377, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6378] <... openat resumed>) = 4 [pid 6379] <... openat resumed>) = 4 [pid 6379] ioctl(4, LOOP_SET_FD, 3 [pid 6378] ioctl(4, LOOP_SET_FD, 3 [pid 5080] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./217/binderfs" [pid 6378] <... ioctl resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 6378] close(3 [pid 5080] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6378] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 6378] mkdir("./file0", 0777 [pid 6380] <... write resumed>) = 2097152 [pid 6378] <... mkdir resumed>) = 0 [pid 6378] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6380] munmap(0x7fa49b4d5000, 2097152 [pid 6381] <... write resumed>) = 2097152 [pid 6381] munmap(0x7fa49b4d5000, 2097152 [pid 5080] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6379] close(3 [pid 6380] <... munmap resumed>) = 0 [pid 6379] <... close resumed>) = 0 [pid 5080] lstat("./217/file0", [pid 6379] mkdir("./file0", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6379] <... mkdir resumed>) = 0 [pid 5080] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] <... openat resumed>) = 4 [pid 6379] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 181.142779][ T6378] loop2: detected capacity change from 0 to 4096 [ 181.149805][ T6379] loop3: detected capacity change from 0 to 4096 [ 181.175986][ T6378] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [pid 6381] <... munmap resumed>) = 0 [pid 6380] ioctl(4, LOOP_SET_FD, 3 [pid 5080] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6381] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] <... openat resumed>) = 4 [pid 6381] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 6381] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6380] <... ioctl resumed>) = 0 [pid 5080] getdents64(4, [pid 6380] close(3 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6380] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 6380] mkdir("./file0", 0777 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6380] <... mkdir resumed>) = 0 [pid 5080] close(4 [pid 6380] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... close resumed>) = 0 [ 181.200943][ T6379] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 181.212895][ T6380] loop4: detected capacity change from 0 to 4096 [ 181.240600][ T6381] loop1: detected capacity change from 0 to 4096 [pid 5080] rmdir("./217/file0") = 0 [pid 6378] <... mount resumed>) = 0 [pid 5080] getdents64(3, [pid 6378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 6378] <... openat resumed>) = 3 [pid 5080] rmdir("./217" [pid 6378] chdir("./file0" [pid 5080] <... rmdir resumed>) = 0 [pid 6381] <... ioctl resumed>) = 0 [pid 6378] <... chdir resumed>) = 0 [pid 5080] mkdir("./218", 0777 [pid 6381] close(3 [pid 6378] ioctl(4, LOOP_CLR_FD [pid 5080] <... mkdir resumed>) = 0 [pid 6382] <... write resumed>) = 2097152 [pid 6381] <... close resumed>) = 0 [pid 6378] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6382] munmap(0x7fa49b4d5000, 2097152 [pid 6381] mkdir("./file0", 0777 [pid 6378] close(4 [pid 5080] <... openat resumed>) = 3 [pid 6381] <... mkdir resumed>) = 0 [pid 6378] <... close resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [ 181.262234][ T6380] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6381] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6378] exit_group(0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6382] <... munmap resumed>) = 0 [pid 6378] <... exit_group resumed>) = ? [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6382] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6378] +++ exited with 0 +++ [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6383 [pid 6382] <... openat resumed>) = 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6378, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6382] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6382] <... ioctl resumed>) = 0 [pid 6379] <... mount resumed>) = 0 [pid 5077] fstat(3, [pid 6379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6383 attached [pid 6379] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 6383] chdir("./218" [pid 6382] close(3 [pid 6379] chdir("./file0" [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6383] <... chdir resumed>) = 0 [pid 6382] <... close resumed>) = 0 [pid 6379] <... chdir resumed>) = 0 [pid 5077] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6382] mkdir("./file0", 0777 [pid 6379] ioctl(4, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... prctl resumed>) = 0 [pid 6382] <... mkdir resumed>) = 0 [pid 6379] <... ioctl resumed>) = 0 [pid 5077] lstat("./215/binderfs", [pid 6383] setpgid(0, 0 [pid 6382] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6379] close(4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6383] <... setpgid resumed>) = 0 [ 181.302496][ T6381] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 181.330904][ T6382] loop0: detected capacity change from 0 to 4096 [pid 5077] unlink("./215/binderfs") = 0 [pid 6383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6379] <... close resumed>) = 0 [pid 5077] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 6383] <... openat resumed>) = 3 [pid 6379] exit_group(0 [pid 5077] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] write(3, "1000", 4 [pid 6379] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... write resumed>) = 4 [pid 6379] +++ exited with 0 +++ [pid 5077] lstat("./215/file0", [pid 6383] close(3 [pid 6380] <... mount resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6383] <... close resumed>) = 0 [pid 6380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] symlink("/dev/binderfs", "./binderfs" [pid 6380] <... openat resumed>) = 3 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... symlink resumed>) = 0 [pid 6380] chdir("./file0" [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6383] memfd_create("syzkaller", 0 [pid 6380] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6383] <... memfd_create resumed>) = 3 [pid 6380] ioctl(4, LOOP_CLR_FD [pid 5077] fstat(4, [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6380] <... ioctl resumed>) = 0 [pid 5078] umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6383] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6381] <... mount resumed>) = 0 [pid 6380] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 6381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6380] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6381] <... openat resumed>) = 3 [pid 6380] exit_group(0 [pid 5078] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 6381] chdir("./file0" [pid 6380] <... exit_group resumed>) = ? [pid 5078] fstat(3, [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6381] <... chdir resumed>) = 0 [pid 6380] +++ exited with 0 +++ [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 6381] ioctl(4, LOOP_CLR_FD [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6380, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 6381] <... ioctl resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] rmdir("./215/file0" [pid 6381] close(4 [pid 5078] umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 6381] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 181.364620][ T6382] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] getdents64(3, [pid 6381] exit_group(0 [pid 5078] lstat("./214/binderfs", [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6381] <... exit_group resumed>) = ? [pid 5079] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] close(3 [pid 6381] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] unlink("./214/binderfs" [pid 5077] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... unlink resumed>) = 0 [pid 5077] rmdir("./215" [pid 5079] <... openat resumed>) = 3 [pid 5078] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6381, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=5 /* 0.05 s */} --- [pid 5079] fstat(3, [pid 5077] mkdir("./216", 0777 [pid 5076] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... mount resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] getdents64(3, [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5079] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] fstat(3, [pid 6382] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] lstat("./218/binderfs", [pid 5077] close(3 [pid 5076] getdents64(3, [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6382] chdir("./file0" [pid 5079] unlink("./218/binderfs" [pid 5078] <... umount2 resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... chdir resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] ioctl(4, LOOP_CLR_FD [pid 5079] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6384 [pid 5076] lstat("./210/binderfs", [pid 6382] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6382] close(4 [pid 5079] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./210/binderfs" [pid 6382] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... unlink resumed>) = 0 [pid 6382] exit_group(0 [pid 5079] lstat("./218/file0", [pid 5076] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6384 attached [pid 6382] <... exit_group resumed>) = ? [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6384] chdir("./216" [pid 5079] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] <... chdir resumed>) = 0 [pid 6382] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6384] <... prctl resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5078] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6384] setpgid(0, 0 [pid 5079] fstat(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... restart_syscall resumed>) = 0 [pid 6384] <... setpgid resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] lstat("./214/file0", [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] getdents64(4, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6384] <... openat resumed>) = 3 [pid 6383] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] write(3, "1000", 4 [pid 5079] getdents64(4, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6384] <... write resumed>) = 4 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6384] close(3 [pid 5079] close(4 [pid 5078] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 6384] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] fstat(4, [pid 5075] fstat(3, [pid 6384] symlink("/dev/binderfs", "./binderfs" [pid 5079] rmdir("./218/file0" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6384] <... symlink resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] getdents64(3, [pid 6384] memfd_create("syzkaller", 0 [pid 5079] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6384] <... memfd_create resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(4, [pid 5076] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] close(3 [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6384] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... close resumed>) = 0 [pid 5078] close(4 [pid 5076] lstat("./210/file0", [pid 5075] lstat("./209/binderfs", [pid 5079] rmdir("./218" [pid 5078] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] rmdir("./214/file0" [pid 5076] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./209/binderfs" [pid 5079] mkdir("./219", 0777 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5079] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5076] fstat(4, [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5078] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] rmdir("./214" [pid 5076] getdents64(4, [pid 5079] close(3 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5079] <... close resumed>) = 0 [pid 5078] mkdir("./215", 0777 [pid 5076] getdents64(4, [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] close(4 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6385 [pid 5078] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] rmdir("./210/file0" [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... rmdir resumed>) = 0 [pid 5078] close(3 [pid 5076] getdents64(3, [pid 5078] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6385 attached [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 6385] chdir("./219" [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6385] <... chdir resumed>) = 0 [pid 6383] <... write resumed>) = 2097152 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6386 [pid 5076] rmdir("./210"./strace-static-x86_64: Process 6386 attached [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... rmdir resumed>) = 0 [pid 6386] chdir("./215" [pid 6385] <... prctl resumed>) = 0 [pid 6383] munmap(0x7fa49b4d5000, 2097152 [pid 5076] mkdir("./211", 0777 [pid 6386] <... chdir resumed>) = 0 [pid 6385] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6385] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6386] <... prctl resumed>) = 0 [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 3 [pid 6386] setpgid(0, 0 [pid 6385] <... openat resumed>) = 3 [pid 6383] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] <... setpgid resumed>) = 0 [pid 6385] write(3, "1000", 4 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6385] <... write resumed>) = 4 [pid 6383] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] <... openat resumed>) = 3 [pid 6385] close(3 [pid 6383] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6386] write(3, "1000", 4 [pid 6385] <... close resumed>) = 0 [pid 6383] ioctl(4, LOOP_SET_FD, 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] lstat("./209/file0", [pid 6386] <... write resumed>) = 4 [pid 6385] symlink("/dev/binderfs", "./binderfs" [pid 6384] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6385] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6387 [pid 5075] umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6385] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] close(3 [pid 6385] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6386] <... close resumed>) = 0 [pid 6385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6387 attached [pid 6385] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] fstat(4, [pid 6387] chdir("./211" [pid 6386] symlink("/dev/binderfs", "./binderfs" [pid 6383] <... ioctl resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6387] <... chdir resumed>) = 0 [pid 6386] <... symlink resumed>) = 0 [pid 6383] close(3 [pid 5075] getdents64(4, [pid 6387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6387] <... prctl resumed>) = 0 [pid 5075] getdents64(4, [pid 6387] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6387] <... setpgid resumed>) = 0 [pid 5075] close(4 [pid 6387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... close resumed>) = 0 [pid 6387] <... openat resumed>) = 3 [pid 5075] rmdir("./209/file0" [pid 6387] write(3, "1000", 4 [pid 6386] memfd_create("syzkaller", 0 [pid 6383] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6387] <... write resumed>) = 4 [pid 6386] <... memfd_create resumed>) = 3 [pid 6383] mkdir("./file0", 0777 [pid 5075] getdents64(3, [pid 6387] close(3 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6387] <... close resumed>) = 0 [pid 6386] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6383] <... mkdir resumed>) = 0 [pid 5075] close(3 [pid 6387] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 6387] <... symlink resumed>) = 0 [pid 5075] rmdir("./209" [pid 6387] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6387] <... memfd_create resumed>) = 3 [pid 6383] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 181.588974][ T6383] loop5: detected capacity change from 0 to 4096 [pid 5075] mkdir("./210", 0777 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6385] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] <... mkdir resumed>) = 0 [pid 6387] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6388 ./strace-static-x86_64: Process 6388 attached [pid 6388] chdir("./210") = 0 [pid 6384] <... write resumed>) = 2097152 [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6388] setpgid(0, 0) = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6388] write(3, "1000", 4) = 4 [pid 6388] close(3) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6388] memfd_create("syzkaller", 0) = 3 [pid 6388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [ 181.648006][ T6383] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6387] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6384] munmap(0x7fa49b4d5000, 2097152 [pid 6383] <... mount resumed>) = 0 [pid 6383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6384] <... munmap resumed>) = 0 [pid 6383] <... openat resumed>) = 3 [pid 6384] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6383] chdir("./file0" [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 6386] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6383] <... chdir resumed>) = 0 [pid 6383] ioctl(4, LOOP_CLR_FD) = 0 [pid 6385] <... write resumed>) = 2097152 [pid 6383] close(4) = 0 [pid 6383] exit_group(0) = ? [pid 6384] <... ioctl resumed>) = 0 [pid 6384] close(3 [pid 6383] +++ exited with 0 +++ [pid 6384] <... close resumed>) = 0 [pid 6386] <... write resumed>) = 2097152 [pid 6384] mkdir("./file0", 0777 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6383, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 6384] <... mkdir resumed>) = 0 [pid 5080] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 181.736631][ T6384] loop2: detected capacity change from 0 to 4096 [pid 6386] munmap(0x7fa49b4d5000, 2097152 [pid 6385] munmap(0x7fa49b4d5000, 2097152 [pid 5080] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 6386] <... munmap resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6385] <... munmap resumed>) = 0 [pid 5080] getdents64(3, [pid 6386] <... openat resumed>) = 4 [pid 6385] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6386] ioctl(4, LOOP_SET_FD, 3 [pid 6385] <... openat resumed>) = 4 [pid 5080] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./218/binderfs") = 0 [pid 5080] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6387] <... write resumed>) = 2097152 [pid 6386] <... ioctl resumed>) = 0 [pid 6385] ioctl(4, LOOP_SET_FD, 3 [pid 6386] close(3) = 0 [pid 6386] mkdir("./file0", 0777) = 0 [ 181.786347][ T6384] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 181.811079][ T6386] loop3: detected capacity change from 0 to 4096 [ 181.819332][ T6385] loop4: detected capacity change from 0 to 4096 [pid 6386] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6387] munmap(0x7fa49b4d5000, 2097152 [pid 6385] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 6387] <... munmap resumed>) = 0 [pid 6385] close(3 [pid 6384] <... mount resumed>) = 0 [pid 5080] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6385] <... close resumed>) = 0 [pid 6384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6388] <... write resumed>) = 2097152 [pid 6387] <... openat resumed>) = 4 [pid 6385] mkdir("./file0", 0777 [pid 6384] <... openat resumed>) = 3 [pid 5080] lstat("./218/file0", [pid 6388] munmap(0x7fa49b4d5000, 2097152 [pid 6387] ioctl(4, LOOP_SET_FD, 3 [pid 6385] <... mkdir resumed>) = 0 [pid 6384] chdir("./file0" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6388] <... munmap resumed>) = 0 [pid 6387] <... ioctl resumed>) = 0 [pid 6386] <... mount resumed>) = 0 [pid 6385] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6384] <... chdir resumed>) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6384] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] <... openat resumed>) = 3 [pid 6384] <... ioctl resumed>) = 0 [pid 6386] chdir("./file0" [pid 6384] close(4 [pid 6386] <... chdir resumed>) = 0 [pid 6384] <... close resumed>) = 0 [pid 6386] ioctl(4, LOOP_CLR_FD [pid 6384] exit_group(0 [pid 6386] <... ioctl resumed>) = 0 [pid 6384] <... exit_group resumed>) = ? [pid 6386] close(4 [pid 6384] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6384, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=3 /* 0.03 s */} --- [pid 6388] <... openat resumed>) = 4 [pid 6386] exit_group(0 [pid 5080] <... openat resumed>) = 4 [pid 6388] ioctl(4, LOOP_SET_FD, 3 [pid 6386] <... exit_group resumed>) = ? [pid 5080] fstat(4, [pid 6386] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6386, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5078] umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6388] <... ioctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6388] close(3 [pid 6387] close(3 [pid 5080] getdents64(4, [pid 5078] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [ 181.836409][ T6386] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 181.866929][ T6387] loop1: detected capacity change from 0 to 4096 [ 181.876807][ T6385] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 6388] <... close resumed>) = 0 [pid 6387] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] fstat(3, [pid 5077] fstat(3, [pid 6388] mkdir("./file0", 0777 [pid 6387] mkdir("./file0", 0777 [pid 5080] getdents64(4, [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6388] <... mkdir resumed>) = 0 [pid 6387] <... mkdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6387] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] close(4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5078] lstat("./215/binderfs", [pid 5077] lstat("./216/binderfs", [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] unlink("./215/binderfs" [pid 5077] unlink("./216/binderfs" [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5078] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./218/file0" [pid 5077] <... umount2 resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] lstat("./216/file0", [pid 5080] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./218" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 6385] <... mount resumed>) = 0 [pid 5080] mkdir("./219", 0777 [pid 5077] fstat(4, [pid 6385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6385] <... openat resumed>) = 3 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, [pid 6385] chdir("./file0" [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6385] <... chdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 6385] ioctl(4, LOOP_CLR_FD [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6385] <... ioctl resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(4 [pid 6385] close(4 [pid 5080] close(3 [pid 5077] <... close resumed>) = 0 [pid 6385] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] rmdir("./216/file0" [pid 6385] exit_group(0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 [pid 6385] <... exit_group resumed>) = ? [pid 5077] getdents64(3, [pid 6385] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6389 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [ 181.893201][ T6388] loop0: detected capacity change from 0 to 4096 [ 181.914262][ T6388] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 181.924625][ T6387] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] close(3 [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... close resumed>) = 0 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5077] rmdir("./216" [pid 6388] <... mount resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./217", 0777./strace-static-x86_64: Process 6389 attached [pid 6388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mkdir resumed>) = 0 [pid 6389] chdir("./219" [pid 6388] <... openat resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6389] <... chdir resumed>) = 0 [pid 6388] chdir("./file0" [pid 5079] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 6389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6388] <... chdir resumed>) = 0 [pid 6387] <... mount resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] lstat("./215/file0", [pid 5077] ioctl(3, LOOP_CLR_FD [pid 6389] <... prctl resumed>) = 0 [pid 6388] ioctl(4, LOOP_CLR_FD [pid 6387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5079] fstat(3, [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6389] setpgid(0, 0 [pid 6388] <... ioctl resumed>) = 0 [pid 6387] <... openat resumed>) = 3 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 6389] <... setpgid resumed>) = 0 [pid 6388] close(4 [pid 6387] chdir("./file0" [pid 5079] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 6389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6388] <... close resumed>) = 0 [pid 6387] <... chdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6389] <... openat resumed>) = 3 [pid 6388] exit_group(0 [pid 6387] ioctl(4, LOOP_CLR_FD [pid 5079] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 6389] write(3, "1000", 4 [pid 6388] <... exit_group resumed>) = ? [pid 6387] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] fstat(4, [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6390 [pid 6389] <... write resumed>) = 4 [pid 5079] lstat("./219/binderfs", [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6389] close(3 [pid 6388] +++ exited with 0 +++ [pid 6387] close(4 [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] getdents64(4, [pid 6389] <... close resumed>) = 0 [pid 6387] <... close resumed>) = 0 [pid 5079] unlink("./219/binderfs" [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 6390 attached [pid 6389] symlink("/dev/binderfs", "./binderfs" [pid 6387] exit_group(0 [pid 5079] <... unlink resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6390] chdir("./217" [pid 6389] <... symlink resumed>) = 0 [pid 6387] <... exit_group resumed>) = ? [pid 5079] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6390] <... chdir resumed>) = 0 [pid 6389] memfd_create("syzkaller", 0 [pid 6387] +++ exited with 0 +++ [pid 5078] close(4 [pid 6390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6389] <... memfd_create resumed>) = 3 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 6390] <... prctl resumed>) = 0 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] rmdir("./215/file0" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6387, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6390] setpgid(0, 0 [pid 6389] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5078] <... rmdir resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6390] <... setpgid resumed>) = 0 [pid 5078] getdents64(3, [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5075] fstat(3, [pid 5078] <... close resumed>) = 0 [pid 5076] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] rmdir("./215" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5078] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5079] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] mkdir("./216", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... mkdir resumed>) = 0 [pid 5076] fstat(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] lstat("./219/file0", [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./210/binderfs", [pid 6390] <... openat resumed>) = 3 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6390] write(3, "1000", 4 [pid 5079] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./210/binderfs" [pid 6390] <... write resumed>) = 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... openat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5076] lstat("./211/binderfs", [pid 6390] close(3 [pid 5079] fstat(4, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6390] <... close resumed>) = 0 [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] unlink("./211/binderfs" [pid 6390] symlink("/dev/binderfs", "./binderfs" [pid 5079] getdents64(4, [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6391 [pid 5076] <... unlink resumed>) = 0 [pid 6390] <... symlink resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 6390] memfd_create("syzkaller", 0 [pid 5079] getdents64(4, [pid 6390] <... memfd_create resumed>) = 3 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] close(4 [pid 6390] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] <... close resumed>) = 0 [pid 5079] rmdir("./219/file0"./strace-static-x86_64: Process 6391 attached ) = 0 [pid 6391] chdir("./216" [pid 5079] getdents64(3, [pid 6391] <... chdir resumed>) = 0 [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] close(3 [pid 6391] <... prctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 6391] setpgid(0, 0 [pid 5079] rmdir("./219" [pid 6391] <... setpgid resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 6391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] mkdir("./220", 0777 [pid 6391] <... openat resumed>) = 3 [pid 5079] <... mkdir resumed>) = 0 [pid 6391] write(3, "1000", 4 [pid 6389] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6391] <... write resumed>) = 4 [pid 5079] <... openat resumed>) = 3 [pid 5076] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] close(3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 6391] <... close resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] symlink("/dev/binderfs", "./binderfs" [pid 5079] close(3 [pid 6391] <... symlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5076] lstat("./211/file0", [pid 6391] memfd_create("syzkaller", 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6391] <... memfd_create resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6392 [pid 5076] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6392 attached [pid 5076] close(4 [pid 5075] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] chdir("./220" [pid 5076] <... close resumed>) = 0 [pid 6392] <... chdir resumed>) = 0 [pid 5076] rmdir("./211/file0" [pid 6392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... rmdir resumed>) = 0 [pid 6392] <... prctl resumed>) = 0 [pid 5076] getdents64(3, [pid 6392] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6392] <... setpgid resumed>) = 0 [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 6392] <... openat resumed>) = 3 [pid 5076] rmdir("./211" [pid 6392] write(3, "1000", 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] lstat("./210/file0", [pid 6392] <... write resumed>) = 4 [pid 5076] mkdir("./212", 0777 [pid 6392] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6392] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] <... symlink resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6392] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6392] <... memfd_create resumed>) = 3 [pid 5076] close(3 [pid 5075] <... openat resumed>) = 4 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 5075] fstat(4, [pid 6392] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6393 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4./strace-static-x86_64: Process 6393 attached ) = 0 [pid 6393] chdir("./212" [pid 5075] rmdir("./210/file0" [pid 6393] <... chdir resumed>) = 0 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6393] setpgid(0, 0 [pid 5075] getdents64(3, [pid 6393] <... setpgid resumed>) = 0 [pid 6390] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6389] <... write resumed>) = 2097152 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6391] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] close(3 [pid 6393] <... openat resumed>) = 3 [pid 6393] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 6393] <... write resumed>) = 4 [pid 5075] rmdir("./210" [pid 6393] close(3) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6393] symlink("/dev/binderfs", "./binderfs" [pid 5075] mkdir("./211", 0777 [pid 6393] <... symlink resumed>) = 0 [pid 6393] memfd_create("syzkaller", 0 [pid 6389] munmap(0x7fa49b4d5000, 2097152 [pid 5075] <... mkdir resumed>) = 0 [pid 6393] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa49b4d5000 [pid 5075] <... openat resumed>) = 3 [pid 6390] <... write resumed>) = 2097152 [pid 6389] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6390] munmap(0x7fa49b4d5000, 2097152 [pid 6389] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6389] <... openat resumed>) = 4 [pid 5075] close(3 [pid 6389] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6394 [pid 6392] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6390] <... munmap resumed>) = 0 [pid 6389] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6394 attached [pid 6390] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6389] close(3 [pid 6394] chdir("./211" [pid 6390] <... openat resumed>) = 4 [pid 6389] <... close resumed>) = 0 [pid 6394] <... chdir resumed>) = 0 [pid 6390] ioctl(4, LOOP_SET_FD, 3 [pid 6389] mkdir("./file0", 0777 [pid 6394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6390] <... ioctl resumed>) = 0 [pid 6394] <... prctl resumed>) = 0 [pid 6389] <... mkdir resumed>) = 0 [pid 6394] setpgid(0, 0 [pid 6390] close(3 [pid 6389] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6394] <... setpgid resumed>) = 0 [pid 6393] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6391] <... write resumed>) = 2097152 [pid 6390] <... close resumed>) = 0 [pid 6394] <... openat resumed>) = 3 [pid 6391] munmap(0x7fa49b4d5000, 2097152 [pid 6390] mkdir("./file0", 0777 [pid 6394] write(3, "1000", 4) = 4 [pid 6394] close(3 [pid 6391] <... munmap resumed>) = 0 [pid 6390] <... mkdir resumed>) = 0 [pid 6394] <... close resumed>) = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6390] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6394] symlink("/dev/binderfs", "./binderfs" [pid 6392] <... write resumed>) = 2097152 [pid 6391] <... openat resumed>) = 4 [pid 6392] munmap(0x7fa49b4d5000, 2097152 [ 182.235767][ T6389] loop5: detected capacity change from 0 to 4096 [ 182.262548][ T6390] loop2: detected capacity change from 0 to 4096 [ 182.274227][ T6389] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [pid 6394] <... symlink resumed>) = 0 [pid 6391] ioctl(4, LOOP_SET_FD, 3 [pid 6394] memfd_create("syzkaller", 0 [pid 6392] <... munmap resumed>) = 0 [pid 6394] <... memfd_create resumed>) = 3 [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6391] <... ioctl resumed>) = 0 [pid 6394] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6393] <... write resumed>) = 2097152 [pid 6392] <... openat resumed>) = 4 [pid 6391] close(3 [pid 6389] <... mount resumed>) = 0 [pid 6392] ioctl(4, LOOP_SET_FD, 3 [pid 6389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6393] munmap(0x7fa49b4d5000, 2097152 [pid 6391] <... close resumed>) = 0 [pid 6389] <... openat resumed>) = 3 [pid 6389] chdir("./file0") = 0 [pid 6389] ioctl(4, LOOP_CLR_FD [pid 6393] <... munmap resumed>) = 0 [pid 6391] mkdir("./file0", 0777 [pid 6389] <... ioctl resumed>) = 0 [pid 6393] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6391] <... mkdir resumed>) = 0 [pid 6389] close(4 [pid 6393] <... openat resumed>) = 4 [pid 6391] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6389] <... close resumed>) = 0 [pid 6389] exit_group(0) = ? [pid 6389] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6389, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 6393] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... restart_syscall resumed>) = 0 [pid 6392] <... ioctl resumed>) = 0 [pid 6392] close(3) = 0 [pid 5080] umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] mkdir("./file0", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6392] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5080] <... openat resumed>) = 3 [ 182.305589][ T6390] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 182.318301][ T6391] loop3: detected capacity change from 0 to 4096 [ 182.335953][ T6392] loop4: detected capacity change from 0 to 4096 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./219/binderfs") = 0 [pid 5080] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6394] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6393] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 6393] close(3 [pid 6390] <... mount resumed>) = 0 [pid 6393] <... close resumed>) = 0 [pid 6390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6393] mkdir("./file0", 0777 [pid 6390] <... openat resumed>) = 3 [pid 6393] <... mkdir resumed>) = 0 [pid 6390] chdir("./file0" [pid 6393] mount("/dev/loop1", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6390] <... chdir resumed>) = 0 [pid 6390] ioctl(4, LOOP_CLR_FD) = 0 [pid 6390] close(4) = 0 [pid 6390] exit_group(0) = ? [pid 6390] +++ exited with 0 +++ [pid 5080] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6390, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 182.361774][ T6391] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 182.371828][ T6393] loop1: detected capacity change from 0 to 4096 [ 182.389580][ T6392] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(4, [pid 5077] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] fstat(3, [pid 5080] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 5080] close(4 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] <... close resumed>) = 0 [pid 5077] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./219/file0" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 5077] lstat("./217/binderfs", [pid 5080] getdents64(3, [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] unlink("./217/binderfs" [pid 5080] close(3 [pid 5077] <... unlink resumed>) = 0 [pid 6391] <... mount resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] rmdir("./219" [pid 5077] <... umount2 resumed>) = 0 [pid 6391] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 6391] chdir("./file0" [pid 5080] mkdir("./220", 0777 [pid 6391] <... chdir resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 6391] ioctl(4, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6391] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 6391] close(4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6391] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6392] <... mount resumed>) = 0 [pid 6391] exit_group(0 [pid 5080] close(3 [pid 6392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6391] <... exit_group resumed>) = ? [pid 5080] <... close resumed>) = 0 [pid 6392] <... openat resumed>) = 3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] chdir("./file0" [pid 6391] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] <... chdir resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6395 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6391, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] lstat("./217/file0", [pid 6392] ioctl(4, LOOP_CLR_FD [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 182.409050][ T6393] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [pid 6392] <... ioctl resumed>) = 0 [pid 5077] umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6395 attached [pid 6392] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] chdir("./220" [pid 6392] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] <... chdir resumed>) = 0 [pid 6392] exit_group(0 [pid 5077] <... openat resumed>) = 4 [pid 6392] <... exit_group resumed>) = ? [pid 5078] umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(4, [pid 6392] +++ exited with 0 +++ [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6393] <... mount resumed>) = 0 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6392, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(4, [pid 6393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5078] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 6395] <... prctl resumed>) = 0 [pid 6393] <... openat resumed>) = 3 [pid 5078] fstat(3, [pid 5077] getdents64(4, [pid 6395] setpgid(0, 0 [pid 6394] <... write resumed>) = 2097152 [pid 6393] chdir("./file0" [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6393] <... chdir resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] close(4 [pid 6393] ioctl(4, LOOP_CLR_FD [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5077] <... close resumed>) = 0 [pid 6395] <... setpgid resumed>) = 0 [pid 6394] munmap(0x7fa49b4d5000, 2097152 [pid 6393] <... ioctl resumed>) = 0 [pid 5079] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./217/file0" [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6393] close(4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 6395] <... openat resumed>) = 3 [pid 6393] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] lstat("./216/binderfs", [pid 5077] getdents64(3, [pid 6395] write(3, "1000", 4 [pid 6393] exit_group(0 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6395] <... write resumed>) = 4 [pid 6394] <... munmap resumed>) = 0 [pid 6393] <... exit_group resumed>) = ? [pid 5079] fstat(3, [pid 5078] unlink("./216/binderfs" [pid 5077] close(3 [pid 6395] close(3 [pid 6393] +++ exited with 0 +++ [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 6395] <... close resumed>) = 0 [pid 6394] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] getdents64(3, [pid 5078] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./217" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 6395] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5078] <... umount2 resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6395] <... symlink resumed>) = 0 [pid 6394] <... openat resumed>) = 4 [pid 5079] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./218", 0777 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6395] memfd_create("syzkaller", 0 [pid 6394] ioctl(4, LOOP_SET_FD, 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 6395] <... memfd_create resumed>) = 3 [pid 5079] lstat("./220/binderfs", [pid 5078] lstat("./216/file0", [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5078] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] unlink("./220/binderfs" [pid 5078] umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(3 [pid 5076] <... openat resumed>) = 3 [pid 6395] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6394] <... ioctl resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 6394] close(3 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] fstat(4, [pid 5077] <... close resumed>) = 0 [pid 5076] fstat(3, [pid 5079] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6394] <... close resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(4, [pid 5076] getdents64(3, [pid 6394] mkdir("./file0", 0777 [pid 5079] lstat("./220/file0", [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5077] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6396 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6394] <... mkdir resumed>) = 0 [pid 5079] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(4, [pid 5076] umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6394] mount("/dev/loop0", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5079] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5076] lstat("./212/binderfs", ./strace-static-x86_64: Process 6396 attached [pid 5079] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6396] chdir("./218" [pid 5079] <... openat resumed>) = 4 [pid 5078] rmdir("./216/file0" [pid 5076] unlink("./212/binderfs" [pid 6396] <... chdir resumed>) = 0 [pid 5079] fstat(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5078] getdents64(3, [pid 5076] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] <... prctl resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6396] setpgid(0, 0 [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5078] close(3 [pid 6396] <... setpgid resumed>) = 0 [pid 5079] getdents64(4, [pid 5078] <... close resumed>) = 0 [pid 6396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5078] rmdir("./216" [pid 6396] <... openat resumed>) = 3 [pid 5079] close(4 [pid 5078] <... rmdir resumed>) = 0 [pid 6396] write(3, "1000", 4 [pid 5079] <... close resumed>) = 0 [pid 5078] mkdir("./217", 0777 [pid 6396] <... write resumed>) = 4 [pid 5079] rmdir("./220/file0" [pid 5078] <... mkdir resumed>) = 0 [pid 6396] close(3 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6396] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 5078] <... openat resumed>) = 3 [pid 6396] symlink("/dev/binderfs", "./binderfs" [pid 5079] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 6396] <... symlink resumed>) = 0 [pid 5079] close(3 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6396] memfd_create("syzkaller", 0 [pid 5079] <... close resumed>) = 0 [pid 5078] close(3 [pid 6396] <... memfd_create resumed>) = 3 [pid 5079] rmdir("./220" [pid 5078] <... close resumed>) = 0 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6396] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5079] mkdir("./221", 0777) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6397 [pid 5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... close resumed>) = 0 [pid 5076] lstat("./212/file0", ./strace-static-x86_64: Process 6397 attached [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6397] chdir("./217" [pid 5076] umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] <... chdir resumed>) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6398 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6397] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6397] setpgid(0, 0 [pid 5076] fstat(4, [pid 6397] <... setpgid resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, ./strace-static-x86_64: Process 6398 attached [pid 6397] <... openat resumed>) = 3 [pid 6395] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [ 182.526159][ T6394] loop0: detected capacity change from 0 to 4096 [ 182.562351][ T6394] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [pid 6398] chdir("./221" [pid 6397] write(3, "1000", 4 [pid 5076] getdents64(4, [pid 6398] <... chdir resumed>) = 0 [pid 6397] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6397] close(3 [pid 5076] close(4 [pid 6398] <... prctl resumed>) = 0 [pid 6397] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6398] setpgid(0, 0 [pid 6397] symlink("/dev/binderfs", "./binderfs" [pid 5076] rmdir("./212/file0" [pid 6398] <... setpgid resumed>) = 0 [pid 6397] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6397] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 6398] <... openat resumed>) = 3 [pid 6397] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 6398] write(3, "1000", 4 [pid 6397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 6398] <... write resumed>) = 4 [pid 6397] <... mmap resumed>) = 0x7fa49b4d5000 [pid 5076] <... close resumed>) = 0 [pid 6398] close(3 [pid 6394] <... mount resumed>) = 0 [pid 5076] rmdir("./212" [pid 6398] <... close resumed>) = 0 [pid 6394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs" [pid 6396] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6395] <... write resumed>) = 2097152 [pid 5076] mkdir("./213", 0777 [pid 6398] <... symlink resumed>) = 0 [pid 6394] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 6398] memfd_create("syzkaller", 0 [pid 6394] chdir("./file0" [pid 5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6398] <... memfd_create resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6394] <... chdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6398] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6394] ioctl(4, LOOP_CLR_FD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6399 [pid 6394] <... ioctl resumed>) = 0 [pid 6394] close(4 [pid 6395] munmap(0x7fa49b4d5000, 2097152 [pid 6394] <... close resumed>) = 0 [pid 6394] exit_group(0) = ? ./strace-static-x86_64: Process 6399 attached [pid 6394] +++ exited with 0 +++ [pid 6399] chdir("./213") = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6394, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] <... prctl resumed>) = 0 [pid 6395] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] setpgid(0, 0 [pid 6395] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] <... setpgid resumed>) = 0 [pid 6395] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 6399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 6399] <... openat resumed>) = 3 [pid 6395] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6399] write(3, "1000", 4 [pid 5075] umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] close(3 [pid 5075] lstat("./211/binderfs", [pid 6399] <... close resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6399] symlink("/dev/binderfs", "./binderfs" [pid 6397] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 5075] unlink("./211/binderfs" [pid 6399] <... symlink resumed>) = 0 [pid 6395] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] memfd_create("syzkaller", 0 [pid 6398] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6395] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6399] <... memfd_create resumed>) = 3 [pid 6395] mkdir("./file0", 0777 [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6395] <... mkdir resumed>) = 0 [pid 6399] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6395] mount("/dev/loop5", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5075] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 182.693039][ T6395] loop5: detected capacity change from 0 to 4096 [pid 5075] lstat("./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6396] <... write resumed>) = 2097152 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./211/file0") = 0 [pid 6396] munmap(0x7fa49b4d5000, 2097152 [pid 5075] getdents64(3, 0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 6396] <... munmap resumed>) = 0 [pid 5075] rmdir("./211") = 0 [pid 5075] mkdir("./212", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6396] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6396] <... openat resumed>) = 4 [pid 5075] close(3 [pid 6396] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... close resumed>) = 0 [pid 6397] <... write resumed>) = 2097152 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f45d0) = 6400 ./strace-static-x86_64: Process 6400 attached [pid 6400] chdir("./212") = 0 [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6400] setpgid(0, 0) = 0 [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6400] write(3, "1000", 4) = 4 [pid 6397] munmap(0x7fa49b4d5000, 2097152 [pid 6400] close(3) = 0 [pid 6400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6400] memfd_create("syzkaller", 0 [pid 6397] <... munmap resumed>) = 0 [pid 6400] <... memfd_create resumed>) = 3 [pid 6398] <... write resumed>) = 2097152 [pid 6396] <... ioctl resumed>) = 0 [pid 6400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6398] munmap(0x7fa49b4d5000, 2097152 [pid 6396] close(3 [pid 6400] <... mmap resumed>) = 0x7fa49b4d5000 [pid 6398] <... munmap resumed>) = 0 [pid 6396] <... close resumed>) = 0 [pid 6397] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6396] mkdir("./file0", 0777 [pid 6397] <... openat resumed>) = 4 [pid 6396] <... mkdir resumed>) = 0 [pid 6397] ioctl(4, LOOP_SET_FD, 3 [ 182.750771][ T6395] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 182.785835][ T6396] loop2: detected capacity change from 0 to 4096 [pid 6396] mount("/dev/loop2", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6395] <... mount resumed>) = 0 [pid 6398] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6398] <... openat resumed>) = 4 [pid 6395] <... openat resumed>) = 3 [pid 6399] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6395] chdir("./file0" [pid 6397] <... ioctl resumed>) = 0 [pid 6397] close(3 [pid 6395] <... chdir resumed>) = 0 [pid 6397] <... close resumed>) = 0 [pid 6397] mkdir("./file0", 0777) = 0 [pid 6395] ioctl(4, LOOP_CLR_FD [pid 6397] mount("/dev/loop3", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6395] <... ioctl resumed>) = 0 [pid 6395] close(4 [pid 6398] close(3) = 0 [pid 6398] mkdir("./file0", 0777 [pid 6395] <... close resumed>) = 0 [pid 6398] <... mkdir resumed>) = 0 [pid 6395] exit_group(0) = ? [pid 6398] mount("/dev/loop4", "./file0", "ntfs3", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 6395] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6395, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 182.834174][ T6397] loop3: detected capacity change from 0 to 4096 [ 182.840631][ T6396] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 182.861768][ T6398] loop4: detected capacity change from 0 to 4096 [ 182.873011][ T6397] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [pid 5080] umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 5080] umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./220/binderfs") = 0 [pid 5080] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] <... write resumed>) = 2097152 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] <... mount resumed>) = 0 [pid 6396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6396] chdir("./file0") = 0 [pid 6396] ioctl(4, LOOP_CLR_FD) = 0 [pid 6396] close(4 [pid 5080] <... openat resumed>) = 4 [pid 6396] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 6396] exit_group(0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6396] <... exit_group resumed>) = ? [pid 5080] getdents64(4, [pid 6400] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\x04\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x07\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf6\x00\x00\x00\x01\x00\x00\x00\x65\x7e\xbb\x32\xdb\xa4\xaf\x02\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 6396] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6396, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6397] <... mount resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559fd660 /* 0 entries */, 32768) = 0 [pid 6397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] close(4 [pid 6397] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5077] umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] chdir("./file0" [pid 5080] rmdir("./220/file0" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6397] <... chdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [ 182.894691][ T6398] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [pid 5077] openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] munmap(0x7fa49b4d5000, 2097152 [pid 6397] ioctl(4, LOOP_CLR_FD [pid 5080] getdents64(3, [pid 5077] <... openat resumed>) = 3 [pid 6397] <... ioctl resumed>) = 0 [pid 5080] <... getdents64 resumed>0x5555559f5620 /* 0 entries */, 32768) = 0 [pid 5077] fstat(3, [pid 6397] close(4 [pid 5080] close(3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6397] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 6397] exit_group(0 [pid 5080] rmdir("./220" [pid 5077] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6397] <... exit_group resumed>) = ? [pid 5080] <... rmdir resumed>) = 0 [pid 5077] umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] +++ exited with 0 +++ [pid 5080] mkdir("./221", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... mkdir resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6397, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5077] lstat("./218/binderfs", [pid 5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6398] <... mount resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] unlink("./218/binderfs" [pid 6398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5078] umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 6398] <... openat resumed>) = 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6398] chdir("./file0" [pid 5080] close(3 [pid 5078] openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6398] <... chdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 6398] ioctl(4, LOOP_CLR_FD [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] fstat(3, [pid 6399] <... munmap resumed>) = 0 [pid 6398] <... ioctl resumed>) = 0 [pid 5078] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6398] close(4 [pid 5080] <... clone resumed>, child_tidptr=0x5555559f45d0) = 6401 [pid 5078] getdents64(3, [pid 6398] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x5555559f5620 /* 4 entries */, 32768) = 112 [pid 6398] exit_group(0 [pid 5078] umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6398] <... exit_group resumed>) = ? [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6401 attached [pid 6399