./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor430295472 <...> Warning: Permanently added '10.128.10.37' (ED25519) to the list of known hosts. execve("./syz-executor430295472", ["./syz-executor430295472"], 0x7fff5ba458a0 /* 10 vars */) = 0 brk(NULL) = 0x555584a2d000 brk(0x555584a2de00) = 0x555584a2de00 arch_prctl(ARCH_SET_FS, 0x555584a2d480) = 0 set_tid_address(0x555584a2d750) = 5844 set_robust_list(0x555584a2d760, 24) = 0 rseq(0x555584a2dda0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor430295472", 4096) = 27 getrandom("\xad\xd7\xd9\x02\xa1\xf8\xb4\x75", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555584a2de00 brk(0x555584a4ee00) = 0x555584a4ee00 brk(0x555584a4f000) = 0x555584a4f000 mprotect(0x7fedb1653000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5844}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5844}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5844}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5844}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5844}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5844}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5844}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fedb15a1da0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fedb15aa800}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fedb15a1da0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fedb15aa800}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached , child_tidptr=0x555584a2d750) = 5847 [pid 5847] set_robust_list(0x555584a2d760, 24) = 0 [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] mkdir("./syzkaller.3l9doo", 0700./strace-static-x86_64: Process 5848 attached [pid 5844] <... clone resumed>, child_tidptr=0x555584a2d750) = 5848 [pid 5848] set_robust_list(0x555584a2d760, 24 [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... set_robust_list resumed>) = 0 [pid 5848] mkdir("./syzkaller.MdoAlS", 0700 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] chmod("./syzkaller.3l9doo", 0777./strace-static-x86_64: Process 5849 attached [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... chmod resumed>) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x555584a2d750) = 5849 [pid 5849] set_robust_list(0x555584a2d760, 24 [pid 5848] chmod("./syzkaller.MdoAlS", 0777 [pid 5847] chdir("./syzkaller.3l9doo" [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... chmod resumed>) = 0 [pid 5849] mkdir("./syzkaller.OYypeX", 0700 [pid 5847] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5850 attached [pid 5848] chdir("./syzkaller.MdoAlS") = 0 [pid 5847] mkdir("./0", 0777 [pid 5850] set_robust_list(0x555584a2d760, 24 [pid 5848] mkdir("./0", 0777 [pid 5847] <... mkdir resumed>) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x555584a2d750) = 5850 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] chmod("./syzkaller.OYypeX", 0777 [pid 5848] <... mkdir resumed>) = 0 [pid 5850] mkdir("./syzkaller.ydkzqY", 0700 [pid 5849] <... chmod resumed>) = 0 [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] chdir("./syzkaller.OYypeX") = 0 [pid 5849] mkdir("./0", 0777./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x555584a2d760, 24 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... openat resumed>) = 3 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x555584a2d750) = 5851 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] mkdir("./syzkaller.H3NmLJ", 0700 [pid 5850] chmod("./syzkaller.ydkzqY", 0777 [pid 5848] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5847] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5849] <... openat resumed>) = 3 [pid 5848] close(3) = 0 [pid 5847] close(3./strace-static-x86_64: Process 5852 attached ) = 0 [pid 5844] <... clone resumed>, child_tidptr=0x555584a2d750) = 5852 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... chmod resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] set_robust_list(0x555584a2d760, 24 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached [pid 5850] chdir("./syzkaller.ydkzqY" [pid 5849] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5849] close(3 [pid 5853] set_robust_list(0x555584a2d760, 24) = 0 [pid 5853] chdir("./0" [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5853 ./strace-static-x86_64: Process 5854 attached [pid 5853] <... chdir resumed>) = 0 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5851] chmod("./syzkaller.H3NmLJ", 0777 [pid 5850] <... chdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5852] getrandom( [pid 5850] mkdir("./0", 0777 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5854 [pid 5854] set_robust_list(0x555584a2d760, 24 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... chmod resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5853] <... prctl resumed>) = 0 [pid 5851] chdir("./syzkaller.H3NmLJ" [pid 5854] chdir("./0" [pid 5853] setpgid(0, 0 [pid 5851] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5855 attached [pid 5854] <... chdir resumed>) = 0 [pid 5853] <... setpgid resumed>) = 0 [pid 5851] mkdir("./0", 0777 [pid 5855] set_robust_list(0x555584a2d760, 24 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... mkdir resumed>) = 0 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5852] <... getrandom resumed>"\x4f\xa7\xc2\x74\x51\x2d\xa2\x82", 8, GRND_NONBLOCK) = 8 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5855 [pid 5855] chdir("./0" [pid 5854] setpgid(0, 0 [pid 5852] mkdir("./syzkaller.J6QbS8", 0700 [pid 5855] <... chdir resumed>) = 0 [pid 5854] <... setpgid resumed>) = 0 [pid 5853] write(3, "1000", 4 [pid 5851] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5853] <... write resumed>) = 4 [pid 5852] <... mkdir resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5855] <... prctl resumed>) = 0 [pid 5853] close(3 [pid 5852] chmod("./syzkaller.J6QbS8", 0777 [pid 5851] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5855] setpgid(0, 0 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... close resumed>) = 0 [pid 5852] <... chmod resumed>) = 0 [pid 5850] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5855] <... setpgid resumed>) = 0 [pid 5854] write(3, "1000", 4 [pid 5853] symlink("/dev/binderfs", "./binderfs" [pid 5851] close(3 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5854] <... write resumed>) = 4 [pid 5853] <... symlink resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5854] close(3 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5856 attached [pid 5855] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = 0 [pid 5853] write(1, "executing program\n", 18 [pid 5850] close(3executing program [pid 5852] chdir("./syzkaller.J6QbS8") = 0 [pid 5850] <... close resumed>) = 0 [pid 5856] set_robust_list(0x555584a2d760, 24 [pid 5855] write(3, "1000", 4 [pid 5854] symlink("/dev/binderfs", "./binderfs" [pid 5853] <... write resumed>) = 18 [pid 5852] mkdir("./0", 0777 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] <... write resumed>) = 4 [pid 5854] <... symlink resumed>) = 0 [pid 5853] memfd_create("syzkaller", 0executing program [pid 5856] chdir("./0" [pid 5855] close(3 [pid 5854] write(1, "executing program\n", 18 [pid 5853] <... memfd_create resumed>) = 3 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5856 [pid 5856] <... chdir resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5855] symlink("/dev/binderfs", "./binderfs" [pid 5854] <... write resumed>) = 18 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5857 attached [pid 5855] <... symlink resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5857] set_robust_list(0x555584a2d760, 24 [pid 5856] <... prctl resumed>) = 0 executing program [pid 5855] write(1, "executing program\n", 18 [pid 5853] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5857 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] setpgid(0, 0 [pid 5855] <... write resumed>) = 18 [pid 5854] memfd_create("syzkaller", 0 [pid 5856] <... setpgid resumed>) = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5857] chdir("./0" [pid 5855] memfd_create("syzkaller", 0 [pid 5852] <... openat resumed>) = 3 [pid 5854] <... memfd_create resumed>) = 3 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5854] <... mmap resumed>) = 0x7feda9000000 [pid 5852] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5857] <... chdir resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] close(3 [pid 5856] write(3, "1000", 4 [pid 5855] <... memfd_create resumed>) = 3 [pid 5856] <... write resumed>) = 4 [pid 5856] close(3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5856] <... close resumed>) = 0 [pid 5855] <... mmap resumed>) = 0x7feda9000000 [pid 5857] <... prctl resumed>) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... close resumed>) = 0 [pid 5857] setpgid(0, 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5857] <... setpgid resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] <... symlink resumed>) = 0 [pid 5856] write(1, "executing program\n", 18) = 18 executing program ./strace-static-x86_64: Process 5858 attached [pid 5857] <... openat resumed>) = 3 [pid 5856] memfd_create("syzkaller", 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5858 [pid 5857] write(3, "1000", 4 [pid 5858] set_robust_list(0x555584a2d760, 24 [pid 5857] <... write resumed>) = 4 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] close(3 [pid 5856] <... memfd_create resumed>) = 3 [pid 5858] chdir("./0" [pid 5857] <... close resumed>) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs" [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 executing program [pid 5858] <... chdir resumed>) = 0 [pid 5857] <... symlink resumed>) = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] write(1, "executing program\n", 18 [pid 5858] setpgid(0, 0) = 0 [pid 5857] <... write resumed>) = 18 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] memfd_create("syzkaller", 0 [pid 5858] write(3, "1000", 4) = 4 [pid 5857] <... memfd_create resumed>) = 3 [pid 5858] close(3executing program ) = 0 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5857] <... mmap resumed>) = 0x7feda9000000 [pid 5858] <... symlink resumed>) = 0 [pid 5858] write(1, "executing program\n", 18) = 18 [pid 5858] memfd_create("syzkaller", 0) = 3 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5857] <... write resumed>) = 16777216 [pid 5858] <... write resumed>) = 16777216 [pid 5857] munmap(0x7feda9000000, 138412032 [pid 5853] <... write resumed>) = 16777216 [pid 5853] munmap(0x7feda9000000, 138412032 [pid 5858] munmap(0x7feda9000000, 138412032 [pid 5855] <... write resumed>) = 16777216 [pid 5856] <... write resumed>) = 16777216 [pid 5857] <... munmap resumed>) = 0 [pid 5855] munmap(0x7feda9000000, 138412032 [pid 5854] <... write resumed>) = 16777216 [pid 5853] <... munmap resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3 [pid 5854] munmap(0x7feda9000000, 138412032 [pid 5853] <... ioctl resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5856] munmap(0x7feda9000000, 138412032 [pid 5853] close(3 [pid 5858] <... munmap resumed>) = 0 [pid 5857] <... openat resumed>) = 4 [pid 5855] <... munmap resumed>) = 0 [pid 5857] ioctl(4, LOOP_SET_FD, 3 [pid 5858] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5855] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5853] <... close resumed>) = 0 [pid 5858] <... openat resumed>) = 4 [pid 5855] <... openat resumed>) = 4 [pid 5853] close(4 [pid 5858] ioctl(4, LOOP_SET_FD, 3 [pid 5855] ioctl(4, LOOP_SET_FD, 3 [pid 5853] <... close resumed>) = 0 [pid 5858] <... ioctl resumed>) = 0 [pid 5853] mkdir("./file0", 0777) = 0 [pid 5853] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5855] <... ioctl resumed>) = 0 [pid 5855] close(3) = 0 [pid 5855] close(4) = 0 [pid 5855] mkdir("./file0", 0777) = 0 [pid 5855] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5856] <... munmap resumed>) = 0 [pid 5854] <... munmap resumed>) = 0 [pid 5858] close(3) = 0 [pid 5856] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5858] close(4 [pid 5856] <... openat resumed>) = 4 [pid 5858] <... close resumed>) = 0 [pid 5856] ioctl(4, LOOP_SET_FD, 3 [ 178.950885][ T5853] loop0: detected capacity change from 0 to 32768 [ 178.972165][ T5858] loop5: detected capacity change from 0 to 32768 [ 178.979296][ T5855] loop2: detected capacity change from 0 to 32768 [ 178.980605][ T5857] loop3: detected capacity change from 0 to 32768 [pid 5858] mkdir("./file0", 0777) = 0 [pid 5858] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5857] <... ioctl resumed>) = 0 [pid 5856] <... ioctl resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5857] close(3 [pid 5856] close(3 [pid 5854] <... openat resumed>) = 4 [pid 5857] <... close resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5854] ioctl(4, LOOP_SET_FD, 3 [pid 5857] close(4 [ 179.015447][ T5856] loop4: detected capacity change from 0 to 32768 [ 179.027075][ T5855] [ 179.027075][ T5855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.027075][ T5855] [ 179.043014][ T5853] [ 179.043014][ T5853] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.043014][ T5853] [ 179.051294][ T5854] loop1: detected capacity change from 0 to 32768 [pid 5856] close(4 [pid 5853] <... mount resumed>) = 0 [pid 5857] <... close resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] <... mount resumed>) = 0 [pid 5854] <... ioctl resumed>) = 0 [pid 5853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5858] <... mount resumed>) = 0 [pid 5857] mkdir("./file0", 0777 [pid 5856] mkdir("./file0", 0777 [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5854] close(3 [pid 5858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5853] <... openat resumed>) = 3 [pid 5858] <... openat resumed>) = 3 [pid 5857] <... mkdir resumed>) = 0 [pid 5857] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5858] chdir("./file0" [pid 5856] <... mkdir resumed>) = 0 [pid 5855] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = 0 [pid 5853] chdir("./file0" [pid 5858] <... chdir resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5855] chdir("./file0" [pid 5854] close(4 [pid 5853] <... chdir resumed>) = 0 [ 179.067328][ T5858] [ 179.067328][ T5858] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.067328][ T5858] [pid 5858] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] <... chdir resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5858] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5855] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5854] mkdir("./file0", 0777 [pid 5853] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5854] <... mkdir resumed>) = 0 [pid 5855] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5853] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5856] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 179.112484][ T5858] [ 179.112484][ T5858] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.112484][ T5858] [ 179.113010][ T5853] [ 179.113010][ T5853] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.113010][ T5853] [ 179.124942][ T5857] [ 179.124942][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.124942][ T5857] [ 179.134824][ T5855] [ 179.134824][ T5855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.134824][ T5855] [ 179.146701][ T5858] [ 179.146701][ T5858] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.146701][ T5858] [ 179.177016][ T5854] [ 179.177016][ T5854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.177016][ T5854] [ 179.177560][ T5855] [ 179.177560][ T5855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.177560][ T5855] [ 179.198372][ T5856] [ 179.198372][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.198372][ T5856] [ 179.201685][ T5853] [pid 5854] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5857] <... mount resumed>) = 0 [pid 5853] <... lsetxattr resumed>) = 0 [pid 5858] <... lsetxattr resumed>) = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5856] <... mount resumed>) = 0 [pid 5855] <... lsetxattr resumed>) = 0 [pid 5854] <... mount resumed>) = 0 [pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 179.201685][ T5853] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.201685][ T5853] [ 179.226494][ T112] [ 179.226494][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.226494][ T112] [ 179.229719][ T113] [ 179.229719][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.229719][ T113] [ 179.238779][ T112] [ 179.238779][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.238779][ T112] [ 179.261151][ T5854] [pid 5854] chdir("./file0" [pid 5858] exit_group(0 [pid 5855] exit_group(0 [pid 5854] <... chdir resumed>) = 0 [pid 5853] exit_group(0 [pid 5855] <... exit_group resumed>) = ? [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5853] <... exit_group resumed>) = ? [pid 5858] <... exit_group resumed>) = ? [pid 5854] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5853] +++ exited with 0 +++ [pid 5858] +++ exited with 0 +++ [pid 5857] <... openat resumed>) = 3 [pid 5856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5854] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5855] +++ exited with 0 +++ [pid 5857] chdir("./file0" [pid 5856] <... openat resumed>) = 3 [pid 5857] <... chdir resumed>) = 0 [pid 5856] chdir("./file0" [pid 5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5856] <... chdir resumed>) = 0 [pid 5847] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5856] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5856] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5856] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5847] <... openat resumed>) = 3 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5847] newfstatat(3, "", [pid 5849] <... restart_syscall resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5849] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... openat resumed>) = 3 [pid 5852] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5852] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 5852] newfstatat(3, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5847] unlink("./0/binderfs" [pid 5852] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... unlink resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 179.261151][ T5854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.261151][ T5854] [ 179.264406][ T5857] [ 179.264406][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.264406][ T5857] [ 179.272074][ T5854] [ 179.272074][ T5854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.272074][ T5854] [ 179.284147][ T5856] [ 179.284147][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.284147][ T5856] [pid 5849] unlink("./0/binderfs" [pid 5854] <... lsetxattr resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5849] <... unlink resumed>) = 0 [ 179.311893][ T5857] [ 179.311893][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.311893][ T5857] [ 179.317492][ T5856] [ 179.317492][ T5856] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.317492][ T5856] [ 179.323629][ T113] [ 179.323629][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.323629][ T113] [ 179.347331][ T5847] [ 179.347331][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.347331][ T5847] [ 179.348649][ T5849] [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5857] <... lsetxattr resumed>) = 0 [pid 5856] <... lsetxattr resumed>) = 0 [pid 5854] exit_group(0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] <... exit_group resumed>) = ? [pid 5852] unlink("./0/binderfs" [ 179.348649][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.348649][ T5849] [ 179.374943][ T112] [ 179.374943][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.374943][ T112] [ 179.381011][ T5849] [ 179.381011][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.381011][ T5849] [ 179.385505][ T5847] [ 179.385505][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.385505][ T5847] [ 179.408594][ T113] [pid 5857] exit_group(0) = ? [pid 5856] exit_group(0 [pid 5854] +++ exited with 0 +++ [pid 5852] <... unlink resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5856] <... exit_group resumed>) = ? [pid 5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5856] +++ exited with 0 +++ [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=35 /* 0.35 s */} --- [pid 5849] newfstatat(AT_FDCWD, "./0/file0", [pid 5857] +++ exited with 0 +++ [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5851] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... openat resumed>) = 3 [pid 5850] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 4 [pid 5851] newfstatat(3, "", [pid 5849] newfstatat(4, "", [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, [pid 5850] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(4, [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... openat resumed>) = 3 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] newfstatat(3, "", [pid 5849] getdents64(4, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5850] getdents64(3, [pid 5849] close(4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] unlink("./0/binderfs" [pid 5850] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] rmdir("./0/file0" [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5849] <... rmdir resumed>) = 0 [pid 5848] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] unlink("./0/binderfs" [pid 5849] getdents64(3, [pid 5848] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 3 [ 179.408594][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.408594][ T113] [ 179.421882][ T5852] [ 179.421882][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.421882][ T5852] [ 179.435099][ T5852] [ 179.435099][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.435099][ T5852] [ 179.449619][ T5851] [ 179.449619][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.449619][ T5851] [pid 5847] newfstatat(AT_FDCWD, "./0/file0", [pid 5852] <... umount2 resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] newfstatat(3, "", [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(3, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(4, "", [pid 5849] close(3 [pid 5848] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] getdents64(4, [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] rmdir("./0" [pid 5848] unlink("./0/binderfs" [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] newfstatat(AT_FDCWD, "./0/file0", [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 5847] getdents64(4, [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] mkdir("./1", 0777 [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 179.461948][ T5851] [ 179.461948][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.461948][ T5851] [ 179.477304][ T5850] [ 179.477304][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.477304][ T5850] [ 179.488413][ T5848] [ 179.488413][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.488413][ T5848] [ 179.488462][ T5850] [ 179.488462][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.488462][ T5850] [ 179.499315][ T5848] [pid 5851] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... mkdir resumed>) = 0 [pid 5847] close(4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... close resumed>) = 0 [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 3 [pid 5847] rmdir("./0/file0" [pid 5852] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... rmdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... ioctl resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5847] getdents64(3, [pid 5849] close(3 [pid 5851] <... openat resumed>) = 4 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./0/file0") = 0 [pid 5850] getdents64(3, [pid 5852] newfstatat(4, "", [pid 5851] newfstatat(4, "", [pid 5848] <... umount2 resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... close resumed>) = 0 [pid 5851] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] close(3 [pid 5848] newfstatat(AT_FDCWD, "./0/file0", [pid 5852] getdents64(4, [pid 5847] rmdir("./0" [pid 5850] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... rmdir resumed>) = 0 [pid 5850] rmdir("./0" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] mkdir("./1", 0777 [pid 5852] close(4 [pid 5850] mkdir("./1", 0777 [pid 5848] <... openat resumed>) = 4 [pid 5851] rmdir("./0/file0" [pid 5852] <... close resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 5847] <... mkdir resumed>) = 0 [pid 5852] rmdir("./0/file0" [pid 5850] <... mkdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... rmdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] getdents64(4, [pid 5847] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5850] <... openat resumed>) = 3 [pid 5847] <... ioctl resumed>) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5848] getdents64(4, [pid 5847] close(3 [pid 5850] <... ioctl resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./0") = 0 [pid 5851] mkdir("./1", 0777) = 0 [pid 5850] close(3 [pid 5848] close(4 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5848] rmdir("./0/file0" [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 179.499315][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.499315][ T5848] [pid 5851] close(3 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 5852] getdents64(3, [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5852] close(3 [pid 5848] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./0") = 0 [pid 5852] mkdir("./1", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5848] rmdir("./0") = 0 [pid 5848] mkdir("./1", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5861 attached [pid 5861] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5861 [pid 5861] <... set_robust_list resumed>) = 0 [pid 5861] chdir("./1") = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5861] write(1, "executing program\n", 18) = 18 [pid 5861] memfd_create("syzkaller", 0) = 3 [pid 5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5862] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5862 ./strace-static-x86_64: Process 5864 attached ./strace-static-x86_64: Process 5863 attached [pid 5862] chdir("./1" [pid 5851] <... close resumed>) = 0 [pid 5862] <... chdir resumed>) = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5864] set_robust_list(0x555584a2d760, 24 [pid 5863] set_robust_list(0x555584a2d760, 24 [pid 5864] <... set_robust_list resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5864 [pid 5864] chdir("./1" [pid 5863] <... set_robust_list resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5864] <... chdir resumed>) = 0 [pid 5862] write(3, "1000", 4 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5863 [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5863] chdir("./1" [pid 5862] <... write resumed>) = 4 [pid 5864] <... prctl resumed>) = 0 [pid 5862] close(3 [pid 5864] setpgid(0, 0 [pid 5862] <... close resumed>) = 0 [pid 5864] <... setpgid resumed>) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs"executing program ./strace-static-x86_64: Process 5865 attached [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] <... chdir resumed>) = 0 [pid 5862] <... symlink resumed>) = 0 [pid 5864] <... openat resumed>) = 3 [pid 5862] write(1, "executing program\n", 18 [pid 5865] set_robust_list(0x555584a2d760, 24 [pid 5864] write(3, "1000", 4 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5862] <... write resumed>) = 18 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5864] <... write resumed>) = 4 [pid 5863] <... prctl resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5865 [pid 5865] chdir("./1" [pid 5863] setpgid(0, 0 [pid 5862] memfd_create("syzkaller", 0 [pid 5865] <... chdir resumed>) = 0 [pid 5863] <... setpgid resumed>) = 0 [pid 5864] close(3 [pid 5862] <... memfd_create resumed>) = 3 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5865] <... prctl resumed>) = 0 [pid 5864] <... close resumed>) = 0 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5865] setpgid(0, 0 [pid 5864] symlink("/dev/binderfs", "./binderfs" [pid 5863] <... openat resumed>) = 3 [pid 5862] <... mmap resumed>) = 0x7feda9000000 [pid 5865] <... setpgid resumed>) = 0 [pid 5864] <... symlink resumed>) = 0 [pid 5863] write(3, "1000", 4executing program [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] <... write resumed>) = 4 [pid 5848] <... close resumed>) = 0 [pid 5863] close(3) = 0 [pid 5865] <... openat resumed>) = 3 [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5864] write(1, "executing program\n", 18) = 18 [pid 5863] <... symlink resumed>) = 0 [pid 5863] write(1, "executing program\n", 18executing program [pid 5864] memfd_create("syzkaller", 0 [pid 5863] <... write resumed>) = 18 [pid 5864] <... memfd_create resumed>) = 3 [pid 5865] write(3, "1000", 4 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5864] <... mmap resumed>) = 0x7feda9000000 [pid 5865] <... write resumed>) = 4 [pid 5863] memfd_create("syzkaller", 0 [pid 5865] close(3./strace-static-x86_64: Process 5866 attached ) = 0 [pid 5863] <... memfd_create resumed>) = 3 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5866 [pid 5865] symlink("/dev/binderfs", "./binderfs" [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5865] <... symlink resumed>) = 0 [pid 5863] <... mmap resumed>) = 0x7feda9000000 executing program [pid 5866] set_robust_list(0x555584a2d760, 24 [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5865] memfd_create("syzkaller", 0 [pid 5866] chdir("./1") = 0 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5865] <... memfd_create resumed>) = 3 executing program [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5866] close(3 [pid 5865] <... mmap resumed>) = 0x7feda9000000 [pid 5866] <... close resumed>) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5866] write(1, "executing program\n", 18) = 18 [pid 5866] memfd_create("syzkaller", 0) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5861] <... write resumed>) = 16777216 [pid 5861] munmap(0x7feda9000000, 138412032 [pid 5866] <... write resumed>) = 16777216 [pid 5866] munmap(0x7feda9000000, 138412032 [pid 5863] <... write resumed>) = 16777216 [pid 5863] munmap(0x7feda9000000, 138412032 [pid 5861] <... munmap resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5861] ioctl(4, LOOP_SET_FD, 3 [pid 5866] <... munmap resumed>) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5866] ioctl(4, LOOP_SET_FD, 3 [pid 5863] <... munmap resumed>) = 0 [pid 5861] <... ioctl resumed>) = 0 [pid 5861] close(3) = 0 [pid 5861] close(4 [pid 5863] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5861] <... close resumed>) = 0 [pid 5861] mkdir("./file0", 0777) = 0 [pid 5861] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5866] <... ioctl resumed>) = 0 [pid 5863] <... openat resumed>) = 4 [ 180.685436][ T5861] loop2: detected capacity change from 0 to 32768 [ 180.710760][ T5866] loop1: detected capacity change from 0 to 32768 [pid 5862] <... write resumed>) = 16777216 [pid 5866] close(3 [pid 5863] ioctl(4, LOOP_SET_FD, 3 [pid 5862] munmap(0x7feda9000000, 138412032 [pid 5866] <... close resumed>) = 0 [pid 5866] close(4) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [pid 5865] <... write resumed>) = 16777216 [pid 5863] <... ioctl resumed>) = 0 [pid 5866] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] mkdir("./file0", 0777 [pid 5866] <... mount resumed>) = 0 [pid 5865] munmap(0x7feda9000000, 138412032 [pid 5863] <... mkdir resumed>) = 0 [pid 5862] <... munmap resumed>) = 0 [pid 5864] <... write resumed>) = 16777216 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5863] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5862] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5861] <... mount resumed>) = 0 [pid 5866] <... openat resumed>) = 3 [pid 5861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5862] <... openat resumed>) = 4 [pid 5861] <... openat resumed>) = 3 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5861] chdir("./file0" [pid 5864] munmap(0x7feda9000000, 138412032 [pid 5861] <... chdir resumed>) = 0 [ 180.739522][ T5863] loop3: detected capacity change from 0 to 32768 [ 180.767033][ T5866] [ 180.767033][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.767033][ T5866] [ 180.778505][ T5861] [ 180.778505][ T5861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.778505][ T5861] [pid 5862] <... ioctl resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5866] chdir("./file0" [pid 5862] close(3 [pid 5861] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5866] <... chdir resumed>) = 0 [pid 5865] <... munmap resumed>) = 0 [pid 5862] <... close resumed>) = 0 [pid 5866] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5865] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 180.818014][ T5862] loop0: detected capacity change from 0 to 32768 [ 180.828926][ T5863] [ 180.828926][ T5863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.828926][ T5863] [ 180.829651][ T5861] [ 180.829651][ T5861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.829651][ T5861] [pid 5862] close(4 [pid 5866] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5865] <... openat resumed>) = 4 [pid 5864] <... munmap resumed>) = 0 [pid 5863] <... mount resumed>) = 0 [pid 5862] <... close resumed>) = 0 [pid 5866] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5865] ioctl(4, LOOP_SET_FD, 3 [pid 5864] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5862] mkdir("./file0", 0777 [pid 5861] <... lsetxattr resumed>) = 0 [pid 5863] <... openat resumed>) = 3 [pid 5863] chdir("./file0") = 0 [pid 5862] <... mkdir resumed>) = 0 [ 180.870116][ T5861] [ 180.870116][ T5861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.870116][ T5861] [ 180.883163][ T113] [ 180.883163][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.883163][ T113] [ 180.895514][ T5865] loop4: detected capacity change from 0 to 32768 [ 180.903527][ T5866] [ 180.903527][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.903527][ T5866] [ 180.915286][ T5866] [pid 5863] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5865] <... ioctl resumed>) = 0 [pid 5864] <... openat resumed>) = 4 [pid 5863] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5866] <... lsetxattr resumed>) = 0 [pid 5862] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5861] exit_group(0 [pid 5865] close(3 [pid 5864] ioctl(4, LOOP_SET_FD, 3 [pid 5863] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5866] exit_group(0 [pid 5865] <... close resumed>) = 0 [pid 5861] <... exit_group resumed>) = ? [pid 5861] +++ exited with 0 +++ [pid 5865] close(4) = 0 [pid 5865] mkdir("./file0", 0777) = 0 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5849] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5865] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5866] <... exit_group resumed>) = ? [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 180.915286][ T5866] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.915286][ T5866] [ 180.931034][ T5863] [ 180.931034][ T5863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.931034][ T5863] [ 180.932357][ T112] [ 180.932357][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.932357][ T112] [ 180.942065][ T5864] loop5: detected capacity change from 0 to 32768 [ 180.955010][ T5863] [ 180.955010][ T5863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.955010][ T5863] [pid 5849] unlink("./1/binderfs" [pid 5866] +++ exited with 0 +++ [pid 5863] <... lsetxattr resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5863] exit_group(0 [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5863] <... exit_group resumed>) = ? [pid 5864] close(3) = 0 [pid 5864] close(4) = 0 [pid 5864] mkdir("./file0", 0777) = 0 [pid 5863] +++ exited with 0 +++ [pid 5848] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5865] <... mount resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5865] chdir("./file0" [pid 5864] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5865] <... chdir resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 180.982481][ T5865] [ 180.982481][ T5865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.982481][ T5865] [ 180.986695][ T113] [ 180.986695][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.986695][ T113] [ 180.997440][ T5862] [ 180.997440][ T5862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.997440][ T5862] [ 181.022663][ T5849] [ 181.022663][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5865] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5848] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... restart_syscall resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(3, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] <... openat resumed>) = 3 [pid 5848] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] newfstatat(3, "", [ 181.022663][ T5849] [ 181.028041][ T5865] [ 181.028041][ T5865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.028041][ T5865] [ 181.033714][ T5849] [ 181.033714][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.033714][ T5849] [ 181.050375][ T5864] [ 181.050375][ T5864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.050375][ T5864] [ 181.069372][ T5865] [ 181.069372][ T5865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.069372][ T5865] [pid 5848] unlink("./1/binderfs" [pid 5865] <... lsetxattr resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5862] <... mount resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 5850] getdents64(3, [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5862] chdir("./file0" [pid 5850] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5862] <... chdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5862] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5865] exit_group(0 [pid 5864] <... mount resumed>) = 0 [pid 5865] <... exit_group resumed>) = ? [pid 5865] +++ exited with 0 +++ [pid 5864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] chdir("./file0") = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 181.084372][ T112] [ 181.084372][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.084372][ T112] [ 181.096524][ T5848] [ 181.096524][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.096524][ T5848] [ 181.097581][ T5862] [ 181.097581][ T5862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.097581][ T5862] [ 181.107320][ T5848] [ 181.107320][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.107320][ T5848] [ 181.122611][ T5864] [pid 5864] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5862] <... lsetxattr resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5850] unlink("./1/binderfs" [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 181.122611][ T5864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.122611][ T5864] [ 181.138117][ T5862] [ 181.138117][ T5862] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.138117][ T5862] [ 181.141786][ T5864] [ 181.141786][ T5864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.141786][ T5864] [ 181.169430][ T112] [ 181.169430][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.169430][ T112] [ 181.173816][ T113] [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] <... lsetxattr resumed>) = 0 [pid 5862] exit_group(0 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] exit_group(0 [pid 5862] <... exit_group resumed>) = ? [pid 5851] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] newfstatat(AT_FDCWD, "./1/file0", [pid 5848] newfstatat(AT_FDCWD, "./1/file0", [pid 5864] <... exit_group resumed>) = ? [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5862] +++ exited with 0 +++ [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5864] +++ exited with 0 +++ [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5851] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... openat resumed>) = 4 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] newfstatat(4, "", [pid 5851] getdents64(3, [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] getdents64(4, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5849] getdents64(4, [pid 5848] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5847] <... openat resumed>) = 3 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] close(4 [pid 5850] newfstatat(AT_FDCWD, "./1/file0", [pid 5849] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] newfstatat(4, "", [pid 5847] newfstatat(3, "", [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] rmdir("./1/file0" [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] unlink("./1/binderfs" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(4, [pid 5847] getdents64(3, [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... unlink resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... openat resumed>) = 4 [pid 5848] getdents64(4, [pid 5847] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5850] newfstatat(4, "", [pid 5849] getdents64(3, [pid 5852] newfstatat(3, "", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 181.173816][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.173816][ T113] [ 181.205876][ T5850] [ 181.205876][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.205876][ T5850] [ 181.216761][ T5850] [ 181.216761][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.216761][ T5850] [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5849] close(3 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] close(4 [pid 5847] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5848] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] rmdir("./1/file0" [pid 5847] unlink("./1/binderfs" [pid 5852] getdents64(3, [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... close resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] getdents64(4, [pid 5849] rmdir("./1" [pid 5848] getdents64(3, [pid 5852] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5850] close(4 [pid 5848] close(3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5852] unlink("./1/binderfs" [pid 5850] rmdir("./1/file0" [pid 5849] mkdir("./2", 0777 [pid 5852] <... unlink resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] rmdir("./1" [pid 5849] <... mkdir resumed>) = 0 [pid 5852] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5850] getdents64(3, [pid 5848] <... rmdir resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] close(3 [pid 5848] mkdir("./2", 0777 [pid 5851] newfstatat(AT_FDCWD, "./1/file0", [pid 5850] <... close resumed>) = 0 [ 181.243642][ T5851] [ 181.243642][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.243642][ T5851] [ 181.255219][ T5851] [ 181.255219][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.255219][ T5851] [ 181.268594][ T5847] [ 181.268594][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.268594][ T5847] [ 181.279216][ T5847] [ 181.279216][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.279216][ T5847] [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] rmdir("./1" [pid 5849] <... ioctl resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... rmdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(4, "", [pid 5847] newfstatat(AT_FDCWD, "./1/file0", [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(4, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] close(4 [pid 5847] <... openat resumed>) = 4 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./1/file0") = 0 [pid 5847] newfstatat(4, "", [pid 5849] close(3 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./1") = 0 [pid 5851] mkdir("./2", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./1/file0" [pid 5850] mkdir("./2", 0777) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] getdents64(3, [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5847] close(3 [pid 5852] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] <... close resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5847] rmdir("./1" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./1/file0", [pid 5848] close(3 [pid 5847] <... rmdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] mkdir("./2", 0777) = 0 [ 181.293326][ T5852] [ 181.293326][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.293326][ T5852] [ 181.310641][ T5852] [ 181.310641][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.310641][ T5852] [pid 5852] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] <... openat resumed>) = 3 [pid 5852] newfstatat(4, "", [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5852] getdents64(4, [pid 5847] close(3 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./1/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./1") = 0 [pid 5852] mkdir("./2", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5868 ./strace-static-x86_64: Process 5868 attached [pid 5868] set_robust_list(0x555584a2d760, 24) = 0 [pid 5868] chdir("./2") = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5868] setpgid(0, 0) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3executing program ) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5868] write(1, "executing program\n", 18) = 18 [pid 5868] memfd_create("syzkaller", 0) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached [pid 5869] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5869 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5869] chdir("./2") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... close resumed>) = 0 [pid 5869] <... prctl resumed>) = 0 [pid 5869] setpgid(0, 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5869] <... setpgid resumed>) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5870 attached ) = 3 [pid 5869] write(3, "1000", 4 [pid 5870] set_robust_list(0x555584a2d760, 24) = 0 [pid 5869] <... write resumed>) = 4 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5870 [pid 5869] close(3 [pid 5870] chdir("./2" [pid 5869] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5870] <... chdir resumed>) = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] setpgid(0, 0) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5869] symlink("/dev/binderfs", "./binderfs" [pid 5870] <... openat resumed>) = 3 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5871 [pid 5870] write(3, "1000", 4) = 4 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5870] write(1, "executing program\n", 18) = 18 ./strace-static-x86_64: Process 5871 attached [pid 5870] memfd_create("syzkaller", 0 [pid 5869] <... symlink resumed>) = 0 [pid 5869] write(1, "executing program\n", 18executing program [pid 5870] <... memfd_create resumed>) = 3 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5869] <... write resumed>) = 18 [pid 5870] <... mmap resumed>) = 0x7feda9000000 [pid 5871] set_robust_list(0x555584a2d760, 24 [pid 5869] memfd_create("syzkaller", 0 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5871] chdir("./2" [pid 5869] <... memfd_create resumed>) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5871] <... chdir resumed>) = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5869] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5871] <... prctl resumed>) = 0 [pid 5871] setpgid(0, 0) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] write(3, "1000", 4) = 4 [pid 5871] close(3 [pid 5852] <... close resumed>) = 0 [pid 5871] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5871] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5872 attached ) = 0 [pid 5872] set_robust_list(0x555584a2d760, 24 executing program [pid 5871] write(1, "executing program\n", 18 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5872 [pid 5872] <... set_robust_list resumed>) = 0 [pid 5871] <... write resumed>) = 18 ./strace-static-x86_64: Process 5873 attached [pid 5872] chdir("./2" [pid 5871] memfd_create("syzkaller", 0 [pid 5872] <... chdir resumed>) = 0 [pid 5871] <... memfd_create resumed>) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5873 [pid 5872] setpgid(0, 0 [pid 5873] set_robust_list(0x555584a2d760, 24 [pid 5872] <... setpgid resumed>) = 0 [pid 5871] <... mmap resumed>) = 0x7feda9000000 [pid 5873] <... set_robust_list resumed>) = 0 [pid 5873] chdir("./2" [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5873] <... chdir resumed>) = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0 [pid 5872] <... openat resumed>) = 3 executing program [pid 5873] <... setpgid resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5872] write(1, "executing program\n", 18) = 18 [pid 5872] memfd_create("syzkaller", 0) = 3 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5868] <... write resumed>) = 16777216 [pid 5868] munmap(0x7feda9000000, 138412032 [pid 5870] <... write resumed>) = 16777216 [pid 5868] <... munmap resumed>) = 0 [pid 5870] munmap(0x7feda9000000, 138412032 [pid 5869] <... write resumed>) = 16777216 [pid 5868] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5869] munmap(0x7feda9000000, 138412032 [pid 5868] <... openat resumed>) = 4 [pid 5873] <... write resumed>) = 16777216 [pid 5870] <... munmap resumed>) = 0 [pid 5869] <... munmap resumed>) = 0 [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5873] munmap(0x7feda9000000, 138412032 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5868] <... ioctl resumed>) = 0 [pid 5869] <... openat resumed>) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5873] <... munmap resumed>) = 0 [pid 5870] <... openat resumed>) = 4 [ 182.496421][ T5868] loop2: detected capacity change from 0 to 32768 [ 182.512613][ T5869] loop4: detected capacity change from 0 to 32768 [pid 5868] close(3 [pid 5870] ioctl(4, LOOP_SET_FD, 3 [pid 5869] close(3 [pid 5868] <... close resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5869] <... close resumed>) = 0 [pid 5869] close(4 [pid 5873] <... openat resumed>) = 4 [pid 5870] <... ioctl resumed>) = 0 [pid 5869] <... close resumed>) = 0 [pid 5868] close(4 [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5870] close(3 [pid 5868] <... close resumed>) = 0 [pid 5869] mkdir("./file0", 0777) = 0 [pid 5873] <... ioctl resumed>) = 0 [pid 5870] <... close resumed>) = 0 [pid 5869] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5873] close(3 [pid 5872] <... write resumed>) = 16777216 [pid 5871] <... write resumed>) = 16777216 [pid 5870] close(4 [pid 5868] mkdir("./file0", 0777 [pid 5873] <... close resumed>) = 0 [ 182.540630][ T5870] loop0: detected capacity change from 0 to 32768 [ 182.550852][ T5873] loop1: detected capacity change from 0 to 32768 [pid 5872] munmap(0x7feda9000000, 138412032 [pid 5871] munmap(0x7feda9000000, 138412032 [pid 5870] <... close resumed>) = 0 [pid 5873] close(4 [pid 5870] mkdir("./file0", 0777) = 0 [pid 5868] <... mkdir resumed>) = 0 [pid 5870] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5868] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5873] <... close resumed>) = 0 [pid 5873] mkdir("./file0", 0777) = 0 [ 182.583152][ T5869] [ 182.583152][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.583152][ T5869] [ 182.617044][ T5870] [ 182.617044][ T5870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.617044][ T5870] [ 182.629211][ T5868] [pid 5873] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5871] <... munmap resumed>) = 0 [pid 5872] <... munmap resumed>) = 0 [pid 5868] <... mount resumed>) = 0 [pid 5870] <... mount resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5868] <... openat resumed>) = 3 [pid 5870] <... openat resumed>) = 3 [pid 5868] chdir("./file0" [pid 5872] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5870] chdir("./file0" [pid 5868] <... chdir resumed>) = 0 [pid 5870] <... chdir resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5868] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5870] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5868] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5872] <... openat resumed>) = 4 [pid 5871] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5870] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5869] <... mount resumed>) = 0 [ 182.629211][ T5868] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.629211][ T5868] [ 182.643266][ T5873] [ 182.643266][ T5873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.643266][ T5873] [ 182.669210][ T5868] [ 182.669210][ T5868] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.669210][ T5868] [pid 5872] ioctl(4, LOOP_SET_FD, 3 [pid 5871] <... openat resumed>) = 4 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5871] ioctl(4, LOOP_SET_FD, 3 [pid 5869] <... openat resumed>) = 3 [pid 5869] chdir("./file0") = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5869] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5873] <... mount resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5873] chdir("./file0") = 0 [ 182.671830][ T5872] loop5: detected capacity change from 0 to 32768 [ 182.681978][ T5870] [ 182.681978][ T5870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.681978][ T5870] [ 182.690390][ T5871] loop3: detected capacity change from 0 to 32768 [ 182.711105][ T5869] [ 182.711105][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.711105][ T5869] [ 182.712156][ T5868] [ 182.712156][ T5868] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.712156][ T5868] [pid 5873] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5873] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5872] <... ioctl resumed>) = 0 [pid 5872] close(3) = 0 [pid 5872] close(4) = 0 [pid 5872] mkdir("./file0", 0777) = 0 [pid 5871] <... ioctl resumed>) = 0 [pid 5872] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5871] close(3) = 0 [pid 5871] close(4) = 0 [ 182.729059][ T5873] [ 182.729059][ T5873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.729059][ T5873] [ 182.735795][ T5870] [ 182.735795][ T5870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.735795][ T5870] [ 182.748319][ T5869] [ 182.748319][ T5869] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.748319][ T5869] [ 182.770767][ T5872] [ 182.770767][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.770767][ T5872] [pid 5871] mkdir("./file0", 0777) = 0 [pid 5871] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5870] <... lsetxattr resumed>) = 0 [pid 5869] <... lsetxattr resumed>) = 0 [pid 5868] <... lsetxattr resumed>) = 0 [pid 5873] <... lsetxattr resumed>) = 0 [pid 5872] <... mount resumed>) = 0 [pid 5870] exit_group(0 [pid 5869] exit_group(0 [pid 5868] exit_group(0 [pid 5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5870] <... exit_group resumed>) = ? [pid 5869] <... exit_group resumed>) = ? [pid 5868] <... exit_group resumed>) = ? [ 182.784715][ T5873] [ 182.784715][ T5873] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.784715][ T5873] [ 182.797805][ T113] [ 182.797805][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.797805][ T113] [ 182.809149][ T112] [ 182.809149][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.809149][ T112] [ 182.823457][ T112] [ 182.823457][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.823457][ T112] [pid 5873] exit_group(0 [pid 5872] <... openat resumed>) = 3 [pid 5870] +++ exited with 0 +++ [pid 5869] +++ exited with 0 +++ [pid 5868] +++ exited with 0 +++ [pid 5873] <... exit_group resumed>) = ? [pid 5872] chdir("./file0" [pid 5871] <... mount resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5873] +++ exited with 0 +++ [pid 5872] <... chdir resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5872] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5871] <... openat resumed>) = 3 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5872] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5871] chdir("./file0" [pid 5851] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5871] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... restart_syscall resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5871] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 182.835065][ T5871] [ 182.835065][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.835065][ T5871] [ 182.835506][ T113] [ 182.835506][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.835506][ T113] [ 182.869910][ T5872] [ 182.869910][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.869910][ T5872] [ 182.880868][ T5872] [pid 5851] unlink("./2/binderfs" [pid 5848] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... unlink resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./2/binderfs") = 0 [pid 5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] <... lsetxattr resumed>) = 0 [pid 5871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] <... openat resumed>) = 3 [pid 5847] <... openat resumed>) = 3 [ 182.880868][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.880868][ T5872] [ 182.892863][ T5851] [ 182.892863][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.892863][ T5851] [ 182.896257][ T112] [ 182.896257][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.896257][ T112] [ 182.904180][ T5848] [ 182.904180][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.904180][ T5848] [ 182.924428][ T5851] [ 182.924428][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.924428][ T5851] [pid 5849] newfstatat(3, "", [pid 5847] newfstatat(3, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5847] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5849] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./2/binderfs" [pid 5849] unlink("./2/binderfs" [pid 5871] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5872] exit_group(0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 5872] <... exit_group resumed>) = ? [pid 5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5872] +++ exited with 0 +++ [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(4, [pid 5852] <... restart_syscall resumed>) = 0 [ 182.925881][ T5848] [ 182.925881][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.925881][ T5848] [ 182.948855][ T5871] [ 182.948855][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.948855][ T5871] [ 182.959509][ T5871] [ 182.959509][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.959509][ T5871] [ 182.970772][ T5849] [ 182.970772][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.970772][ T5849] [ 182.972054][ T5847] [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5871] <... lsetxattr resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./2/file0" [pid 5871] exit_group(0 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 5871] <... exit_group resumed>) = ? [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5871] +++ exited with 0 +++ [pid 5848] close(3) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] rmdir("./2" [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./3", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5851] close(4 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./2/binderfs") = 0 [pid 5850] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... close resumed>) = 0 [pid 5852] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] rmdir("./2/file0" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... rmdir resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] getdents64(3, [pid 5851] close(3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... close resumed>) = 0 [pid 5852] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] rmdir("./2" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... rmdir resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5851] mkdir("./3", 0777 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 182.972054][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.972054][ T5847] [ 182.981996][ T113] [ 182.981996][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.981996][ T113] [ 183.004232][ T5849] [ 183.004232][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.004232][ T5849] [ 183.025422][ T5847] [ 183.025422][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.025422][ T5847] [pid 5852] unlink("./2/binderfs" [pid 5851] <... mkdir resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] <... umount2 resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] close(3 [pid 5849] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./2/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./2") = 0 [pid 5850] mkdir("./3", 0777 [pid 5849] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] <... mkdir resumed>) = 0 [ 183.050221][ T5850] [ 183.050221][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.050221][ T5850] [ 183.060459][ T5852] [ 183.060459][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.060459][ T5852] [ 183.070020][ T5850] [ 183.070020][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.070020][ T5850] [ 183.075112][ T5852] [ 183.075112][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.075112][ T5852] [pid 5847] <... umount2 resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] newfstatat(4, "", [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(4, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./2/file0" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... rmdir resumed>) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./2/file0" [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, [pid 5847] close(3) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] rmdir("./2" [pid 5849] close(3 [pid 5847] <... rmdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./2" [pid 5852] <... umount2 resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5847] mkdir("./3", 0777 [pid 5852] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] mkdir("./3", 0777 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5849] <... mkdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] newfstatat(AT_FDCWD, "./2/file0", [pid 5849] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] close(3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./2/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./2" [pid 5848] <... close resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./3", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x555584a2d760, 24) = 0 [pid 5874] chdir("./3") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5874 executing program [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached , child_tidptr=0x555584a2d750) = 5875 [pid 5875] set_robust_list(0x555584a2d760, 24) = 0 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5876 attached [pid 5875] chdir("./3") = 0 [pid 5876] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5876 [pid 5847] <... close resumed>) = 0 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached [pid 5876] chdir("./3" [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5877] set_robust_list(0x555584a2d760, 24 [pid 5876] <... chdir resumed>) = 0 [pid 5875] <... prctl resumed>) = 0 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5877 [pid 5877] chdir("./3" [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5875] setpgid(0, 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5877] <... chdir resumed>) = 0 [pid 5876] <... prctl resumed>) = 0 [pid 5875] <... setpgid resumed>) = 0 [pid 5876] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5878 attached [pid 5876] write(3, "1000", 4 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5876] <... write resumed>) = 4 [pid 5875] write(3, "1000", 4 [pid 5878] set_robust_list(0x555584a2d760, 24 [pid 5877] <... prctl resumed>) = 0 [pid 5876] close(3 [pid 5875] <... write resumed>) = 4 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5878 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5877] setpgid(0, 0 [pid 5876] <... close resumed>) = 0 [pid 5875] close(3 [pid 5877] <... setpgid resumed>) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs" [pid 5878] chdir("./3" [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5876] <... symlink resumed>) = 0 [pid 5875] <... close resumed>) = 0 [pid 5878] <... chdir resumed>) = 0 executing program [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5877] <... openat resumed>) = 3 [pid 5876] write(1, "executing program\n", 18 [pid 5875] symlink("/dev/binderfs", "./binderfs"executing program [pid 5878] <... prctl resumed>) = 0 [pid 5877] write(3, "1000", 4 [pid 5876] <... write resumed>) = 18 [pid 5875] <... symlink resumed>) = 0 [pid 5878] setpgid(0, 0 [pid 5877] <... write resumed>) = 4 [pid 5876] memfd_create("syzkaller", 0 [pid 5875] write(1, "executing program\n", 18 [pid 5878] <... setpgid resumed>) = 0 [pid 5877] close(3 [pid 5876] <... memfd_create resumed>) = 3 [pid 5875] <... write resumed>) = 18 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5877] <... close resumed>) = 0 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 executing program [pid 5877] symlink("/dev/binderfs", "./binderfs" [pid 5876] <... mmap resumed>) = 0x7feda9000000 [pid 5875] memfd_create("syzkaller", 0 [pid 5878] <... openat resumed>) = 3 [pid 5877] <... symlink resumed>) = 0 [pid 5878] write(3, "1000", 4 [pid 5877] write(1, "executing program\n", 18 [pid 5878] <... write resumed>) = 4 [pid 5877] <... write resumed>) = 18 [pid 5878] close(3) = 0 [pid 5877] memfd_create("syzkaller", 0 [pid 5875] <... memfd_create resumed>) = 3 [pid 5852] <... close resumed>) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs" [pid 5877] <... memfd_create resumed>) = 3 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached [pid 5878] <... symlink resumed>) = 0 [pid 5879] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5879 [pid 5879] <... set_robust_list resumed>) = 0 [pid 5879] chdir("./3") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5878] write(1, "executing program\n", 18executing program ) = 18 [pid 5879] write(3, "1000", 4) = 4 [pid 5878] memfd_create("syzkaller", 0 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5879] write(1, "executing program\n", 18) = 18 [pid 5879] memfd_create("syzkaller", 0) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5878] <... memfd_create resumed>) = 3 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5874] <... write resumed>) = 16777216 [pid 5874] munmap(0x7feda9000000, 138412032) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5874] close(3) = 0 [pid 5874] close(4) = 0 [pid 5874] mkdir("./file0", 0777) = 0 [ 184.073070][ T5874] loop1: detected capacity change from 0 to 32768 [pid 5874] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5874] chdir("./file0") = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 184.164093][ T5874] [ 184.164093][ T5874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.164093][ T5874] [ 184.200334][ T5874] [ 184.200334][ T5874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.200334][ T5874] [pid 5874] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5879] <... write resumed>) = 16777216 [pid 5879] munmap(0x7feda9000000, 138412032 [pid 5874] <... lsetxattr resumed>) = 0 [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5876] <... write resumed>) = 16777216 [pid 5876] munmap(0x7feda9000000, 138412032 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, [pid 5879] <... munmap resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./3/binderfs") = 0 [ 184.233168][ T5874] [ 184.233168][ T5874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.233168][ T5874] [ 184.271057][ T112] [ 184.271057][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.271057][ T112] [pid 5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5879] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5879] ioctl(4, LOOP_SET_FD, 3 [pid 5876] <... munmap resumed>) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3 [pid 5879] <... ioctl resumed>) = 0 [pid 5876] <... ioctl resumed>) = 0 [pid 5879] close(3 [pid 5875] <... write resumed>) = 16777216 [pid 5879] <... close resumed>) = 0 [pid 5876] close(3 [pid 5875] munmap(0x7feda9000000, 138412032 [pid 5879] close(4 [pid 5876] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5879] <... close resumed>) = 0 [pid 5878] <... write resumed>) = 16777216 [pid 5876] close(4 [pid 5879] mkdir("./file0", 0777 [pid 5876] <... close resumed>) = 0 [pid 5879] <... mkdir resumed>) = 0 [pid 5878] munmap(0x7feda9000000, 138412032 [pid 5876] mkdir("./file0", 0777 [pid 5879] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5876] <... mkdir resumed>) = 0 [pid 5876] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 184.300803][ T5848] [ 184.300803][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.300803][ T5848] [ 184.317175][ T5879] loop5: detected capacity change from 0 to 32768 [ 184.326399][ T5848] [ 184.326399][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.326399][ T5848] [ 184.340220][ T5876] loop3: detected capacity change from 0 to 32768 [pid 5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5877] <... write resumed>) = 16777216 [pid 5848] newfstatat(4, "", [pid 5875] <... munmap resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./3/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./3" [pid 5877] munmap(0x7feda9000000, 138412032 [pid 5875] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5875] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./4", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5878] <... munmap resumed>) = 0 [pid 5877] <... munmap resumed>) = 0 [pid 5875] <... ioctl resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5876] <... mount resumed>) = 0 [pid 5875] close(3 [pid 5878] <... openat resumed>) = 4 [pid 5877] <... openat resumed>) = 4 [pid 5875] <... close resumed>) = 0 [ 184.413410][ T5876] [ 184.413410][ T5876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.413410][ T5876] [ 184.420240][ T5875] loop4: detected capacity change from 0 to 32768 [ 184.450907][ T5879] [ 184.450907][ T5879] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.450907][ T5879] [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5877] ioctl(4, LOOP_SET_FD, 3 [pid 5876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5875] close(4 [pid 5876] <... openat resumed>) = 3 [pid 5875] <... close resumed>) = 0 [pid 5876] chdir("./file0" [pid 5875] mkdir("./file0", 0777 [pid 5876] <... chdir resumed>) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5875] <... mkdir resumed>) = 0 [pid 5875] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5876] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5876] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5877] <... ioctl resumed>) = 0 [pid 5879] <... mount resumed>) = 0 [pid 5878] <... ioctl resumed>) = 0 [pid 5877] close(3 [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5878] close(3 [pid 5877] <... close resumed>) = 0 [pid 5879] <... openat resumed>) = 3 [pid 5878] <... close resumed>) = 0 [pid 5877] close(4 [pid 5879] chdir("./file0" [pid 5878] close(4 [pid 5877] <... close resumed>) = 0 [pid 5879] <... chdir resumed>) = 0 [pid 5878] <... close resumed>) = 0 [pid 5877] mkdir("./file0", 0777 [pid 5879] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5877] <... mkdir resumed>) = 0 [ 184.478835][ T5877] loop0: detected capacity change from 0 to 32768 [ 184.485460][ T5878] loop2: detected capacity change from 0 to 32768 [ 184.495180][ T5876] [ 184.495180][ T5876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.495180][ T5876] [ 184.504064][ T5875] [ 184.504064][ T5875] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.504064][ T5875] [pid 5879] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5877] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5875] <... mount resumed>) = 0 [pid 5878] mkdir("./file0", 0777) = 0 [pid 5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5878] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5875] <... openat resumed>) = 3 [pid 5875] chdir("./file0") = 0 [ 184.532421][ T5879] [ 184.532421][ T5879] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.532421][ T5879] [ 184.536511][ T5877] [ 184.536511][ T5877] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.536511][ T5877] [ 184.554447][ T5876] [ 184.554447][ T5876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.554447][ T5876] [ 184.572634][ T5879] [ 184.572634][ T5879] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5875] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5876] <... lsetxattr resumed>) = 0 [pid 5875] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5876] exit_group(0 [pid 5875] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5879] <... lsetxattr resumed>) = 0 [pid 5879] exit_group(0) = ? [pid 5879] +++ exited with 0 +++ [pid 5876] <... exit_group resumed>) = ? [pid 5876] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [ 184.572634][ T5879] [ 184.583930][ T112] [ 184.583930][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.583930][ T112] [ 184.585964][ T5878] [ 184.585964][ T5878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.585964][ T5878] [ 184.605906][ T5875] [ 184.605906][ T5875] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.605906][ T5875] [ 184.618911][ T113] [ 184.618911][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.618911][ T113] [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5877] <... mount resumed>) = 0 [pid 5877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5877] <... openat resumed>) = 3 [pid 5877] chdir("./file0") = 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5877] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5875] <... lsetxattr resumed>) = 0 [pid 5878] <... mount resumed>) = 0 [pid 5875] exit_group(0 [pid 5852] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5875] <... exit_group resumed>) = ? [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] <... openat resumed>) = 3 [pid 5878] chdir("./file0") = 0 [pid 5875] +++ exited with 0 +++ [pid 5852] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [ 184.632707][ T5875] [ 184.632707][ T5875] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.632707][ T5875] [ 184.646017][ T5877] [ 184.646017][ T5877] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.646017][ T5877] [ 184.656870][ T113] [ 184.656870][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.656870][ T113] [pid 5878] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5877] <... lsetxattr resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5878] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] newfstatat(3, "", [pid 5850] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5880 attached [pid 5878] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5877] exit_group(0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5880] set_robust_list(0x555584a2d760, 24 [pid 5877] <... exit_group resumed>) = ? [pid 5880] <... set_robust_list resumed>) = 0 [pid 5880] chdir("./4" [pid 5877] +++ exited with 0 +++ [pid 5880] <... chdir resumed>) = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] getdents64(3, [pid 5850] newfstatat(3, "", [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5880 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5880] write(3, "1000", 4 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5880] <... write resumed>) = 4 [pid 5850] getdents64(3, [pid 5880] close(3 [ 184.686548][ T5877] [ 184.686548][ T5877] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.686548][ T5877] [ 184.697733][ T113] [ 184.697733][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.697733][ T113] [ 184.710324][ T5878] [ 184.710324][ T5878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.710324][ T5878] [ 184.721598][ T5878] [ 184.721598][ T5878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.721598][ T5878] [ 184.732573][ T113] [pid 5852] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5880] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5880] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5852] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] write(1, "executing program\n", 18 [pid 5878] <... lsetxattr resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5880] <... write resumed>) = 18 [pid 5878] exit_group(0 [pid 5880] memfd_create("syzkaller", 0 [pid 5878] <... exit_group resumed>) = ? [pid 5852] unlink("./3/binderfs" [pid 5851] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5880] <... memfd_create resumed>) = 3 [pid 5852] <... unlink resumed>) = 0 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5878] +++ exited with 0 +++ [pid 5851] newfstatat(3, "", [pid 5850] unlink("./3/binderfs" [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5849] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./3/binderfs") = 0 [pid 5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(3, [pid 5850] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 184.732573][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.732573][ T113] [ 184.749171][ T5852] [ 184.749171][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.749171][ T5852] [ 184.762163][ T5852] [ 184.762163][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.762163][ T5852] [ 184.774474][ T5849] [ 184.774474][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.774474][ T5849] [pid 5847] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] unlink("./3/binderfs" [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... unlink resumed>) = 0 [pid 5847] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./3/binderfs") = 0 [ 184.785715][ T5849] [ 184.785715][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.785715][ T5849] [ 184.797667][ T5850] [ 184.797667][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.797667][ T5850] [ 184.808659][ T5850] [ 184.808659][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.808659][ T5850] [ 184.825162][ T5851] [ 184.825162][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.825162][ T5851] [pid 5847] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./3/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./3") = 0 [pid 5850] mkdir("./4", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5852] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./3/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./3") = 0 [pid 5849] mkdir("./4", 0777 [pid 5852] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", [pid 5849] <... mkdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... openat resumed>) = 3 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5852] <... close resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5852] rmdir("./3/file0" [pid 5849] close(3 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./3" [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... rmdir resumed>) = 0 [ 184.835868][ T5847] [ 184.835868][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.835868][ T5847] [ 184.852603][ T5847] [ 184.852603][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.852603][ T5847] [ 184.871237][ T5851] [ 184.871237][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.871237][ T5851] [pid 5852] mkdir("./4", 0777) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] <... umount2 resumed>) = 0 [pid 5847] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... ioctl resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./3/file0", [pid 5851] newfstatat(AT_FDCWD, "./3/file0", [pid 5852] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 4 [pid 5851] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] newfstatat(4, "", [pid 5851] getdents64(4, [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./3/file0" [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] <... rmdir resumed>) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5847] close(4) = 0 [pid 5851] rmdir("./3" [pid 5847] rmdir("./3/file0" [pid 5851] <... rmdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] mkdir("./4", 0777 [pid 5847] getdents64(3, [pid 5851] <... mkdir resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./3") = 0 [pid 5847] mkdir("./4", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5881 ./strace-static-x86_64: Process 5881 attached [pid 5881] set_robust_list(0x555584a2d760, 24) = 0 [pid 5881] chdir("./4") = 0 [pid 5850] <... close resumed>) = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 [pid 5881] close(3 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5881] <... close resumed>) = 0 [pid 5881] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5882 [pid 5881] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5882 attached executing program [pid 5881] write(1, "executing program\n", 18 [pid 5847] <... close resumed>) = 0 [pid 5881] <... write resumed>) = 18 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5882] set_robust_list(0x555584a2d760, 24) = 0 [pid 5882] chdir("./4") = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5882] setpgid(0, 0) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5881] memfd_create("syzkaller", 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5883 [pid 5882] <... openat resumed>) = 3 [pid 5881] <... memfd_create resumed>) = 3 [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] write(3, "1000", 4 [pid 5881] <... mmap resumed>) = 0x7feda9000000 [pid 5882] <... write resumed>) = 4 [pid 5882] close(3) = 0 [pid 5882] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5882] write(1, "executing program\n", 18) = 18 [pid 5882] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5883 attached ) = 3 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5883] set_robust_list(0x555584a2d760, 24executing program ) = 0 [pid 5883] chdir("./4") = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5883] <... openat resumed>) = 3 [pid 5883] write(3, "1000", 4 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5883] <... write resumed>) = 4 [pid 5883] close(3 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5884 executing program [pid 5883] <... close resumed>) = 0 ./strace-static-x86_64: Process 5884 attached [pid 5883] symlink("/dev/binderfs", "./binderfs" [pid 5884] set_robust_list(0x555584a2d760, 24 [pid 5883] <... symlink resumed>) = 0 [pid 5884] <... set_robust_list resumed>) = 0 [pid 5883] write(1, "executing program\n", 18 [pid 5884] chdir("./4" [pid 5883] <... write resumed>) = 18 [pid 5884] <... chdir resumed>) = 0 [pid 5883] memfd_create("syzkaller", 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5883] <... memfd_create resumed>) = 3 [pid 5884] <... prctl resumed>) = 0 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5884] setpgid(0, 0 [pid 5883] <... mmap resumed>) = 0x7feda9000000 [pid 5884] <... setpgid resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5885 [pid 5885] set_robust_list(0x555584a2d760, 24) = 0 [pid 5885] chdir("./4" [pid 5884] <... openat resumed>) = 3 [pid 5885] <... chdir resumed>) = 0 [pid 5884] write(3, "1000", 4 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5884] <... write resumed>) = 4 [pid 5885] <... prctl resumed>) = 0 [pid 5885] setpgid(0, 0 [pid 5884] close(3 [pid 5885] <... setpgid resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5885] write(1, "executing program\n", 18) = 18 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5884] <... close resumed>) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5884] write(1, "executing program\n", 18) = 18 [pid 5884] memfd_create("syzkaller", 0) = 3 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5880] <... write resumed>) = 16777216 [pid 5880] munmap(0x7feda9000000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5880] <... openat resumed>) = 4 [pid 5880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] close(3) = 0 [pid 5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5880] close(4) = 0 [ 185.588448][ T5880] loop1: detected capacity change from 0 to 32768 [pid 5880] mkdir("./file0", 0777) = 0 [pid 5880] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 185.676991][ T5880] [ 185.676991][ T5880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.676991][ T5880] [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5880] <... mount resumed>) = 0 [pid 5880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file0") = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5880] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5880] exit_group(0) = ? [pid 5880] +++ exited with 0 +++ [ 185.761134][ T5880] [ 185.761134][ T5880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.761134][ T5880] [ 185.793505][ T5880] [ 185.793505][ T5880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.793505][ T5880] [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./4/binderfs") = 0 [ 185.841141][ T112] [ 185.841141][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.841141][ T112] [pid 5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5881] <... write resumed>) = 16777216 [pid 5885] <... write resumed>) = 16777216 [pid 5885] munmap(0x7feda9000000, 138412032 [pid 5881] munmap(0x7feda9000000, 138412032 [pid 5885] <... munmap resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 185.931250][ T5848] [ 185.931250][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.931250][ T5848] [ 185.970787][ T5848] [ 185.970787][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.970787][ T5848] [pid 5885] ioctl(4, LOOP_SET_FD, 3 [pid 5881] <... munmap resumed>) = 0 [pid 5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] newfstatat(AT_FDCWD, "./4/file0", [pid 5881] <... openat resumed>) = 4 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5881] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./4/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./4") = 0 [pid 5848] mkdir("./5", 0777) = 0 [pid 5885] <... ioctl resumed>) = 0 [pid 5885] close(3) = 0 [pid 5885] close(4) = 0 [pid 5881] <... ioctl resumed>) = 0 [pid 5885] mkdir("./file0", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5885] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5882] <... write resumed>) = 16777216 [ 186.009047][ T5885] loop4: detected capacity change from 0 to 32768 [ 186.018866][ T5881] loop5: detected capacity change from 0 to 32768 [pid 5881] close(3) = 0 [pid 5882] munmap(0x7feda9000000, 138412032 [pid 5881] close(4 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5881] <... close resumed>) = 0 [pid 5881] mkdir("./file0", 0777 [pid 5885] <... mount resumed>) = 0 [pid 5883] <... write resumed>) = 16777216 [pid 5882] <... munmap resumed>) = 0 [pid 5881] <... mkdir resumed>) = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5881] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5885] <... openat resumed>) = 3 [pid 5885] chdir("./file0") = 0 [ 186.056849][ T5885] [ 186.056849][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.056849][ T5885] [pid 5885] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5883] munmap(0x7feda9000000, 138412032 [pid 5885] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5885] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5882] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5884] <... write resumed>) = 16777216 [pid 5881] <... mount resumed>) = 0 [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 186.106890][ T5881] [ 186.106890][ T5881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.106890][ T5881] [ 186.124573][ T5885] [ 186.124573][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.124573][ T5885] [ 186.149262][ T5882] loop3: detected capacity change from 0 to 32768 [pid 5881] chdir("./file0" [pid 5884] munmap(0x7feda9000000, 138412032 [pid 5881] <... chdir resumed>) = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5883] <... munmap resumed>) = 0 [pid 5881] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5881] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5883] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5883] ioctl(4, LOOP_SET_FD, 3 [pid 5882] <... ioctl resumed>) = 0 [pid 5882] close(3) = 0 [pid 5882] close(4 [pid 5884] <... munmap resumed>) = 0 [pid 5882] <... close resumed>) = 0 [ 186.157884][ T5885] [ 186.157884][ T5885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.157884][ T5885] [ 186.175992][ T5881] [ 186.175992][ T5881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.175992][ T5881] [ 186.181057][ T5883] loop0: detected capacity change from 0 to 32768 [ 186.199067][ T5881] [ 186.199067][ T5881] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5885] <... lsetxattr resumed>) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5883] <... ioctl resumed>) = 0 [pid 5882] mkdir("./file0", 0777 [pid 5881] <... lsetxattr resumed>) = 0 [pid 5884] <... openat resumed>) = 4 [pid 5885] exit_group(0 [pid 5884] ioctl(4, LOOP_SET_FD, 3 [pid 5883] close(3 [pid 5882] <... mkdir resumed>) = 0 [pid 5881] exit_group(0) = ? [pid 5883] <... close resumed>) = 0 [pid 5885] <... exit_group resumed>) = ? [pid 5884] <... ioctl resumed>) = 0 [pid 5883] close(4 [pid 5881] +++ exited with 0 +++ [pid 5883] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5883] mkdir("./file0", 0777 [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5884] close(3) = 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5884] close(4 [pid 5883] <... mkdir resumed>) = 0 [pid 5882] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5885] +++ exited with 0 +++ [pid 5884] <... close resumed>) = 0 [pid 5883] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 186.199067][ T5881] [ 186.218370][ T113] [ 186.218370][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.218370][ T113] [ 186.232173][ T112] [ 186.232173][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.232173][ T112] [ 186.243461][ T5884] loop2: detected capacity change from 0 to 32768 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] mkdir("./file0", 0777 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5884] <... mkdir resumed>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5884] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(3, "", [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] getdents64(3, [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 186.274935][ T5882] [ 186.274935][ T5882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.274935][ T5882] [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] getdents64(3, [pid 5882] <... mount resumed>) = 0 [pid 5852] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5883] <... mount resumed>) = 0 [pid 5882] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5851] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5883] <... openat resumed>) = 3 [pid 5882] chdir("./file0" [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5883] chdir("./file0" [pid 5882] <... chdir resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5883] <... chdir resumed>) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] unlink("./4/binderfs" [pid 5851] unlink("./4/binderfs" [pid 5884] <... mount resumed>) = 0 [pid 5883] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5882] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... unlink resumed>) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5883] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 186.315936][ T5883] [ 186.315936][ T5883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.315936][ T5883] [ 186.333993][ T5884] [ 186.333993][ T5884] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.333993][ T5884] [ 186.359467][ T5883] [pid 5884] <... openat resumed>) = 3 [pid 5883] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5882] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5884] chdir("./file0") = 0 [ 186.359467][ T5883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.359467][ T5883] [ 186.371850][ T5852] [ 186.371850][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.371850][ T5852] [ 186.373635][ T5882] [ 186.373635][ T5882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.373635][ T5882] [ 186.382453][ T5851] [ 186.382453][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.382453][ T5851] [ 186.393756][ T5883] [ 186.393756][ T5883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.393756][ T5883] [ 186.411558][ T5852] [pid 5884] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5884] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5883] <... lsetxattr resumed>) = 0 [pid 5883] exit_group(0) = ? [pid 5883] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5882] <... lsetxattr resumed>) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 186.411558][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.411558][ T5852] [ 186.416729][ T5882] [ 186.416729][ T5882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.416729][ T5882] [ 186.437890][ T5851] [ 186.437890][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.437890][ T5851] [ 186.449362][ T5884] [ 186.449362][ T5884] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.449362][ T5884] [ 186.460330][ T5884] [pid 5847] unlink("./4/binderfs") = 0 [pid 5847] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5884] <... lsetxattr resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5886 attached [pid 5884] exit_group(0 [pid 5882] exit_group(0 [pid 5852] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5886 [pid 5886] set_robust_list(0x555584a2d760, 24 [pid 5884] <... exit_group resumed>) = ? [pid 5882] <... exit_group resumed>) = ? [pid 5852] newfstatat(AT_FDCWD, "./4/file0", [pid 5886] <... set_robust_list resumed>) = 0 [pid 5884] +++ exited with 0 +++ [pid 5882] +++ exited with 0 +++ [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 186.460330][ T5884] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.460330][ T5884] [ 186.469146][ T112] [ 186.469146][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.469146][ T112] [ 186.484120][ T113] [ 186.484120][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.484120][ T113] [ 186.500197][ T5847] [ 186.500197][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.500197][ T5847] [ 186.500588][ T113] [pid 5852] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5886] chdir("./5" [pid 5851] <... umount2 resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... chdir resumed>) = 0 [pid 5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5852] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... restart_syscall resumed>) = 0 [pid 5886] <... prctl resumed>) = 0 [pid 5852] newfstatat(4, "", [pid 5851] newfstatat(AT_FDCWD, "./4/file0", [pid 5886] setpgid(0, 0) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] getdents64(4, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... umount2 resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5886] <... openat resumed>) = 3 [pid 5852] getdents64(4, [pid 5850] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5886] write(3, "1000", 4 [pid 5851] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... write resumed>) = 4 [pid 5852] close(4 [pid 5850] <... openat resumed>) = 3 [pid 5847] newfstatat(AT_FDCWD, "./4/file0", [pid 5886] close(3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5886] <... close resumed>) = 0 [pid 5847] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5886] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... symlink resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5886] write(1, "executing program\n", 18 [pid 5852] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5850] newfstatat(3, "", [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5886] <... write resumed>) = 18 [pid 5852] rmdir("./4/file0" [pid 5851] newfstatat(4, "", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] newfstatat(4, "", [pid 5886] memfd_create("syzkaller", 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5852] getdents64(3, [pid 5851] getdents64(4, [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] newfstatat(3, "", [pid 5847] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5886] <... memfd_create resumed>) = 3 [pid 5852] close(3 [pid 5850] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] getdents64(4, [pid 5886] <... mmap resumed>) = 0x7feda9000000 [pid 5852] rmdir("./4" [pid 5850] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5849] getdents64(3, [pid 5852] <... rmdir resumed>) = 0 [pid 5851] getdents64(4, [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] close(4) = 0 [pid 5851] rmdir("./4/file0" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... rmdir resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./4/binderfs" [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] mkdir("./5", 0777 [pid 5849] <... unlink resumed>) = 0 [pid 5847] close(4 [pid 5850] unlink("./4/binderfs" [ 186.500588][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.500588][ T113] [ 186.512636][ T5847] [ 186.512636][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.512636][ T5847] [pid 5851] getdents64(3, [pid 5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... mkdir resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5850] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] rmdir("./4/file0" [pid 5851] close(3 [pid 5847] <... rmdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5847] getdents64(3, [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./4") = 0 [pid 5851] mkdir("./5", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5847] close(3) = 0 [ 186.580132][ T5849] [ 186.580132][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.580132][ T5849] [ 186.591528][ T5850] [ 186.591528][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.591528][ T5850] [pid 5852] close(3 [pid 5847] rmdir("./4") = 0 [pid 5847] mkdir("./5", 0777) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... ioctl resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] close(3 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./4/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./4") = 0 [pid 5849] mkdir("./5", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 186.624080][ T5849] [ 186.624080][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.624080][ T5849] [ 186.644493][ T5850] [ 186.644493][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.644493][ T5850] [pid 5849] close(3 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./4/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./4") = 0 [pid 5850] mkdir("./5", 0777 [pid 5851] <... close resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5887 attached [pid 5887] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5887 [pid 5887] <... set_robust_list resumed>) = 0 [pid 5887] chdir("./5") = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] close(3 [pid 5887] <... prctl resumed>) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5887] write(1, "executing program\n", 18executing program ) = 18 [pid 5887] memfd_create("syzkaller", 0) = 3 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5888 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5888] set_robust_list(0x555584a2d760, 24) = 0 [pid 5888] chdir("./5" [pid 5847] <... close resumed>) = 0 [pid 5888] <... chdir resumed>) = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5889 [pid 5889] set_robust_list(0x555584a2d760, 24) = 0 [pid 5889] chdir("./5") = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5890 attached [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5888] <... prctl resumed>) = 0 [pid 5890] set_robust_list(0x555584a2d760, 24 [pid 5889] <... openat resumed>) = 3 [pid 5888] setpgid(0, 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5890 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5888] <... setpgid resumed>) = 0 executing program [pid 5890] chdir("./5" [pid 5889] write(3, "1000", 4) = 4 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] close(3) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 5888] <... openat resumed>) = 3 [pid 5889] <... symlink resumed>) = 0 [pid 5888] write(3, "1000", 4 [pid 5889] write(1, "executing program\n", 18 [pid 5888] <... write resumed>) = 4 [pid 5890] <... chdir resumed>) = 0 [pid 5889] <... write resumed>) = 18 [pid 5888] close(3 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5889] memfd_create("syzkaller", 0 [pid 5888] <... close resumed>) = 0 [pid 5889] <... memfd_create resumed>) = 3 [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5888] <... symlink resumed>) = 0 [pid 5890] <... prctl resumed>) = 0 executing program [pid 5888] write(1, "executing program\n", 18 [pid 5890] setpgid(0, 0 [pid 5889] <... mmap resumed>) = 0x7feda9000000 [pid 5890] <... setpgid resumed>) = 0 [pid 5888] <... write resumed>) = 18 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5888] memfd_create("syzkaller", 0) = 3 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5890] <... openat resumed>) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5890] write(1, "executing program\n", 18) = 18 [pid 5890] memfd_create("syzkaller", 0) = 3 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached , child_tidptr=0x555584a2d750) = 5891 [pid 5891] set_robust_list(0x555584a2d760, 24) = 0 [pid 5891] chdir("./5") = 0 [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5891] setpgid(0, 0) = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5891] <... openat resumed>) = 3 [pid 5891] write(3, "1000", 4) = 4 [pid 5891] close(3) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5891] write(1, "executing program\n", 18) = 18 [pid 5891] memfd_create("syzkaller", 0) = 3 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5886] <... write resumed>) = 16777216 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5886] munmap(0x7feda9000000, 138412032) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5886] close(3) = 0 [pid 5886] close(4) = 0 [pid 5886] mkdir("./file0", 0777) = 0 [ 187.418485][ T5886] loop1: detected capacity change from 0 to 32768 [pid 5886] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 187.483163][ T5886] [ 187.483163][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.483163][ T5886] [pid 5886] chdir("./file0") = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5886] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5886] <... lsetxattr resumed>) = 0 [ 187.548185][ T5886] [ 187.548185][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.548185][ T5886] [ 187.580442][ T5886] [ 187.580442][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.580442][ T5886] [pid 5886] exit_group(0) = ? [pid 5886] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5848] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./5/binderfs") = 0 [ 187.620151][ T113] [ 187.620151][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.620151][ T113] [pid 5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5887] <... write resumed>) = 16777216 [pid 5887] munmap(0x7feda9000000, 138412032 [pid 5888] <... write resumed>) = 16777216 [ 187.675236][ T5848] [ 187.675236][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.675236][ T5848] [ 187.710489][ T5848] [ 187.710489][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.710489][ T5848] [pid 5888] munmap(0x7feda9000000, 138412032 [pid 5889] <... write resumed>) = 16777216 [pid 5887] <... munmap resumed>) = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 5889] munmap(0x7feda9000000, 138412032 [pid 5887] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./5/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./5") = 0 [pid 5848] mkdir("./6", 0777) = 0 [pid 5890] <... write resumed>) = 16777216 [pid 5889] <... munmap resumed>) = 0 [pid 5887] ioctl(4, LOOP_SET_FD, 3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5890] munmap(0x7feda9000000, 138412032 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5887] <... ioctl resumed>) = 0 [pid 5889] <... openat resumed>) = 4 [pid 5887] close(3 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [pid 5888] <... munmap resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3 [pid 5887] close(4) = 0 [pid 5887] mkdir("./file0", 0777) = 0 [pid 5889] <... ioctl resumed>) = 0 [pid 5887] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5890] <... munmap resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5889] close(3 [pid 5890] <... openat resumed>) = 4 [pid 5889] <... close resumed>) = 0 [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5889] close(4) = 0 [ 187.789844][ T5887] loop4: detected capacity change from 0 to 32768 [ 187.816185][ T5888] loop5: detected capacity change from 0 to 32768 [ 187.816779][ T5889] loop2: detected capacity change from 0 to 32768 [pid 5888] <... ioctl resumed>) = 0 [pid 5889] mkdir("./file0", 0777 [pid 5888] close(3) = 0 [pid 5888] close(4 [pid 5889] <... mkdir resumed>) = 0 [pid 5888] <... close resumed>) = 0 [pid 5888] mkdir("./file0", 0777) = 0 [pid 5888] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5889] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5890] <... ioctl resumed>) = 0 [ 187.845527][ T5890] loop0: detected capacity change from 0 to 32768 [ 187.860395][ T5887] [ 187.860395][ T5887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.860395][ T5887] [ 187.881256][ T5888] [ 187.881256][ T5888] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.881256][ T5888] [ 187.883542][ T5889] [pid 5890] close(3) = 0 [pid 5890] close(4) = 0 [pid 5890] mkdir("./file0", 0777) = 0 [pid 5887] <... mount resumed>) = 0 [pid 5890] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5888] <... mount resumed>) = 0 [pid 5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5887] <... openat resumed>) = 3 [pid 5888] chdir("./file0" [pid 5887] chdir("./file0" [pid 5888] <... chdir resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5887] <... chdir resumed>) = 0 [pid 5888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5887] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5888] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 187.883542][ T5889] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.883542][ T5889] [ 187.922020][ T5888] [ 187.922020][ T5888] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.922020][ T5888] [ 187.933473][ T5887] [ 187.933473][ T5887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.933473][ T5887] [pid 5887] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5889] <... mount resumed>) = 0 [pid 5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5889] chdir("./file0") = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5887] <... lsetxattr resumed>) = 0 [pid 5889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 187.948332][ T5887] [ 187.948332][ T5887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.948332][ T5887] [ 187.972376][ T112] [ 187.972376][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.972376][ T112] [ 187.985225][ T5890] [ 187.985225][ T5890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.985225][ T5890] [ 187.989986][ T5888] [pid 5889] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5887] exit_group(0) = ? [pid 5890] <... mount resumed>) = 0 [pid 5890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5890] chdir("./file0") = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5887] +++ exited with 0 +++ [pid 5890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5890] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./5/binderfs") = 0 [ 187.989986][ T5888] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.989986][ T5888] [ 188.008105][ T5889] [ 188.008105][ T5889] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.008105][ T5889] [ 188.032465][ T5890] [ 188.032465][ T5890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.032465][ T5890] [pid 5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5891] <... write resumed>) = 16777216 [pid 5891] munmap(0x7feda9000000, 138412032 [pid 5888] <... lsetxattr resumed>) = 0 [pid 5888] exit_group(0) = ? [pid 5888] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [ 188.057968][ T5851] [ 188.057968][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.057968][ T5851] [ 188.068032][ T5889] [ 188.068032][ T5889] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.068032][ T5889] [ 188.081626][ T113] [ 188.081626][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.081626][ T113] [ 188.092988][ T5890] [ 188.092988][ T5890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.092988][ T5890] [pid 5852] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 5890] <... lsetxattr resumed>) = 0 [pid 5891] <... munmap resumed>) = 0 [pid 5890] exit_group(0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5890] <... exit_group resumed>) = ? [pid 5889] <... lsetxattr resumed>) = 0 [pid 5852] getdents64(3, [pid 5891] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5890] +++ exited with 0 +++ [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5891] <... openat resumed>) = 4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] ioctl(4, LOOP_SET_FD, 3 [pid 5889] exit_group(0 [pid 5852] newfstatat(AT_FDCWD, "./5/binderfs", [ 188.112684][ T5851] [ 188.112684][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.112684][ T5851] [ 188.137218][ T112] [ 188.137218][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.137218][ T112] [ 188.148323][ T113] [ 188.148323][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.148323][ T113] [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5891] <... ioctl resumed>) = 0 [pid 5889] <... exit_group resumed>) = ? [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5892 attached [pid 5891] close(3 [pid 5852] unlink("./5/binderfs" [pid 5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 3 [pid 5892] set_robust_list(0x555584a2d760, 24 [pid 5891] <... close resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5892 [pid 5847] newfstatat(3, "", [pid 5892] <... set_robust_list resumed>) = 0 [pid 5891] close(4 [pid 5852] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5892] chdir("./6" [pid 5889] +++ exited with 0 +++ [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5891] <... close resumed>) = 0 [pid 5847] unlink("./5/binderfs" [pid 5891] mkdir("./file0", 0777 [pid 5847] <... unlink resumed>) = 0 [pid 5892] <... chdir resumed>) = 0 [pid 5891] <... mkdir resumed>) = 0 [pid 5847] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 188.163688][ T5891] loop3: detected capacity change from 0 to 32768 [ 188.183063][ T5852] [ 188.183063][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.183063][ T5852] [ 188.194140][ T5847] [ 188.194140][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.194140][ T5847] [ 188.194664][ T5852] [ 188.194664][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 5891] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] newfstatat(AT_FDCWD, "./5/file0", [pid 5892] <... prctl resumed>) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5892] write(1, "executing program\n", 18) = 18 [pid 5892] memfd_create("syzkaller", 0) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... restart_syscall resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(4, "", [pid 5849] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5851] getdents64(4, [pid 5849] newfstatat(3, "", [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] getdents64(3, [pid 5851] close(4 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... close resumed>) = 0 [pid 5849] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] rmdir("./5/file0" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... rmdir resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5851] getdents64(3, [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5849] unlink("./5/binderfs" [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./5" [pid 5852] <... umount2 resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5851] mkdir("./6", 0777 [pid 5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... mkdir resumed>) = 0 [pid 5852] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... openat resumed>) = 3 [pid 5852] newfstatat(AT_FDCWD, "./5/file0", [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] close(3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./5/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 188.194664][ T5852] [ 188.228016][ T5891] [ 188.228016][ T5891] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.228016][ T5891] [ 188.230735][ T5847] [ 188.230735][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.230735][ T5847] [pid 5852] close(3 [pid 5891] <... mount resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] rmdir("./5" [pid 5847] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5891] <... openat resumed>) = 3 [pid 5891] chdir("./file0") = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5891] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5891] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] mkdir("./6", 0777 [pid 5847] newfstatat(AT_FDCWD, "./5/file0", [pid 5852] <... mkdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] <... umount2 resumed>) = 0 [pid 5847] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5847] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... ioctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 4 [pid 5852] close(3 [pid 5847] newfstatat(4, "", [pid 5849] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(4, [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... openat resumed>) = 4 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] newfstatat(4, "", [ 188.274775][ T5849] [ 188.274775][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.274775][ T5849] [ 188.291010][ T5849] [ 188.291010][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.291010][ T5849] [ 188.309200][ T5891] [ 188.309200][ T5891] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.309200][ T5891] [pid 5847] close(4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... close resumed>) = 0 [pid 5849] getdents64(4, [pid 5847] rmdir("./5/file0" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... rmdir resumed>) = 0 [pid 5849] getdents64(4, [pid 5847] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5847] close(3) = 0 [pid 5847] rmdir("./5" [pid 5849] <... close resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5849] rmdir("./5/file0" [ 188.370103][ T5891] [ 188.370103][ T5891] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.370103][ T5891] [pid 5847] mkdir("./6", 0777 [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5891] <... lsetxattr resumed>) = 0 [pid 5891] exit_group(0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5891] <... exit_group resumed>) = ? [pid 5847] <... ioctl resumed>) = 0 [pid 5891] +++ exited with 0 +++ [pid 5849] getdents64(3, [pid 5847] close(3 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./5/binderfs") = 0 [pid 5850] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./5") = 0 [ 188.412670][ T113] [ 188.412670][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.412670][ T113] [pid 5849] mkdir("./6", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 188.459740][ T5850] [ 188.459740][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.459740][ T5850] [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5851] <... close resumed>) = 0 [ 188.508465][ T5850] [ 188.508465][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.508465][ T5850] [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5893 attached , child_tidptr=0x555584a2d750) = 5893 [pid 5893] set_robust_list(0x555584a2d760, 24) = 0 [pid 5893] chdir("./6") = 0 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5893] setpgid(0, 0) = 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5893] write(3, "1000", 4) = 4 [pid 5893] close(3) = 0 [pid 5893] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... umount2 resumed>) = 0 [pid 5893] <... symlink resumed>) = 0 executing program [pid 5893] write(1, "executing program\n", 18 [pid 5850] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5893] <... write resumed>) = 18 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./5/file0", [pid 5893] memfd_create("syzkaller", 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5893] <... memfd_create resumed>) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./5/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./5") = 0 [pid 5850] mkdir("./6", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3executing program [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5894 ./strace-static-x86_64: Process 5894 attached [pid 5894] set_robust_list(0x555584a2d760, 24) = 0 [pid 5894] chdir("./6") = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5894] write(3, "1000", 4) = 4 [pid 5894] close(3) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5894] write(1, "executing program\n", 18) = 18 [pid 5894] memfd_create("syzkaller", 0 [pid 5847] <... close resumed>) = 0 [pid 5894] <... memfd_create resumed>) = 3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5895 attached [pid 5895] set_robust_list(0x555584a2d760, 24) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5895 [pid 5895] chdir("./6"./strace-static-x86_64: Process 5896 attached ) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5896 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5896] set_robust_list(0x555584a2d760, 24 [pid 5895] <... prctl resumed>) = 0 [pid 5896] <... set_robust_list resumed>) = 0 [pid 5896] chdir("./6" [pid 5895] setpgid(0, 0 [pid 5896] <... chdir resumed>) = 0 [pid 5895] <... setpgid resumed>) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5896] <... prctl resumed>) = 0 [pid 5896] setpgid(0, 0 [pid 5895] <... openat resumed>) = 3 [pid 5896] <... setpgid resumed>) = 0 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5895] symlink("/dev/binderfs", "./binderfs" [pid 5896] <... openat resumed>) = 3 [pid 5895] <... symlink resumed>) = 0 [pid 5896] write(3, "1000", 4 [pid 5895] write(1, "executing program\n", 18executing program executing program [pid 5896] <... write resumed>) = 4 [pid 5896] close(3 [pid 5895] <... write resumed>) = 18 [pid 5896] <... close resumed>) = 0 [pid 5895] memfd_create("syzkaller", 0 [pid 5896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] <... memfd_create resumed>) = 3 [pid 5896] write(1, "executing program\n", 18) = 18 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5896] memfd_create("syzkaller", 0 [pid 5895] <... mmap resumed>) = 0x7feda9000000 [pid 5896] <... memfd_create resumed>) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5897 ./strace-static-x86_64: Process 5897 attached [pid 5897] set_robust_list(0x555584a2d760, 24) = 0 [pid 5897] chdir("./6") = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5897] setpgid(0, 0executing program ) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5897] write(3, "1000", 4) = 4 [pid 5897] close(3) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5897] write(1, "executing program\n", 18) = 18 [pid 5897] memfd_create("syzkaller", 0) = 3 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] <... write resumed>) = 16777216 [pid 5892] munmap(0x7feda9000000, 138412032) = 0 [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./file0", 0777) = 0 [ 189.128665][ T5892] loop1: detected capacity change from 0 to 32768 [pid 5892] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5892] chdir("./file0") = 0 [ 189.173602][ T5892] [ 189.173602][ T5892] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.173602][ T5892] [pid 5892] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5892] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 189.223574][ T5892] [ 189.223574][ T5892] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.223574][ T5892] [ 189.251693][ T5892] [ 189.251693][ T5892] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.251693][ T5892] [pid 5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] <... lsetxattr resumed>) = 0 [pid 5892] exit_group(0) = ? [pid 5892] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./6/binderfs") = 0 [pid 5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5893] <... write resumed>) = 16777216 [pid 5893] munmap(0x7feda9000000, 138412032) = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 189.300356][ T112] [ 189.300356][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.300356][ T112] [ 189.338075][ T5848] [ 189.338075][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.338075][ T5848] [pid 5893] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5893] close(3) = 0 [pid 5893] close(4) = 0 [pid 5893] mkdir("./file0", 0777) = 0 [ 189.380075][ T5848] [ 189.380075][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.380075][ T5848] [ 189.391378][ T5893] loop4: detected capacity change from 0 to 32768 [pid 5893] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./6/file0", [pid 5893] <... mount resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5893] chdir("./file0") = 0 [pid 5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5893] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 189.439826][ T5893] [ 189.439826][ T5893] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.439826][ T5893] [pid 5893] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... write resumed>) = 16777216 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5894] munmap(0x7feda9000000, 138412032 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5894] <... munmap resumed>) = 0 [pid 5848] rmdir("./6/file0") = 0 [pid 5848] getdents64(3, [pid 5894] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5893] <... lsetxattr resumed>) = 0 [pid 5894] <... openat resumed>) = 4 [ 189.492079][ T5893] [ 189.492079][ T5893] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.492079][ T5893] [ 189.525517][ T5893] [ 189.525517][ T5893] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.525517][ T5893] [pid 5848] close(3 [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... close resumed>) = 0 [pid 5894] <... ioctl resumed>) = 0 [pid 5893] exit_group(0 [pid 5848] rmdir("./6" [pid 5893] <... exit_group resumed>) = ? [pid 5848] <... rmdir resumed>) = 0 [pid 5893] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5848] mkdir("./7", 0777 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./6/binderfs") = 0 [pid 5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5894] close(3) = 0 [pid 5848] close(3 [pid 5894] close(4) = 0 [pid 5894] mkdir("./file0", 0777) = 0 [ 189.561975][ T5894] loop5: detected capacity change from 0 to 32768 [ 189.571069][ T113] [ 189.571069][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.571069][ T113] [pid 5896] <... write resumed>) = 16777216 [pid 5895] <... write resumed>) = 16777216 [pid 5894] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5896] munmap(0x7feda9000000, 138412032 [ 189.619843][ T5851] [ 189.619843][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.619843][ T5851] [ 189.650284][ T5851] [ 189.650284][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.650284][ T5851] [ 189.654146][ T5894] [ 189.654146][ T5894] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5895] munmap(0x7feda9000000, 138412032 [pid 5896] <... munmap resumed>) = 0 [pid 5895] <... munmap resumed>) = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5894] <... mount resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5896] <... openat resumed>) = 4 [pid 5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5896] ioctl(4, LOOP_SET_FD, 3 [ 189.654146][ T5894] [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] newfstatat(AT_FDCWD, "./6/file0", [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5894] <... openat resumed>) = 3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5895] <... openat resumed>) = 4 [pid 5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] chdir("./file0" [pid 5851] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] <... chdir resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, [pid 5896] <... ioctl resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5896] close(3 [pid 5894] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] getdents64(4, [pid 5896] <... close resumed>) = 0 [pid 5894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5896] close(4 [pid 5894] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] close(4 [pid 5896] <... close resumed>) = 0 [pid 5896] mkdir("./file0", 0777) = 0 [ 189.697859][ T5896] loop2: detected capacity change from 0 to 32768 [ 189.711522][ T5895] loop0: detected capacity change from 0 to 32768 [pid 5896] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... close resumed>) = 0 [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 [pid 5895] close(4) = 0 [pid 5895] mkdir("./file0", 0777) = 0 [pid 5851] rmdir("./6/file0" [pid 5895] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... rmdir resumed>) = 0 [ 189.740583][ T5894] [ 189.740583][ T5894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.740583][ T5894] [ 189.750040][ T5896] [ 189.750040][ T5896] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.750040][ T5896] [ 189.763883][ T5894] [ 189.763883][ T5894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.763883][ T5894] [ 189.767461][ T5895] [ 189.767461][ T5895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.767461][ T5895] [pid 5851] getdents64(3, [pid 5897] <... write resumed>) = 16777216 [pid 5894] <... lsetxattr resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5897] munmap(0x7feda9000000, 138412032 [pid 5896] <... mount resumed>) = 0 [pid 5894] exit_group(0 [pid 5851] <... close resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5894] <... exit_group resumed>) = ? [pid 5851] rmdir("./6" [pid 5896] <... openat resumed>) = 3 [pid 5896] chdir("./file0") = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] mkdir("./7", 0777 [pid 5896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5896] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5894] +++ exited with 0 +++ [pid 5851] <... mkdir resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=34 /* 0.34 s */} --- [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5852] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5852] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... ioctl resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5851] close(3 [pid 5895] <... mount resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5895] chdir("./file0") = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] newfstatat(3, "", [pid 5895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 189.791353][ T112] [ 189.791353][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.791353][ T112] [ 189.818031][ T5896] [ 189.818031][ T5896] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.818031][ T5896] [pid 5895] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./6/binderfs") = 0 [ 189.844714][ T5895] [ 189.844714][ T5895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.844714][ T5895] [ 189.856958][ T5896] [ 189.856958][ T5896] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.856958][ T5896] [ 189.876036][ T5895] [ 189.876036][ T5895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.876036][ T5895] [pid 5852] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5897] <... munmap resumed>) = 0 [pid 5896] <... lsetxattr resumed>) = 0 [pid 5896] exit_group(0) = ? [pid 5896] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5895] <... lsetxattr resumed>) = 0 [pid 5895] exit_group(0 [pid 5848] <... close resumed>) = 0 [pid 5895] <... exit_group resumed>) = ? [pid 5849] <... restart_syscall resumed>) = 0 [pid 5895] +++ exited with 0 +++ [pid 5849] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... openat resumed>) = 3 [pid 5847] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] newfstatat(3, "", [pid 5847] <... openat resumed>) = 3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] newfstatat(3, "", ./strace-static-x86_64: Process 5898 attached [pid 5849] getdents64(3, [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] getdents64(3, [pid 5898] set_robust_list(0x555584a2d760, 24 [pid 5897] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 189.897806][ T113] [ 189.897806][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.897806][ T113] [ 189.915088][ T5852] [ 189.915088][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.915088][ T5852] [ 189.915186][ T112] [ 189.915186][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.915186][ T112] [pid 5897] <... openat resumed>) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5898 [pid 5847] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5898] <... set_robust_list resumed>) = 0 [pid 5897] ioctl(4, LOOP_SET_FD, 3 [pid 5849] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5849] unlink("./6/binderfs" [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5898] chdir("./7" [pid 5849] <... unlink resumed>) = 0 [pid 5847] unlink("./6/binderfs" [pid 5898] <... chdir resumed>) = 0 [pid 5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... unlink resumed>) = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5898] <... prctl resumed>) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5898] write(3, "1000", 4 [pid 5897] <... ioctl resumed>) = 0 [ 189.953587][ T5852] [ 189.953587][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.953587][ T5852] [ 189.964809][ T5849] [ 189.964809][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.964809][ T5849] [ 189.965030][ T5897] loop3: detected capacity change from 0 to 32768 [ 189.975817][ T5849] [ 189.975817][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.975817][ T5849] [ 189.995633][ T5847] [ 189.995633][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5897] close(3executing program [pid 5898] <... write resumed>) = 4 [pid 5897] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5898] close(3) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5898] write(1, "executing program\n", 18) = 18 [pid 5898] memfd_create("syzkaller", 0) = 3 [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5897] close(4 [pid 5852] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5897] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5897] mkdir("./file0", 0777 [pid 5852] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5897] <... mkdir resumed>) = 0 [pid 5852] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5897] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5852] getdents64(4, [pid 5847] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] newfstatat(AT_FDCWD, "./6/file0", [pid 5852] getdents64(4, [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5897] <... mount resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5847] newfstatat(4, "", [pid 5852] close(4 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5852] <... close resumed>) = 0 [pid 5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./6/file0" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4 [pid 5852] <... rmdir resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./6/file0", [pid 5847] <... close resumed>) = 0 [pid 5852] getdents64(3, [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 189.995633][ T5847] [ 190.007916][ T5847] [ 190.007916][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.007916][ T5847] [ 190.039832][ T5897] [ 190.039832][ T5897] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.039832][ T5897] [pid 5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] rmdir("./6/file0" [pid 5852] rmdir("./6" [pid 5849] <... openat resumed>) = 4 [pid 5847] <... rmdir resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 5852] mkdir("./7", 0777 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5849] getdents64(4, [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] rmdir("./6" [pid 5852] <... openat resumed>) = 3 [pid 5849] getdents64(4, [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5849] close(4 [pid 5852] close(3 [pid 5849] <... close resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./7", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5849] rmdir("./6/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] close(3) = 0 [pid 5897] <... openat resumed>) = 3 [pid 5897] chdir("./file0" [pid 5849] rmdir("./6" [pid 5897] <... chdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] mkdir("./7", 0777 [pid 5897] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5897] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5851] <... close resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3./strace-static-x86_64: Process 5899 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5899 [pid 5899] set_robust_list(0x555584a2d760, 24) = 0 [pid 5899] chdir("./7") = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ) = 0 [pid 5899] setpgid(0, 0) = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5899] write(3, "1000", 4) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5899] write(1, "executing program\n", 18) = 18 [pid 5899] memfd_create("syzkaller", 0) = 3 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 190.131424][ T5897] [ 190.131424][ T5897] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.131424][ T5897] [ 190.151049][ T5897] [ 190.151049][ T5897] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.151049][ T5897] [pid 5897] <... lsetxattr resumed>) = 0 [pid 5897] exit_group(0) = ? [pid 5897] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./6/binderfs") = 0 [ 190.212952][ T112] [ 190.212952][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.212952][ T112] [ 190.251330][ T5850] [ 190.251330][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.251330][ T5850] [pid 5850] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [ 190.293764][ T5850] [ 190.293764][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.293764][ T5850] [pid 5850] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5850] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5900 attached [pid 5850] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5900 [pid 5900] set_robust_list(0x555584a2d760, 24 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... openat resumed>) = 4 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5850] newfstatat(4, "", [pid 5900] chdir("./7" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5900] <... chdir resumed>) = 0 [pid 5850] getdents64(4, [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5901 attached [pid 5900] <... prctl resumed>) = 0 [pid 5850] getdents64(4, [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5901 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 5901] set_robust_list(0x555584a2d760, 24 [pid 5900] setpgid(0, 0 [pid 5850] <... close resumed>) = 0 [pid 5901] <... set_robust_list resumed>) = 0 [pid 5900] <... setpgid resumed>) = 0 [pid 5850] rmdir("./6/file0" [pid 5901] chdir("./7" [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... rmdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5900] <... openat resumed>) = 3 [pid 5850] getdents64(3, [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5900] write(3, "1000", 4 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3./strace-static-x86_64: Process 5902 attached [pid 5901] <... chdir resumed>) = 0 [pid 5900] <... write resumed>) = 4 [pid 5850] <... close resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5902 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5900] close(3 [pid 5850] rmdir("./6" [pid 5900] <... close resumed>) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... rmdir resumed>) = 0 [pid 5902] set_robust_list(0x555584a2d760, 24) = 0 [pid 5902] chdir("./7" [pid 5900] <... symlink resumed>) = 0 [pid 5850] mkdir("./7", 0777 [pid 5902] <... chdir resumed>) = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] setpgid(0, 0) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program executing program ) = 3 [pid 5850] <... mkdir resumed>) = 0 [pid 5900] write(1, "executing program\n", 18 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5901] <... prctl resumed>) = 0 [pid 5900] <... write resumed>) = 18 [pid 5902] write(3, "1000", 4 [pid 5901] setpgid(0, 0 [pid 5902] <... write resumed>) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5900] memfd_create("syzkaller", 0 [pid 5901] <... setpgid resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5900] <... memfd_create resumed>) = 3 [pid 5902] <... symlink resumed>) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5902] write(1, "executing program\n", 18 [pid 5900] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... ioctl resumed>) = 0 [pid 5902] <... write resumed>) = 18 [pid 5902] memfd_create("syzkaller", 0) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5901] <... openat resumed>) = 3 [pid 5850] close(3 [pid 5901] write(3, "1000", 4) = 4 [pid 5901] close(3) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5901] write(1, "executing program\n", 18) = 18 [pid 5901] memfd_create("syzkaller", 0) = 3 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5898] <... write resumed>) = 16777216 [pid 5850] <... close resumed>) = 0 [pid 5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5903 ./strace-static-x86_64: Process 5903 attached [pid 5898] munmap(0x7feda9000000, 138412032 [pid 5903] set_robust_list(0x555584a2d760, 24) = 0 [pid 5903] chdir("./7") = 0 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs" [pid 5898] <... munmap resumed>) = 0 [pid 5903] <... symlink resumed>) = 0 [pid 5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR executing program [pid 5903] write(1, "executing program\n", 18 [pid 5898] <... openat resumed>) = 4 [pid 5903] <... write resumed>) = 18 [pid 5898] ioctl(4, LOOP_SET_FD, 3 [pid 5903] memfd_create("syzkaller", 0) = 3 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5899] <... write resumed>) = 16777216 [pid 5899] munmap(0x7feda9000000, 138412032 [pid 5898] <... ioctl resumed>) = 0 [pid 5898] close(3) = 0 [pid 5898] close(4) = 0 [pid 5898] mkdir("./file0", 0777 [pid 5899] <... munmap resumed>) = 0 [pid 5898] <... mkdir resumed>) = 0 [ 190.890968][ T5898] loop1: detected capacity change from 0 to 32768 [pid 5899] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5898] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5899] <... openat resumed>) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3 [pid 5898] <... mount resumed>) = 0 [pid 5898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5898] chdir("./file0" [pid 5899] <... ioctl resumed>) = 0 [pid 5898] <... chdir resumed>) = 0 [pid 5899] close(3 [pid 5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5899] <... close resumed>) = 0 [pid 5899] close(4 [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 190.960431][ T5899] loop4: detected capacity change from 0 to 32768 [ 190.970910][ T5898] [ 190.970910][ T5898] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.970910][ T5898] [pid 5899] <... close resumed>) = 0 [pid 5898] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5899] mkdir("./file0", 0777) = 0 [pid 5899] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] chdir("./file0") = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 191.020821][ T5898] [ 191.020821][ T5898] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.020821][ T5898] [ 191.038584][ T5899] [ 191.038584][ T5899] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.038584][ T5899] [ 191.060282][ T5898] [ 191.060282][ T5898] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.060282][ T5898] [pid 5899] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5898] <... lsetxattr resumed>) = 0 [pid 5898] exit_group(0) = ? [pid 5898] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [ 191.077671][ T5899] [ 191.077671][ T5899] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.077671][ T5899] [ 191.112479][ T113] [ 191.112479][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.112479][ T113] [ 191.124021][ T5899] [pid 5848] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./7/binderfs") = 0 [pid 5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5902] <... write resumed>) = 16777216 [pid 5899] <... lsetxattr resumed>) = 0 [ 191.124021][ T5899] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.124021][ T5899] [ 191.160655][ T112] [ 191.160655][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.160655][ T112] [pid 5899] exit_group(0 [pid 5902] munmap(0x7feda9000000, 138412032 [pid 5899] <... exit_group resumed>) = ? [pid 5899] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5902] <... munmap resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5902] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 191.180199][ T5848] [ 191.180199][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.180199][ T5848] [ 191.202739][ T5848] [ 191.202739][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.202739][ T5848] [pid 5851] newfstatat(3, "", [pid 5902] <... openat resumed>) = 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5902] ioctl(4, LOOP_SET_FD, 3 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./7/binderfs") = 0 [pid 5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5902] <... ioctl resumed>) = 0 [pid 5902] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5902] <... close resumed>) = 0 [pid 5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5902] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5902] <... close resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5902] mkdir("./file0", 0777 [pid 5848] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./7/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5902] <... mkdir resumed>) = 0 [pid 5902] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] close(3) = 0 [pid 5848] rmdir("./7") = 0 [ 191.225784][ T5902] loop2: detected capacity change from 0 to 32768 [ 191.242849][ T5851] [ 191.242849][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.242849][ T5851] [pid 5848] mkdir("./8", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5902] <... mount resumed>) = 0 [pid 5902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5900] <... write resumed>) = 16777216 [pid 5902] chdir("./file0") = 0 [ 191.280797][ T5851] [ 191.280797][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.280797][ T5851] [ 191.292884][ T5902] [ 191.292884][ T5902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.292884][ T5902] [pid 5902] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5901] <... write resumed>) = 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5902] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5900] munmap(0x7feda9000000, 138412032 [pid 5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] munmap(0x7feda9000000, 138412032 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5900] <... munmap resumed>) = 0 [pid 5901] <... munmap resumed>) = 0 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 191.338447][ T5902] [ 191.338447][ T5902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.338447][ T5902] [ 191.368293][ T5902] [ 191.368293][ T5902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.368293][ T5902] [pid 5851] getdents64(4, [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./7/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5902] <... lsetxattr resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5900] <... ioctl resumed>) = 0 [pid 5900] close(3) = 0 [pid 5900] close(4) = 0 [pid 5851] rmdir("./7" [pid 5902] exit_group(0 [pid 5900] mkdir("./file0", 0777) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./8", 0777 [pid 5901] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] <... mkdir resumed>) = 0 [pid 5901] <... openat resumed>) = 4 [pid 5902] <... exit_group resumed>) = ? [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5902] +++ exited with 0 +++ [pid 5901] ioctl(4, LOOP_SET_FD, 3 [pid 5900] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5851] <... ioctl resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [ 191.396562][ T5900] loop0: detected capacity change from 0 to 32768 [ 191.406652][ T113] [ 191.406652][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.406652][ T113] [ 191.433900][ T5901] loop5: detected capacity change from 0 to 32768 [pid 5901] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 5901] close(3 [pid 5849] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5901] close(4 [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 5901] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5901] mkdir("./file0", 0777 [pid 5849] getdents64(3, [pid 5901] <... mkdir resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5900] <... mount resumed>) = 0 [pid 5900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5900] chdir("./file0") = 0 [ 191.444850][ T5900] [ 191.444850][ T5900] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.444850][ T5900] [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] unlink("./7/binderfs" [pid 5900] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... unlink resumed>) = 0 [ 191.502265][ T5900] [ 191.502265][ T5900] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.502265][ T5900] [ 191.504371][ T5901] [ 191.504371][ T5901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.504371][ T5901] [ 191.529841][ T5900] [ 191.529841][ T5900] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.529841][ T5900] [ 191.546568][ T5849] [pid 5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5900] <... lsetxattr resumed>) = 0 [ 191.546568][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.546568][ T5849] [pid 5900] exit_group(0) = ? [pid 5900] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./7/binderfs") = 0 [pid 5847] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] <... mount resumed>) = 0 [pid 5901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5901] chdir("./file0") = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 191.574986][ T112] [ 191.574986][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.574986][ T112] [ 191.588296][ T5849] [ 191.588296][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.588296][ T5849] [ 191.604691][ T5901] [ 191.604691][ T5901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.604691][ T5901] [ 191.621576][ T5847] [pid 5901] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./7/file0", [pid 5901] <... lsetxattr resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5901] exit_group(0) = ? [pid 5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5901] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", [pid 5852] <... restart_syscall resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] getdents64(4, [pid 5852] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(4, [pid 5852] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] close(4 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5904 [pid 5847] <... umount2 resumed>) = 0 [pid 5852] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] rmdir("./7/file0" [pid 5847] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./7/binderfs") = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 191.621576][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.621576][ T5847] [ 191.630753][ T5901] [ 191.630753][ T5901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.630753][ T5901] [ 191.643878][ T5847] [ 191.643878][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.643878][ T5847] [ 191.656520][ T113] [ 191.656520][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.656520][ T113] [pid 5852] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 5847] newfstatat(AT_FDCWD, "./7/file0", [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5904 attached [pid 5903] <... write resumed>) = 16777216 [pid 5849] close(3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... close resumed>) = 0 [pid 5847] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] rmdir("./7" [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] set_robust_list(0x555584a2d760, 24) = 0 [pid 5904] chdir("./8" [pid 5849] <... rmdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] <... chdir resumed>) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] newfstatat(4, "", [pid 5904] <... prctl resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5904] setpgid(0, 0 [pid 5847] getdents64(4, [pid 5904] <... setpgid resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] getdents64(4, [pid 5849] mkdir("./8", 0777 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5904] <... openat resumed>) = 3 [pid 5847] close(4 [pid 5904] write(3, "1000", 4 [pid 5847] <... close resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5847] rmdir("./7/file0" [pid 5904] <... write resumed>) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWRexecuting program [pid 5847] <... rmdir resumed>) = 0 [pid 5904] write(1, "executing program\n", 18 [pid 5847] getdents64(3, [pid 5904] <... write resumed>) = 18 [pid 5849] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5904] memfd_create("syzkaller", 0 [pid 5903] munmap(0x7feda9000000, 138412032 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] close(3 [pid 5849] <... ioctl resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5904] <... memfd_create resumed>) = 3 [pid 5847] rmdir("./7" [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5904] <... mmap resumed>) = 0x7feda9000000 [pid 5849] close(3 [pid 5847] mkdir("./8", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 191.698790][ T5852] [ 191.698790][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.698790][ T5852] [ 191.724271][ T5852] [ 191.724271][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.724271][ T5852] [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5903] <... munmap resumed>) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5903] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... umount2 resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5852] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./7/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./7") = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] mkdir("./8", 0777 [pid 5903] <... ioctl resumed>) = 0 [pid 5903] close(3 [pid 5852] <... mkdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 191.801755][ T5903] loop3: detected capacity change from 0 to 32768 [pid 5852] close(3 [pid 5903] <... close resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5905 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x555584a2d760, 24 [pid 5903] close(4 [pid 5905] <... set_robust_list resumed>) = 0 [pid 5903] <... close resumed>) = 0 [pid 5905] chdir("./8" [pid 5903] mkdir("./file0", 0777 [pid 5905] <... chdir resumed>) = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] <... mkdir resumed>) = 0 [pid 5905] setpgid(0, 0 [pid 5903] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5905] <... setpgid resumed>) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5905] write(1, "executing program\n", 18) = 18 [pid 5905] memfd_create("syzkaller", 0) = 3 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5903] <... mount resumed>) = 0 [pid 5903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5903] chdir("./file0") = 0 [ 191.920915][ T5903] [ 191.920915][ T5903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.920915][ T5903] [pid 5903] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 191.990951][ T5903] [ 191.990951][ T5903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.990951][ T5903] [pid 5903] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... close resumed>) = 0 [pid 5903] <... lsetxattr resumed>) = 0 [pid 5903] exit_group(0) = ? [ 192.040598][ T5903] [ 192.040598][ T5903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.040598][ T5903] [pid 5903] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5906 [pid 5850] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5906 attached [pid 5850] newfstatat(3, "", [pid 5906] set_robust_list(0x555584a2d760, 24 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5906] <... set_robust_list resumed>) = 0 [pid 5906] chdir("./8" [pid 5850] getdents64(3, [pid 5906] <... chdir resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5906] <... prctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5906] setpgid(0, 0 [pid 5850] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5906] <... setpgid resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] unlink("./7/binderfs"executing program [pid 5906] <... openat resumed>) = 3 [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5906] write(3, "1000", 4) = 4 [pid 5906] close(3) = 0 [pid 5906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5906] write(1, "executing program\n", 18) = 18 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 192.095046][ T113] [ 192.095046][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.095046][ T113] [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5907 ./strace-static-x86_64: Process 5907 attached [pid 5907] set_robust_list(0x555584a2d760, 24) = 0 [pid 5907] chdir("./8") = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5852] <... close resumed>) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3./strace-static-x86_64: Process 5908 attached ) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5908 [pid 5850] <... umount2 resumed>) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs" [pid 5850] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... symlink resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5907] write(1, "executing program\n", 18 [pid 5850] newfstatat(AT_FDCWD, "./7/file0", [pid 5907] <... write resumed>) = 18 [pid 5908] set_robust_list(0x555584a2d760, 24 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5908] <... set_robust_list resumed>) = 0 [ 192.162247][ T5850] [ 192.162247][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.162247][ T5850] [ 192.180749][ T5850] [ 192.180749][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.180749][ T5850] [pid 5908] chdir("./8" [pid 5907] memfd_create("syzkaller", 0 [pid 5850] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... memfd_create resumed>) = 3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5908] <... chdir resumed>) = 0 [pid 5907] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... openat resumed>) = 4 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 5908] setpgid(0, 0) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] write(1, "executing program\n", 18) = 18 [pid 5908] memfd_create("syzkaller", 0) = 3 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./7/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./7") = 0 [pid 5850] mkdir("./8", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5904] <... write resumed>) = 16777216 [pid 5904] munmap(0x7feda9000000, 138412032 [pid 5850] <... close resumed>) = 0 [pid 5904] <... munmap resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5904] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5909 attached ) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5909 [pid 5904] close(3 [pid 5909] set_robust_list(0x555584a2d760, 24 [pid 5904] <... close resumed>) = 0 [pid 5904] close(4) = 0 [pid 5904] mkdir("./file0", 0777) = 0 [pid 5904] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5909] <... set_robust_list resumed>) = 0 [pid 5909] chdir("./8") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5905] <... write resumed>) = 16777216 [ 192.760365][ T5904] loop1: detected capacity change from 0 to 32768 [ 192.787655][ T5904] [ 192.787655][ T5904] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.787655][ T5904] [pid 5905] munmap(0x7feda9000000, 138412032 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] <... mount resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5909] write(3, "1000", 4 [pid 5904] <... openat resumed>) = 3 [pid 5909] <... write resumed>) = 4 [pid 5904] chdir("./file0" [pid 5909] close(3 [pid 5904] <... chdir resumed>) = 0 [pid 5909] <... close resumed>) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5909] symlink("/dev/binderfs", "./binderfs" [pid 5904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 192.856926][ T5904] [ 192.856926][ T5904] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.856926][ T5904] [ 192.889494][ T5904] [ 192.889494][ T5904] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.889494][ T5904] [pid 5904] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5905] <... munmap resumed>) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5904] <... lsetxattr resumed>) = 0 [pid 5905] <... ioctl resumed>) = 0 [pid 5904] exit_group(0 [pid 5905] close(3 [pid 5904] <... exit_group resumed>) = ? executing program [pid 5909] <... symlink resumed>) = 0 [pid 5909] write(1, "executing program\n", 18) = 18 [pid 5909] memfd_create("syzkaller", 0) = 3 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5905] <... close resumed>) = 0 [pid 5905] close(4) = 0 [pid 5905] mkdir("./file0", 0777) = 0 [pid 5905] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5904] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./8/binderfs") = 0 [ 192.904036][ T5905] loop4: detected capacity change from 0 to 32768 [ 192.920688][ T112] [ 192.920688][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.920688][ T112] [ 192.970933][ T5848] [ 192.970933][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.970933][ T5848] [ 193.010452][ T5905] [ 193.010452][ T5905] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.010452][ T5905] [pid 5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5905] <... mount resumed>) = 0 [ 193.023516][ T5848] [ 193.023516][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.023516][ T5848] [pid 5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5905] chdir("./file0") = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5905] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5906] <... write resumed>) = 16777216 [pid 5906] munmap(0x7feda9000000, 138412032 [pid 5905] <... lsetxattr resumed>) = 0 [ 193.066871][ T5905] [ 193.066871][ T5905] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.066871][ T5905] [ 193.100131][ T5905] [ 193.100131][ T5905] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.100131][ T5905] [pid 5905] exit_group(0) = ? [pid 5905] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] getdents64(4, [pid 5851] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] close(4 [pid 5851] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5848] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] rmdir("./8/file0" [pid 5851] unlink("./8/binderfs" [pid 5848] <... rmdir resumed>) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 5848] getdents64(3, [pid 5907] <... write resumed>) = 16777216 [pid 5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./8" [pid 5906] <... munmap resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [ 193.130934][ T113] [ 193.130934][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.130934][ T113] [pid 5848] mkdir("./9", 0777 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... mkdir resumed>) = 0 [pid 5906] <... openat resumed>) = 4 [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5907] munmap(0x7feda9000000, 138412032 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5906] <... ioctl resumed>) = 0 [pid 5906] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5906] <... close resumed>) = 0 [pid 5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5906] close(4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] <... write resumed>) = 16777216 [pid 5906] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5907] <... munmap resumed>) = 0 [pid 5906] mkdir("./file0", 0777 [pid 5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] munmap(0x7feda9000000, 138412032 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", [pid 5906] <... mkdir resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5906] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 193.182359][ T5851] [ 193.182359][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.182359][ T5851] [ 193.200263][ T5851] [ 193.200263][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.200263][ T5851] [ 193.221216][ T5906] loop0: detected capacity change from 0 to 32768 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] close(4) = 0 [pid 5907] <... openat resumed>) = 4 [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 5851] rmdir("./8/file0" [pid 5906] <... mount resumed>) = 0 [pid 5907] <... ioctl resumed>) = 0 [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] <... rmdir resumed>) = 0 [pid 5907] close(3 [pid 5906] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 5907] <... close resumed>) = 0 [pid 5906] chdir("./file0" [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5907] close(4 [pid 5906] <... chdir resumed>) = 0 [pid 5851] close(3 [pid 5908] <... munmap resumed>) = 0 [pid 5907] <... close resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5851] <... close resumed>) = 0 [pid 5907] mkdir("./file0", 0777 [pid 5851] rmdir("./8" [pid 5908] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5907] <... mkdir resumed>) = 0 [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... rmdir resumed>) = 0 [pid 5908] <... openat resumed>) = 4 [pid 5907] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5906] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 193.272378][ T5906] [ 193.272378][ T5906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.272378][ T5906] [ 193.304816][ T5907] loop2: detected capacity change from 0 to 32768 [pid 5851] mkdir("./9", 0777 [pid 5908] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... mkdir resumed>) = 0 [pid 5908] <... ioctl resumed>) = 0 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [pid 5908] mkdir("./file0", 0777) = 0 [pid 5908] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 193.327801][ T5908] loop5: detected capacity change from 0 to 32768 [ 193.327828][ T5906] [ 193.327828][ T5906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.327828][ T5906] [ 193.327852][ T5906] [ 193.327852][ T5906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.327852][ T5906] [ 193.373199][ T5907] [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5907] <... mount resumed>) = 0 [pid 5851] close(3 [pid 5907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5907] chdir("./file0") = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5908] <... mount resumed>) = 0 [pid 5907] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 193.373199][ T5907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.373199][ T5907] [ 193.388641][ T5908] [ 193.388641][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.388641][ T5908] [pid 5908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./file0") = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5908] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5906] <... lsetxattr resumed>) = 0 [pid 5906] exit_group(0) = ? [ 193.436848][ T5907] [ 193.436848][ T5907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.436848][ T5907] [ 193.441957][ T5908] [ 193.441957][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.441957][ T5908] [ 193.458276][ T112] [ 193.458276][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.458276][ T112] [ 193.469297][ T5907] [ 193.469297][ T5907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.469297][ T5907] [pid 5906] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5907] <... lsetxattr resumed>) = 0 [pid 5907] exit_group(0 [pid 5847] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5907] <... exit_group resumed>) = ? [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] +++ exited with 0 +++ [pid 5847] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [ 193.495631][ T5908] [ 193.495631][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.495631][ T5908] [ 193.521128][ T113] [ 193.521128][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.521128][ T113] [pid 5849] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5908] <... lsetxattr resumed>) = 0 [pid 5849] newfstatat(3, "", [pid 5908] exit_group(0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./8/binderfs") = 0 [pid 5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] <... exit_group resumed>) = ? [pid 5847] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5908] +++ exited with 0 +++ [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./8/binderfs") = 0 [pid 5847] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 193.549223][ T112] [ 193.549223][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.549223][ T112] [ 193.576345][ T5849] [ 193.576345][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.576345][ T5849] [ 193.587596][ T5847] [ 193.587596][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.587596][ T5847] [pid 5852] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./8/binderfs") = 0 [pid 5852] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached , child_tidptr=0x555584a2d750) = 5910 [pid 5910] set_robust_list(0x555584a2d760, 24) = 0 [pid 5910] chdir("./9") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5910] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5910] memfd_create("syzkaller", 0) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 193.603892][ T5849] [ 193.603892][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.603892][ T5849] [ 193.610295][ T5847] [ 193.610295][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.610295][ T5847] [ 193.631584][ T5852] [ 193.631584][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.631584][ T5852] [pid 5847] <... umount2 resumed>) = 0 [pid 5909] <... write resumed>) = 16777216 [pid 5847] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./8/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5909] munmap(0x7feda9000000, 138412032 [pid 5851] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... umount2 resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] newfstatat(AT_FDCWD, "./8/file0", [pid 5847] close(3 [pid 5909] <... munmap resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5911 ./strace-static-x86_64: Process 5911 attached [pid 5849] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] set_robust_list(0x555584a2d760, 24 [pid 5852] newfstatat(AT_FDCWD, "./8/file0", [pid 5911] <... set_robust_list resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] newfstatat(4, "", [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5911] chdir("./9" [pid 5847] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5911] <... chdir resumed>) = 0 [pid 5909] <... openat resumed>) = 4 [pid 5852] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] rmdir("./8" [pid 5849] getdents64(4, [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... rmdir resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 193.656339][ T5852] [ 193.656339][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.656339][ T5852] [pid 5852] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(4, [pid 5847] mkdir("./9", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5909] <... ioctl resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5911] <... prctl resumed>) = 0 [pid 5909] close(3 [pid 5852] newfstatat(4, "", [pid 5849] close(4 [pid 5847] <... openat resumed>) = 3 [pid 5911] setpgid(0, 0 [pid 5909] <... close resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... close resumed>) = 0 [pid 5909] close(4 [pid 5852] getdents64(4, [pid 5849] rmdir("./8/file0" [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5911] <... setpgid resumed>) = 0 [pid 5909] <... close resumed>) = 0 [pid 5852] getdents64(4, [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5909] mkdir("./file0", 0777 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] getdents64(3, [pid 5847] close(3 [pid 5909] <... mkdir resumed>) = 0 [pid 5852] close(4 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... close resumed>) = 0 [ 193.713834][ T5909] loop3: detected capacity change from 0 to 32768 [ 193.752575][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [pid 5911] <... openat resumed>) = 3 [pid 5909] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] rmdir("./8/file0" [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3 [pid 5849] close(3 [pid 5911] <... close resumed>) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... rmdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5911] <... symlink resumed>) = 0 [pid 5849] rmdir("./8"executing program [pid 5911] write(1, "executing program\n", 18) = 18 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./9", 0777 [pid 5911] memfd_create("syzkaller", 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5911] <... memfd_create resumed>) = 3 [pid 5852] getdents64(3, [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 5849] <... openat resumed>) = 3 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./8" [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... rmdir resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5852] mkdir("./9", 0777 [pid 5849] close(3 [pid 5911] <... mmap resumed>) = 0x7feda9000000 [ 193.759088][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.778738][ T5909] [ 193.778738][ T5909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.778738][ T5909] [pid 5852] <... mkdir resumed>) = 0 [pid 5909] <... mount resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5909] chdir("./file0") = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5909] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 193.843396][ T5909] [ 193.843396][ T5909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.843396][ T5909] [pid 5852] close(3 [pid 5909] <... lsetxattr resumed>) = 0 [pid 5909] exit_group(0) = ? [pid 5909] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./8/binderfs") = 0 [ 193.885170][ T5909] [ 193.885170][ T5909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.885170][ T5909] [ 193.920395][ T112] [ 193.920395][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.920395][ T112] [ 193.990209][ T5850] [ 193.990209][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 193.990209][ T5850] [ 194.020050][ T5850] [ 194.020050][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.020050][ T5850] [pid 5850] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./8/file0", [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5912 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5912 attached ) = -1 EINVAL (Invalid argument) [pid 5912] set_robust_list(0x555584a2d760, 24 [pid 5850] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5912] <... set_robust_list resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [pid 5912] chdir("./9" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5912] <... chdir resumed>) = 0 [pid 5850] getdents64(4, [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5912] setpgid(0, 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5912] <... setpgid resumed>) = 0 [pid 5850] getdents64(4, [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5912] <... openat resumed>) = 3 [pid 5850] close(4 [pid 5912] write(3, "1000", 4 [pid 5850] <... close resumed>) = 0 [pid 5912] <... write resumed>) = 4 [pid 5850] rmdir("./8/file0" [pid 5912] close(3) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, executing program 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5912] write(1, "executing program\n", 18 [pid 5850] close(3 [pid 5912] <... write resumed>) = 18 [pid 5850] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] rmdir("./8" [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached [pid 5850] <... rmdir resumed>) = 0 [pid 5913] set_robust_list(0x555584a2d760, 24 [pid 5850] mkdir("./9", 0777 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5913 [pid 5913] <... set_robust_list resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5913] chdir("./9" [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5913] <... chdir resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5913] <... prctl resumed>) = 0 [pid 5913] setpgid(0, 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5913] <... setpgid resumed>) = 0 [pid 5850] close(3 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] <... close resumed>) = 0 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5913] <... close resumed>) = 0 ./strace-static-x86_64: Process 5914 attached [pid 5913] symlink("/dev/binderfs", "./binderfs"executing program [pid 5914] set_robust_list(0x555584a2d760, 24) = 0 [pid 5913] <... symlink resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5914 [pid 5913] write(1, "executing program\n", 18 [pid 5914] chdir("./9" [pid 5913] <... write resumed>) = 18 [pid 5914] <... chdir resumed>) = 0 [pid 5913] memfd_create("syzkaller", 0) = 3 [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5913] <... mmap resumed>) = 0x7feda9000000 [pid 5914] <... prctl resumed>) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5914] write(1, "executing program\n", 18) = 18 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5910] <... write resumed>) = 16777216 [pid 5914] <... mmap resumed>) = 0x7feda9000000 [pid 5910] munmap(0x7feda9000000, 138412032) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] mkdir("./file0", 0777) = 0 [ 194.403307][ T5910] loop1: detected capacity change from 0 to 32768 [pid 5910] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5910] <... mount resumed>) = 0 [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] chdir("./file0") = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5910] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5915 attached [pid 5915] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5915 [pid 5915] <... set_robust_list resumed>) = 0 [pid 5915] chdir("./9") = 0 [ 194.452442][ T5910] [ 194.452442][ T5910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.452442][ T5910] [ 194.472837][ T5910] [ 194.472837][ T5910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.472837][ T5910] [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5911] <... write resumed>) = 16777216 [pid 5915] <... openat resumed>) = 3 [pid 5915] write(3, "1000", 4 [pid 5911] munmap(0x7feda9000000, 138412032 [pid 5915] <... write resumed>) = 4 [ 194.510509][ T5910] [ 194.510509][ T5910] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.510509][ T5910] [ 194.550601][ T112] [ 194.550601][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.550601][ T112] [pid 5915] close(3) = 0 [pid 5910] <... lsetxattr resumed>) = 0 [pid 5910] exit_group(0) = ? [pid 5910] +++ exited with 0 +++ [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5915] write(1, "executing program\n", 18 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... write resumed>) = 18 [pid 5848] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] memfd_create("syzkaller", 0 [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, [pid 5915] <... memfd_create resumed>) = 3 [pid 5911] <... munmap resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5915] <... mmap resumed>) = 0x7feda9000000 [pid 5848] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./9/binderfs") = 0 [pid 5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5911] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./9/file0" [pid 5911] <... ioctl resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./9" [pid 5911] close(3 [pid 5848] <... rmdir resumed>) = 0 [pid 5911] <... close resumed>) = 0 [ 194.595535][ T5848] [ 194.595535][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.595535][ T5848] [ 194.616433][ T5848] [ 194.616433][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.616433][ T5848] [ 194.617210][ T5911] loop4: detected capacity change from 0 to 32768 [pid 5911] close(4) = 0 [pid 5911] mkdir("./file0", 0777) = 0 [pid 5848] mkdir("./10", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5911] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5911] chdir("./file0") = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 194.733434][ T5911] [ 194.733434][ T5911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.733434][ T5911] [pid 5911] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 194.793355][ T5911] [ 194.793355][ T5911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.793355][ T5911] [ 194.820249][ T5911] [ 194.820249][ T5911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.820249][ T5911] [pid 5911] exit_group(0) = ? [pid 5911] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./9/binderfs") = 0 [pid 5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 194.860486][ T113] [ 194.860486][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.860486][ T113] [ 194.887076][ T5851] [ 194.887076][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.887076][ T5851] [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5912] <... write resumed>) = 16777216 [pid 5912] munmap(0x7feda9000000, 138412032) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5912] close(3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5912] <... close resumed>) = 0 [pid 5851] getdents64(4, [pid 5912] close(4) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./9/file0") = 0 [ 194.921664][ T5851] [ 194.921664][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.921664][ T5851] [ 194.955645][ T5912] loop2: detected capacity change from 0 to 32768 [pid 5912] mkdir("./file0", 0777 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./9" [pid 5912] <... mkdir resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./10", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5912] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached , child_tidptr=0x555584a2d750) = 5916 [pid 5913] <... write resumed>) = 16777216 [pid 5913] munmap(0x7feda9000000, 138412032 [pid 5916] set_robust_list(0x555584a2d760, 24) = 0 [pid 5916] chdir("./10") = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5913] <... munmap resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3 [ 195.047349][ T5912] [ 195.047349][ T5912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.047349][ T5912] [pid 5916] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5916] write(1, "executing program\n", 18 [pid 5912] <... mount resumed>) = 0 [pid 5916] <... write resumed>) = 18 [pid 5916] memfd_create("syzkaller", 0 [pid 5912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5912] chdir("./file0") = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5913] <... ioctl resumed>) = 0 [pid 5913] close(3) = 0 [pid 5913] close(4) = 0 [pid 5916] <... memfd_create resumed>) = 3 [pid 5912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5912] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5913] mkdir("./file0", 0777) = 0 [pid 5913] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5914] <... write resumed>) = 16777216 [ 195.101261][ T5913] loop0: detected capacity change from 0 to 32768 [ 195.138723][ T5912] [ 195.138723][ T5912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.138723][ T5912] [pid 5916] <... mmap resumed>) = 0x7feda9000000 [pid 5914] munmap(0x7feda9000000, 138412032 [pid 5913] <... mount resumed>) = 0 [pid 5913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5913] chdir("./file0") = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5914] <... munmap resumed>) = 0 [ 195.161950][ T5913] [ 195.161950][ T5913] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.161950][ T5913] [ 195.179999][ T5912] [ 195.179999][ T5912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.179999][ T5912] [pid 5913] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5912] <... lsetxattr resumed>) = 0 [pid 5912] exit_group(0) = ? [pid 5914] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5912] +++ exited with 0 +++ [ 195.213628][ T5913] [ 195.213628][ T5913] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.213628][ T5913] [ 195.227953][ T113] [ 195.227953][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.227953][ T113] [ 195.251400][ T5913] [ 195.251400][ T5913] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.251400][ T5913] [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5914] <... ioctl resumed>) = 0 [pid 5913] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5913] exit_group(0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5913] <... exit_group resumed>) = ? [pid 5913] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5851] <... close resumed>) = 0 [pid 5914] close(3 [pid 5849] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... restart_syscall resumed>) = 0 [pid 5914] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... openat resumed>) = 3 [pid 5847] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5914] close(4 [pid 5849] newfstatat(3, "", [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./9/binderfs") = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5914] <... close resumed>) = 0 [ 195.262916][ T5914] loop5: detected capacity change from 0 to 32768 [ 195.271030][ T113] [ 195.271030][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.271030][ T113] [pid 5849] getdents64(3, [pid 5914] mkdir("./file0", 0777 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./9/binderfs" [pid 5914] <... mkdir resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5917 ./strace-static-x86_64: Process 5917 attached [ 195.314371][ T5847] [ 195.314371][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.314371][ T5847] [ 195.340524][ T5849] [ 195.340524][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.340524][ T5849] [ 195.352459][ T5847] [ 195.352459][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.352459][ T5847] [pid 5914] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5917] set_robust_list(0x555584a2d760, 24 [pid 5847] <... umount2 resumed>) = 0 [pid 5917] <... set_robust_list resumed>) = 0 [pid 5847] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5917] chdir("./10" [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5917] <... chdir resumed>) = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... openat resumed>) = 4 [pid 5917] <... prctl resumed>) = 0 [pid 5917] setpgid(0, 0 [pid 5847] newfstatat(4, "", [pid 5917] <... setpgid resumed>) = 0 [pid 5915] <... write resumed>) = 16777216 [pid 5914] <... mount resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, [pid 5917] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5914] <... openat resumed>) = 3 [pid 5917] write(3, "1000", 4 [pid 5914] chdir("./file0" [pid 5917] <... write resumed>) = 4 [pid 5914] <... chdir resumed>) = 0 [pid 5917] close(3) = 0 [pid 5847] close(4 [pid 5917] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./9/file0" [pid 5917] <... symlink resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, [pid 5917] write(1, "executing program\n", 18 [ 195.354185][ T5914] [ 195.354185][ T5914] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.354185][ T5914] [ 195.380142][ T5849] [ 195.380142][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.380142][ T5849] executing program [pid 5914] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5917] <... write resumed>) = 18 [pid 5915] munmap(0x7feda9000000, 138412032 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5917] memfd_create("syzkaller", 0 [pid 5914] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] close(3 [pid 5917] <... memfd_create resumed>) = 3 [pid 5914] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./9") = 0 [pid 5847] mkdir("./10", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5917] <... mmap resumed>) = 0x7feda9000000 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5915] <... munmap resumed>) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 195.420947][ T5914] [ 195.420947][ T5914] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.420947][ T5914] [ 195.449165][ T5914] [ 195.449165][ T5914] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.449165][ T5914] [pid 5849] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5915] <... openat resumed>) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5914] <... lsetxattr resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5915] <... ioctl resumed>) = 0 [pid 5915] close(3) = 0 [pid 5915] close(4 [pid 5849] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5915] <... close resumed>) = 0 [pid 5914] exit_group(0 [pid 5849] <... openat resumed>) = 4 [pid 5914] <... exit_group resumed>) = ? [pid 5849] newfstatat(4, "", [pid 5915] mkdir("./file0", 0777) = 0 [pid 5914] +++ exited with 0 +++ [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 5915] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./9/file0" [pid 5852] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... rmdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(3, [pid 5852] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5849] close(3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... close resumed>) = 0 [pid 5852] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] rmdir("./9" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... rmdir resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5849] mkdir("./10", 0777 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./9/binderfs") = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5852] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 195.473087][ T5915] loop3: detected capacity change from 0 to 32768 [ 195.491058][ T112] [ 195.491058][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.491058][ T112] [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5915] <... mount resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5915] chdir("./file0") = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... ioctl resumed>) = 0 [pid 5915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] close(3 [ 195.537396][ T5915] [ 195.537396][ T5915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.537396][ T5915] [ 195.560735][ T5852] [ 195.560735][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.560735][ T5852] [ 195.572551][ T5915] [ 195.572551][ T5915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.572551][ T5915] [ 195.602703][ T5852] [ 195.602703][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.602703][ T5852] [ 195.620479][ T5915] [ 195.620479][ T5915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.620479][ T5915] [pid 5915] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5915] exit_group(0 [pid 5852] <... umount2 resumed>) = 0 [pid 5915] <... exit_group resumed>) = ? [pid 5915] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... openat resumed>) = 3 [pid 5852] newfstatat(AT_FDCWD, "./9/file0", [pid 5850] newfstatat(3, "", [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 195.663771][ T112] [ 195.663771][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.663771][ T112] [pid 5850] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5852] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5850] unlink("./9/binderfs" [pid 5852] newfstatat(4, "", [pid 5850] <... unlink resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./9/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./9") = 0 [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] mkdir("./10", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 195.705927][ T5850] [ 195.705927][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.705927][ T5850] [ 195.721170][ T5850] [ 195.721170][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.721170][ T5850] [pid 5852] close(3 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./9/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./9") = 0 [pid 5850] mkdir("./10", 0777 [pid 5847] <... close resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached [pid 5918] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5918 [pid 5918] <... set_robust_list resumed>) = 0 [pid 5918] chdir("./10") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5849] <... close resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5918] write(3, "1000", 4./strace-static-x86_64: Process 5919 attached ) = 4 [pid 5918] close(3 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5919 [pid 5918] <... close resumed>) = 0 [pid 5919] set_robust_list(0x555584a2d760, 24 [pid 5918] symlink("/dev/binderfs", "./binderfs" [pid 5919] <... set_robust_list resumed>) = 0 [pid 5919] chdir("./10" [pid 5918] <... symlink resumed>) = 0 [pid 5916] <... write resumed>) = 16777216 [pid 5919] <... chdir resumed>) = 0 [pid 5918] write(1, "executing program\n", 18executing program [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5918] <... write resumed>) = 18 [pid 5916] munmap(0x7feda9000000, 138412032 [pid 5918] memfd_create("syzkaller", 0 [pid 5919] <... prctl resumed>) = 0 [pid 5918] <... memfd_create resumed>) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5919] setpgid(0, 0 [pid 5918] <... mmap resumed>) = 0x7feda9000000 [pid 5919] <... setpgid resumed>) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4 [pid 5916] <... munmap resumed>) = 0 [pid 5919] <... write resumed>) = 4 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5919] write(1, "executing program\n", 18 [pid 5916] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5919] <... write resumed>) = 18 [pid 5916] <... openat resumed>) = 4 [pid 5919] memfd_create("syzkaller", 0 [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 5919] <... memfd_create resumed>) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5916] <... ioctl resumed>) = 0 [pid 5919] <... mmap resumed>) = 0x7feda9000000 [pid 5916] close(3) = 0 [pid 5916] close(4) = 0 [pid 5916] mkdir("./file0", 0777) = 0 [ 195.965800][ T5916] loop1: detected capacity change from 0 to 32768 [pid 5916] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5916] chdir("./file0") = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5852] <... close resumed>) = 0 [ 196.014801][ T5916] [ 196.014801][ T5916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.014801][ T5916] [pid 5916] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5920 ./strace-static-x86_64: Process 5920 attached [pid 5920] set_robust_list(0x555584a2d760, 24) = 0 [pid 5920] chdir("./10") = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5920] setpgid(0, 0) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5920] write(3, "1000", 4) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5920] write(1, "executing program\n", 18executing program ) = 18 [pid 5920] memfd_create("syzkaller", 0) = 3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5921 attached , child_tidptr=0x555584a2d750) = 5921 [ 196.071638][ T5916] [ 196.071638][ T5916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.071638][ T5916] [ 196.106514][ T5916] [ 196.106514][ T5916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.106514][ T5916] [pid 5921] set_robust_list(0x555584a2d760, 24 [pid 5916] <... lsetxattr resumed>) = 0 [pid 5921] <... set_robust_list resumed>) = 0 [pid 5921] chdir("./10") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5916] exit_group(0 [pid 5921] <... openat resumed>) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5916] <... exit_group resumed>) = ? [pid 5921] write(1, "executing program\n", 18) = 18 [pid 5921] memfd_create("syzkaller", 0) = 3 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5916] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 196.151851][ T113] [ 196.151851][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.151851][ T113] [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5917] <... write resumed>) = 16777216 [pid 5848] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5917] munmap(0x7feda9000000, 138412032 [pid 5848] unlink("./10/binderfs") = 0 [pid 5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5917] <... munmap resumed>) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5917] close(3) = 0 [pid 5917] close(4) = 0 [pid 5917] mkdir("./file0", 0777) = 0 [ 196.272899][ T5848] [ 196.272899][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.272899][ T5848] [ 196.295578][ T5917] loop4: detected capacity change from 0 to 32768 [ 196.302358][ T5848] [ 196.302358][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.302358][ T5848] [pid 5917] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5917] <... mount resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] newfstatat(4, "", [pid 5917] <... openat resumed>) = 3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5917] chdir("./file0" [pid 5848] getdents64(4, [pid 5917] <... chdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 196.338679][ T5917] [ 196.338679][ T5917] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.338679][ T5917] [pid 5917] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5917] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./10/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./10") = 0 [pid 5848] mkdir("./11", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5917] <... lsetxattr resumed>) = 0 [ 196.379197][ T5917] [ 196.379197][ T5917] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.379197][ T5917] [ 196.415037][ T5917] [ 196.415037][ T5917] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.415037][ T5917] [pid 5917] exit_group(0 [pid 5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5917] <... exit_group resumed>) = ? [pid 5917] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=34 /* 0.34 s */} --- [pid 5851] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 196.473699][ T112] [ 196.473699][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.473699][ T112] [pid 5851] unlink("./10/binderfs") = 0 [ 196.537868][ T5851] [ 196.537868][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.537868][ T5851] [ 196.570295][ T5851] [ 196.570295][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.570295][ T5851] [pid 5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./10/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./10") = 0 [pid 5851] mkdir("./11", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5918] <... write resumed>) = 16777216 [pid 5918] munmap(0x7feda9000000, 138412032 [pid 5919] <... write resumed>) = 16777216 [pid 5919] munmap(0x7feda9000000, 138412032 [pid 5918] <... munmap resumed>) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5922 attached [pid 5919] <... munmap resumed>) = 0 [pid 5918] <... ioctl resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5922 [pid 5918] close(3) = 0 [pid 5918] close(4) = 0 [pid 5918] mkdir("./file0", 0777 [pid 5922] set_robust_list(0x555584a2d760, 24) = 0 [pid 5918] <... mkdir resumed>) = 0 [pid 5922] chdir("./11" [pid 5918] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5922] <... chdir resumed>) = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] setpgid(0, 0 [pid 5919] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5922] <... setpgid resumed>) = 0 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5919] <... openat resumed>) = 4 [ 196.758328][ T5918] loop0: detected capacity change from 0 to 32768 [pid 5919] ioctl(4, LOOP_SET_FD, 3 [pid 5922] <... openat resumed>) = 3 [pid 5922] write(3, "1000", 4) = 4 [pid 5922] close(3) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs" [pid 5919] <... ioctl resumed>) = 0 [pid 5922] <... symlink resumed>) = 0 [pid 5919] close(3) = 0 [pid 5919] close(4) = 0 [pid 5919] mkdir("./file0", 0777) = 0 executing program [pid 5919] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5922] write(1, "executing program\n", 18) = 18 [pid 5922] memfd_create("syzkaller", 0) = 3 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5919] <... mount resumed>) = 0 [pid 5922] <... mmap resumed>) = 0x7feda9000000 [pid 5919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5919] chdir("./file0") = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 196.813800][ T5919] loop2: detected capacity change from 0 to 32768 [ 196.835382][ T5918] [ 196.835382][ T5918] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.835382][ T5918] [ 196.844820][ T5919] [ 196.844820][ T5919] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.844820][ T5919] [pid 5919] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5918] <... mount resumed>) = 0 [pid 5918] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5918] chdir("./file0") = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 196.887178][ T5919] [ 196.887178][ T5919] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.887178][ T5919] [ 196.911697][ T5919] [ 196.911697][ T5919] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.911697][ T5919] [ 196.929106][ T5918] [ 196.929106][ T5918] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5918] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5920] <... write resumed>) = 16777216 [pid 5920] munmap(0x7feda9000000, 138412032 [pid 5919] <... lsetxattr resumed>) = 0 [pid 5919] exit_group(0) = ? [pid 5919] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5849] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5920] <... munmap resumed>) = 0 [pid 5849] unlink("./10/binderfs") = 0 [pid 5849] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5920] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5918] <... lsetxattr resumed>) = 0 [ 196.929106][ T5918] [ 196.950005][ T5918] [ 196.950005][ T5918] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.950005][ T5918] [ 196.973106][ T112] [ 196.973106][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.973106][ T112] [pid 5918] exit_group(0) = ? [pid 5918] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5921] <... write resumed>) = 16777216 [pid 5920] <... ioctl resumed>) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5921] munmap(0x7feda9000000, 138412032 [pid 5920] close(3 [pid 5847] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./10/binderfs") = 0 [pid 5847] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5920] <... close resumed>) = 0 [pid 5920] close(4 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5920] <... close resumed>) = 0 ./strace-static-x86_64: Process 5923 attached [ 197.006125][ T5920] loop5: detected capacity change from 0 to 32768 [ 197.013359][ T113] [ 197.013359][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.013359][ T113] [ 197.024157][ T5849] [ 197.024157][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.024157][ T5849] [ 197.045369][ T5849] [ 197.045369][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.045369][ T5849] [pid 5920] mkdir("./file0", 0777 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5923 [pid 5923] set_robust_list(0x555584a2d760, 24 [pid 5920] <... mkdir resumed>) = 0 [pid 5920] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5923] <... set_robust_list resumed>) = 0 [pid 5923] chdir("./11") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5923] write(1, "executing program\n", 18) = 18 [pid 5923] memfd_create("syzkaller", 0) = 3 [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5921] <... munmap resumed>) = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 197.055966][ T5847] [ 197.055966][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.055966][ T5847] [ 197.070963][ T5847] [ 197.070963][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.070963][ T5847] [pid 5921] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5921] close(3) = 0 [pid 5921] close(4) = 0 [pid 5921] mkdir("./file0", 0777) = 0 [pid 5921] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./10/file0" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... rmdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] getdents64(3, [pid 5849] newfstatat(4, "", [pid 5920] <... mount resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] close(3 [pid 5920] <... openat resumed>) = 3 [pid 5849] getdents64(4, [pid 5847] <... close resumed>) = 0 [pid 5920] chdir("./file0" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5920] <... chdir resumed>) = 0 [pid 5849] close(4 [pid 5847] rmdir("./10" [pid 5920] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] <... close resumed>) = 0 [pid 5920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] rmdir("./10/file0" [pid 5847] <... rmdir resumed>) = 0 [pid 5920] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] mkdir("./11", 0777 [pid 5849] <... rmdir resumed>) = 0 [ 197.112741][ T5921] loop3: detected capacity change from 0 to 32768 [ 197.116924][ T5920] [ 197.116924][ T5920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.116924][ T5920] [ 197.141726][ T5921] [ 197.141726][ T5921] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.141726][ T5921] [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5921] <... mount resumed>) = 0 [pid 5849] close(3 [pid 5921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... close resumed>) = 0 [pid 5921] <... openat resumed>) = 3 [pid 5921] chdir("./file0") = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] rmdir("./10" [pid 5921] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... rmdir resumed>) = 0 [ 197.173030][ T5920] [ 197.173030][ T5920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.173030][ T5920] [ 197.212105][ T5921] [ 197.212105][ T5921] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.212105][ T5921] [pid 5849] mkdir("./11", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 197.215860][ T5920] [ 197.215860][ T5920] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.215860][ T5920] [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5920] <... lsetxattr resumed>) = 0 [pid 5849] close(3 [pid 5921] <... lsetxattr resumed>) = 0 [pid 5921] exit_group(0) = ? [pid 5921] +++ exited with 0 +++ [ 197.264941][ T5921] [ 197.264941][ T5921] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.264941][ T5921] [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5920] exit_group(0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5920] <... exit_group resumed>) = ? [pid 5920] +++ exited with 0 +++ [pid 5850] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5850] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5852] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(3, "", [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] unlink("./10/binderfs" [pid 5852] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./10/binderfs" [pid 5850] <... unlink resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5852] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 197.306018][ T112] [ 197.306018][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.306018][ T112] [ 197.317554][ T113] [ 197.317554][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.317554][ T113] [ 197.367048][ T5852] [ 197.367048][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.367048][ T5852] [ 197.378002][ T5850] [ 197.378002][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.378002][ T5850] [ 197.400459][ T5852] [ 197.400459][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.400459][ T5852] [ 197.410006][ T5850] [pid 5850] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5850] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] <... umount2 resumed>) = 0 [ 197.410006][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.410006][ T5850] [pid 5850] newfstatat(4, "", [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] getdents64(4, [pid 5852] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(4, [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] close(4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... close resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] rmdir("./10/file0" [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./10/file0" [pid 5850] <... rmdir resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, [pid 5850] getdents64(3, [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... close resumed>) = 0 [pid 5850] close(3 [pid 5852] rmdir("./10") = 0 [pid 5850] <... close resumed>) = 0 [pid 5852] mkdir("./11", 0777 [pid 5850] rmdir("./10" [pid 5852] <... mkdir resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./11", 0777 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... mkdir resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... ioctl resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5924 ./strace-static-x86_64: Process 5924 attached [pid 5850] close(3 [pid 5924] set_robust_list(0x555584a2d760, 24) = 0 [pid 5924] chdir("./11") = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5849] <... close resumed>) = 0 [pid 5924] write(1, "executing program\n", 18executing program ) = 18 [pid 5924] memfd_create("syzkaller", 0) = 3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached , child_tidptr=0x555584a2d750) = 5925 [pid 5925] set_robust_list(0x555584a2d760, 24) = 0 [pid 5925] chdir("./11") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] write(1, "executing program\n", 18executing program ) = 18 [pid 5925] memfd_create("syzkaller", 0) = 3 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5922] <... write resumed>) = 16777216 [pid 5922] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 5922] <... munmap resumed>) = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5922] <... openat resumed>) = 4 [pid 5922] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5926 ./strace-static-x86_64: Process 5926 attached [pid 5922] <... ioctl resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5926] set_robust_list(0x555584a2d760, 24 [pid 5922] close(3 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5922] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5926] chdir("./11" [pid 5922] close(4./strace-static-x86_64: Process 5927 attached ) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5927 [pid 5927] set_robust_list(0x555584a2d760, 24) = 0 [pid 5927] chdir("./11") = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] mkdir("./file0", 0777 [pid 5926] <... chdir resumed>) = 0 [pid 5927] setpgid(0, 0) = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5922] <... mkdir resumed>) = 0 [pid 5926] <... prctl resumed>) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5926] setpgid(0, 0 [pid 5922] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5926] <... setpgid resumed>) = 0 [pid 5927] <... openat resumed>) = 3 [pid 5927] write(3, "1000", 4 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5927] <... write resumed>) = 4 [pid 5927] close(3 [pid 5926] <... openat resumed>) = 3 [pid 5927] <... close resumed>) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5926] write(3, "1000", 4) = 4 [ 197.782164][ T5922] loop1: detected capacity change from 0 to 32768 [pid 5927] write(1, "executing program\n", 18executing program ) = 18 [pid 5927] memfd_create("syzkaller", 0) = 3 [pid 5926] close(3) = 0 [pid 5926] symlink("/dev/binderfs", "./binderfs" [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5926] <... symlink resumed>) = 0 [pid 5926] write(1, "executing program\n", 18executing program ) = 18 [pid 5926] memfd_create("syzkaller", 0) = 3 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5922] <... mount resumed>) = 0 [pid 5922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5922] chdir("./file0") = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 197.827961][ T5922] [ 197.827961][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.827961][ T5922] [pid 5922] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5923] <... write resumed>) = 16777216 [pid 5923] munmap(0x7feda9000000, 138412032) = 0 [ 197.880325][ T5922] [ 197.880325][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.880325][ T5922] [ 197.914974][ T5922] [ 197.914974][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.914974][ T5922] [pid 5922] <... lsetxattr resumed>) = 0 [pid 5922] exit_group(0) = ? [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5923] ioctl(4, LOOP_SET_FD, 3 [pid 5922] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5848] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./11/binderfs") = 0 [pid 5848] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5923] <... ioctl resumed>) = 0 [pid 5923] close(3) = 0 [pid 5923] close(4) = 0 [pid 5923] mkdir("./file0", 0777) = 0 [ 197.960566][ T112] [ 197.960566][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.960566][ T112] [ 197.982141][ T5923] loop4: detected capacity change from 0 to 32768 [pid 5923] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 198.028010][ T5848] [ 198.028010][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.028010][ T5848] [ 198.059650][ T5848] [ 198.059650][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.059650][ T5848] [ 198.072342][ T5923] [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5923] <... mount resumed>) = 0 [pid 5923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5923] chdir("./file0") = 0 [pid 5923] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5923] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./11/file0") = 0 [ 198.072342][ T5923] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.072342][ T5923] [ 198.092368][ T5923] [ 198.092368][ T5923] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.092368][ T5923] [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] close(3) = 0 [pid 5848] rmdir("./11") = 0 [pid 5848] mkdir("./12", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5923] <... lsetxattr resumed>) = 0 [pid 5923] exit_group(0) = ? [pid 5923] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=19 /* 0.19 s */} --- [ 198.140515][ T5923] [ 198.140515][ T5923] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.140515][ T5923] [pid 5851] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./11/binderfs") = 0 [ 198.190616][ T113] [ 198.190616][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.190616][ T113] [ 198.250720][ T5851] [ 198.250720][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.250720][ T5851] [ 198.280950][ T5851] [ 198.280950][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.280950][ T5851] [pid 5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./11/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./11") = 0 [pid 5851] mkdir("./12", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5924] <... write resumed>) = 16777216 [pid 5924] munmap(0x7feda9000000, 138412032) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5924] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5924] <... ioctl resumed>) = 0 [pid 5924] close(3) = 0 [pid 5924] close(4) = 0 [pid 5924] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 5928 attached [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5928 [pid 5924] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5928] set_robust_list(0x555584a2d760, 24) = 0 [pid 5928] chdir("./12") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5928] write(1, "executing program\n", 18) = 18 [ 198.475295][ T5924] loop0: detected capacity change from 0 to 32768 [ 198.512079][ T5924] [ 198.512079][ T5924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.512079][ T5924] [pid 5928] memfd_create("syzkaller", 0) = 3 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5924] <... mount resumed>) = 0 [pid 5924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5924] chdir("./file0") = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5924] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5925] <... write resumed>) = 16777216 [ 198.580640][ T5924] [ 198.580640][ T5924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.580640][ T5924] [ 198.613601][ T5924] [ 198.613601][ T5924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.613601][ T5924] [pid 5925] munmap(0x7feda9000000, 138412032 [pid 5926] <... write resumed>) = 16777216 [pid 5924] <... lsetxattr resumed>) = 0 [pid 5924] exit_group(0) = ? [pid 5925] <... munmap resumed>) = 0 [pid 5924] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5927] <... write resumed>) = 16777216 [pid 5926] munmap(0x7feda9000000, 138412032 [pid 5925] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5925] ioctl(4, LOOP_SET_FD, 3 [pid 5847] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5927] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5925] <... ioctl resumed>) = 0 [pid 5847] newfstatat(3, "", [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] mkdir("./file0", 0777) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5925] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 198.658972][ T112] [ 198.658972][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.658972][ T112] [ 198.691156][ T5925] loop2: detected capacity change from 0 to 32768 [pid 5847] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5926] <... munmap resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5927] <... munmap resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./11/binderfs" [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5927] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5926] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] <... unlink resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5929 ./strace-static-x86_64: Process 5929 attached [pid 5927] <... openat resumed>) = 4 [pid 5926] <... openat resumed>) = 4 [pid 5847] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5927] ioctl(4, LOOP_SET_FD, 3 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5925] <... mount resumed>) = 0 [pid 5929] set_robust_list(0x555584a2d760, 24 [pid 5927] <... ioctl resumed>) = 0 [pid 5926] <... ioctl resumed>) = 0 [pid 5927] close(3 [pid 5925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5927] <... close resumed>) = 0 [pid 5925] <... openat resumed>) = 3 [pid 5927] close(4) = 0 [pid 5925] chdir("./file0" [pid 5927] mkdir("./file0", 0777 [pid 5925] <... chdir resumed>) = 0 [pid 5927] <... mkdir resumed>) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5929] <... set_robust_list resumed>) = 0 [pid 5927] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 198.724903][ T5925] [ 198.724903][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.724903][ T5925] [ 198.745427][ T5927] loop3: detected capacity change from 0 to 32768 [ 198.752809][ T5926] loop5: detected capacity change from 0 to 32768 [ 198.761217][ T5847] [ 198.761217][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.761217][ T5847] [pid 5926] close(3 [pid 5929] chdir("./12" [pid 5926] <... close resumed>) = 0 [pid 5925] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5929] <... chdir resumed>) = 0 [pid 5926] close(4 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5926] <... close resumed>) = 0 [pid 5926] mkdir("./file0", 0777 [pid 5929] <... prctl resumed>) = 0 [pid 5929] setpgid(0, 0 [pid 5926] <... mkdir resumed>) = 0 [pid 5929] <... setpgid resumed>) = 0 [pid 5926] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = 0 [ 198.774044][ T5847] [ 198.774044][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.774044][ T5847] [ 198.775562][ T5925] [ 198.775562][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.775562][ T5925] [ 198.808466][ T5925] [ 198.808466][ T5925] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.808466][ T5925] [pid 5847] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5925] <... lsetxattr resumed>) = 0 [pid 5929] <... openat resumed>) = 3 [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5925] exit_group(0 [pid 5847] newfstatat(AT_FDCWD, "./11/file0", [pid 5929] write(3, "1000", 4 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... write resumed>) = 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5929] close(3 [pid 5925] <... exit_group resumed>) = ? [pid 5847] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 5929] <... close resumed>) = 0 [pid 5925] +++ exited with 0 +++ [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs" [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5847] getdents64(4, [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5929] <... symlink resumed>) = 0 executing program [pid 5849] <... restart_syscall resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 198.828437][ T113] [ 198.828437][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.828437][ T113] [ 198.845089][ T5926] [ 198.845089][ T5926] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.845089][ T5926] [ 198.858686][ T5927] [ 198.858686][ T5927] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.858686][ T5927] [pid 5929] write(1, "executing program\n", 18 [pid 5847] getdents64(4, [pid 5929] <... write resumed>) = 18 [pid 5929] memfd_create("syzkaller", 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5929] <... memfd_create resumed>) = 3 [pid 5847] close(4 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5929] <... mmap resumed>) = 0x7feda9000000 [pid 5847] rmdir("./11/file0" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... rmdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5847] close(3) = 0 [pid 5849] newfstatat(3, "", [pid 5847] rmdir("./11") = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] mkdir("./12", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5927] <... mount resumed>) = 0 [pid 5927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./file0") = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5926] <... mount resumed>) = 0 [pid 5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file0") = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5927] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] unlink("./11/binderfs") = 0 [pid 5849] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 198.934025][ T5927] [ 198.934025][ T5927] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.934025][ T5927] [ 198.944929][ T5849] [ 198.944929][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.944929][ T5849] [ 198.951307][ T5926] [ 198.951307][ T5926] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.951307][ T5926] [ 198.980257][ T5927] [pid 5926] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5927] <... lsetxattr resumed>) = 0 [pid 5927] exit_group(0) = ? [pid 5927] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./11/binderfs") = 0 [ 198.980257][ T5927] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.980257][ T5927] [ 198.980808][ T5849] [ 198.980808][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.980808][ T5849] [ 198.999985][ T5926] [ 198.999985][ T5926] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.999985][ T5926] [ 199.020559][ T112] [ 199.020559][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.020559][ T112] [pid 5850] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5926] <... lsetxattr resumed>) = 0 [pid 5926] exit_group(0) = ? [pid 5926] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5852] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./11/binderfs") = 0 [pid 5852] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5850] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./11/file0") = 0 [pid 5849] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 199.051549][ T113] [ 199.051549][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.051549][ T113] [ 199.071974][ T5850] [ 199.071974][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.071974][ T5850] [ 199.085746][ T5850] [ 199.085746][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.085746][ T5850] [pid 5849] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(3, [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] close(3 [pid 5849] <... openat resumed>) = 4 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./11") = 0 [pid 5850] mkdir("./12", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./11/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [ 199.150609][ T5852] [ 199.150609][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.150609][ T5852] [ 199.190050][ T5852] [ 199.190050][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.190050][ T5852] [pid 5849] rmdir("./11") = 0 [pid 5849] mkdir("./12", 0777 [pid 5847] <... close resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5930 attached ) = 0 [pid 5930] set_robust_list(0x555584a2d760, 24 [pid 5849] close(3 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5930 [pid 5930] <... set_robust_list resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5930] chdir("./12") = 0 [pid 5852] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 5930] setpgid(0, 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5930] <... setpgid resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 5928] <... write resumed>) = 16777216 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./11/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./11") = 0 [pid 5852] mkdir("./12", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] munmap(0x7feda9000000, 138412032 [pid 5930] write(3, "1000", 4) = 4 [pid 5930] close(3) = 0 [pid 5930] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5930] write(1, "executing program\n", 18) = 18 [pid 5930] memfd_create("syzkaller", 0) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5928] <... munmap resumed>) = 0 [pid 5930] <... mmap resumed>) = 0x7feda9000000 [pid 5928] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5928] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5928] close(3) = 0 [pid 5928] close(4) = 0 [pid 5928] mkdir("./file0", 0777) = 0 [ 199.364318][ T5928] loop1: detected capacity change from 0 to 32768 [pid 5928] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5931 ./strace-static-x86_64: Process 5931 attached [pid 5928] <... mount resumed>) = 0 [pid 5931] set_robust_list(0x555584a2d760, 24) = 0 [pid 5931] chdir("./12" [pid 5928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5931] <... chdir resumed>) = 0 [pid 5928] <... openat resumed>) = 3 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5928] chdir("./file0" [pid 5931] <... prctl resumed>) = 0 [pid 5931] setpgid(0, 0 [pid 5928] <... chdir resumed>) = 0 [pid 5931] <... setpgid resumed>) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5931] <... openat resumed>) = 3 [pid 5928] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5931] write(1, "executing program\n", 18) = 18 [pid 5931] memfd_create("syzkaller", 0) = 3 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 199.461414][ T5928] [ 199.461414][ T5928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.461414][ T5928] [ 199.499045][ T5928] [ 199.499045][ T5928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.499045][ T5928] [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5932 attached [pid 5932] set_robust_list(0x555584a2d760, 24) = 0 [pid 5932] chdir("./12" [pid 5928] <... lsetxattr resumed>) = 0 [pid 5932] <... chdir resumed>) = 0 [pid 5928] exit_group(0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5932] setpgid(0, 0 [pid 5928] <... exit_group resumed>) = ? [pid 5932] <... setpgid resumed>) = 0 [pid 5928] +++ exited with 0 +++ [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] <... close resumed>) = 0 [pid 5932] write(3, "1000", 4) = 4 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5932] close(3./strace-static-x86_64: Process 5933 attached ) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5932 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5933 [pid 5933] <... set_robust_list resumed>) = 0 [pid 5932] write(1, "executing program\n", 18 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5933] chdir("./12"executing program [pid 5848] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5932] <... write resumed>) = 18 [ 199.533949][ T5928] [ 199.533949][ T5928] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.533949][ T5928] [ 199.571746][ T112] [ 199.571746][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.571746][ T112] [pid 5932] memfd_create("syzkaller", 0 [pid 5933] <... chdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] newfstatat(3, "", [pid 5933] <... prctl resumed>) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5932] <... memfd_create resumed>) = 3 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5933] <... openat resumed>) = 3 [pid 5932] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] write(1, "executing program\n", 18executing program ) = 18 [pid 5933] memfd_create("syzkaller", 0 [pid 5848] getdents64(3, [pid 5933] <... memfd_create resumed>) = 3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... write resumed>) = 16777216 [pid 5929] munmap(0x7feda9000000, 138412032 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5933] <... mmap resumed>) = 0x7feda9000000 [pid 5848] unlink("./12/binderfs" [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... munmap resumed>) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5929] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5929] <... close resumed>) = 0 [pid 5848] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] close(4) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5929] mkdir("./file0", 0777 [pid 5848] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5929] <... mkdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 199.657692][ T5848] [ 199.657692][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.657692][ T5848] [ 199.679072][ T5848] [ 199.679072][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.679072][ T5848] [ 199.692262][ T5929] loop4: detected capacity change from 0 to 32768 [pid 5848] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5929] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./12/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./12") = 0 [pid 5848] mkdir("./13", 0777) = 0 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 199.754084][ T5929] [ 199.754084][ T5929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.754084][ T5929] [pid 5848] close(3 [pid 5929] <... mount resumed>) = 0 [pid 5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5929] chdir("./file0") = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5929] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 199.837261][ T5929] [ 199.837261][ T5929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.837261][ T5929] [ 199.870422][ T5929] [ 199.870422][ T5929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.870422][ T5929] [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5929] exit_group(0) = ? [pid 5929] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./12/binderfs") = 0 [ 199.910937][ T113] [ 199.910937][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.910937][ T113] [pid 5851] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 199.963172][ T5851] [ 199.963172][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.963172][ T5851] [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached , child_tidptr=0x555584a2d750) = 5934 [pid 5934] set_robust_list(0x555584a2d760, 24 [pid 5930] <... write resumed>) = 16777216 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5934] chdir("./13" [pid 5930] munmap(0x7feda9000000, 138412032 [pid 5851] <... umount2 resumed>) = 0 [pid 5934] <... chdir resumed>) = 0 [ 200.010020][ T5851] [ 200.010020][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.010020][ T5851] [pid 5851] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5934] <... prctl resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./12/file0", [pid 5934] setpgid(0, 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5934] <... setpgid resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5934] <... openat resumed>) = 3 [pid 5934] write(3, "1000", 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5934] <... write resumed>) = 4 [pid 5851] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5934] close(3 [pid 5851] <... openat resumed>) = 4 [pid 5934] <... close resumed>) = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5851] newfstatat(4, "", [pid 5934] <... symlink resumed>) = 0 [pid 5934] write(1, "executing program\n", 18executing program ) = 18 [pid 5934] memfd_create("syzkaller", 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, [pid 5934] <... memfd_create resumed>) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5930] <... munmap resumed>) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./12/file0") = 0 [pid 5851] getdents64(3, [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5930] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5930] close(3 [pid 5851] close(3 [pid 5930] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5930] close(4 [pid 5851] rmdir("./12" [pid 5930] <... close resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5930] mkdir("./file0", 0777 [pid 5851] mkdir("./13", 0777 [pid 5930] <... mkdir resumed>) = 0 [pid 5930] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 200.122724][ T5930] loop0: detected capacity change from 0 to 32768 [ 200.172770][ T5930] [ 200.172770][ T5930] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.172770][ T5930] [pid 5851] close(3 [pid 5930] <... mount resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5930] chdir("./file0") = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5930] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5930] exit_group(0) = ? [pid 5930] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [ 200.231182][ T5930] [ 200.231182][ T5930] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.231182][ T5930] [ 200.259994][ T5930] [ 200.259994][ T5930] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.259994][ T5930] [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5931] <... write resumed>) = 16777216 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./12/binderfs") = 0 [pid 5847] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 200.306683][ T112] [ 200.306683][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.306683][ T112] [ 200.340348][ T5847] [ 200.340348][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.340348][ T5847] [pid 5931] munmap(0x7feda9000000, 138412032) = 0 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5932] <... write resumed>) = 16777216 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./12/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./12" [pid 5931] <... ioctl resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5931] close(3 [pid 5847] mkdir("./13", 0777 [pid 5931] <... close resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5932] munmap(0x7feda9000000, 138412032 [pid 5931] close(4) = 0 [pid 5931] mkdir("./file0", 0777) = 0 [pid 5933] <... write resumed>) = 16777216 [pid 5931] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 200.360185][ T5847] [ 200.360185][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.360185][ T5847] [ 200.391599][ T5931] loop3: detected capacity change from 0 to 32768 [pid 5847] close(3 [pid 5933] munmap(0x7feda9000000, 138412032 [pid 5932] <... munmap resumed>) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 200.446965][ T5931] [ 200.446965][ T5931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.446965][ T5931] [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5931] <... mount resumed>) = 0 [pid 5933] <... munmap resumed>) = 0 [pid 5932] <... ioctl resumed>) = 0 [pid 5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5931] chdir("./file0") = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5932] close(3 [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5933] <... openat resumed>) = 4 [pid 5932] <... close resumed>) = 0 [pid 5931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5933] ioctl(4, LOOP_SET_FD, 3 [pid 5932] close(4 [pid 5931] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5932] <... close resumed>) = 0 [pid 5933] <... ioctl resumed>) = 0 [pid 5932] mkdir("./file0", 0777 [pid 5933] close(3 [pid 5932] <... mkdir resumed>) = 0 [pid 5932] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5933] <... close resumed>) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./file0", 0777) = 0 [pid 5933] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5935 ./strace-static-x86_64: Process 5935 attached [ 200.496560][ T5932] loop2: detected capacity change from 0 to 32768 [ 200.513664][ T5933] loop5: detected capacity change from 0 to 32768 [ 200.513894][ T5931] [ 200.513894][ T5931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.513894][ T5931] [pid 5935] set_robust_list(0x555584a2d760, 24) = 0 [pid 5935] chdir("./13") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5935] write(1, "executing program\n", 18) = 18 [pid 5935] memfd_create("syzkaller", 0) = 3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 200.576143][ T5932] [ 200.576143][ T5932] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.576143][ T5932] [ 200.590519][ T5931] [ 200.590519][ T5931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.590519][ T5931] [ 200.608892][ T5933] [ 200.608892][ T5933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.608892][ T5933] [pid 5932] <... mount resumed>) = 0 [pid 5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file0") = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5932] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5933] <... mount resumed>) = 0 [pid 5931] <... lsetxattr resumed>) = 0 [pid 5933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 200.632668][ T5932] [ 200.632668][ T5932] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.632668][ T5932] [ 200.650172][ T112] [ 200.650172][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.650172][ T112] [ 200.674684][ T5932] [ 200.674684][ T5932] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5931] exit_group(0 [pid 5933] <... openat resumed>) = 3 [pid 5931] <... exit_group resumed>) = ? [ 200.674684][ T5932] [pid 5933] chdir("./file0") = 0 [pid 5931] +++ exited with 0 +++ [pid 5933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5932] <... lsetxattr resumed>) = 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5933] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5932] exit_group(0) = ? [pid 5932] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 3 [pid 5849] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5849] newfstatat(3, "", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 200.711313][ T113] [ 200.711313][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.711313][ T113] [ 200.711336][ T5933] [ 200.711336][ T5933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.711336][ T5933] [pid 5849] getdents64(3, [pid 5850] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5849] unlink("./12/binderfs" [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./12/binderfs" [pid 5849] <... unlink resumed>) = 0 [pid 5849] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... unlink resumed>) = 0 [pid 5850] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5933] <... lsetxattr resumed>) = 0 [pid 5933] exit_group(0) = ? [pid 5933] +++ exited with 0 +++ [ 200.755137][ T5933] [ 200.755137][ T5933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.755137][ T5933] [ 200.781216][ T5850] [ 200.781216][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.781216][ T5850] [ 200.792020][ T112] [ 200.792020][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.792020][ T112] [ 200.802862][ T5849] [pid 5847] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5936 ./strace-static-x86_64: Process 5936 attached [pid 5852] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./12/binderfs") = 0 [pid 5852] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] set_robust_list(0x555584a2d760, 24) = 0 [pid 5936] chdir("./13") = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0 [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5934] <... write resumed>) = 16777216 [pid 5936] <... setpgid resumed>) = 0 [ 200.802862][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.802862][ T5849] [ 200.810684][ T5850] [ 200.810684][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.810684][ T5850] [ 200.824944][ T5849] [ 200.824944][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.824944][ T5849] [ 200.840377][ T5852] [ 200.840377][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.840377][ T5852] [pid 5934] munmap(0x7feda9000000, 138412032 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... umount2 resumed>) = 0 [pid 5936] <... openat resumed>) = 3 [pid 5849] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] write(3, "1000", 4) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5936] close(3) = 0 [pid 5849] newfstatat(AT_FDCWD, "./12/file0", [pid 5936] symlink("/dev/binderfs", "./binderfs" [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5936] <... symlink resumed>) = 0 [pid 5934] <... munmap resumed>) = 0 [pid 5849] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] write(1, "executing program\n", 18executing program [pid 5934] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5936] <... write resumed>) = 18 [pid 5934] <... openat resumed>) = 4 [pid 5852] <... umount2 resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5936] memfd_create("syzkaller", 0 [pid 5934] ioctl(4, LOOP_SET_FD, 3 [pid 5852] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 4 [pid 5936] <... memfd_create resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(4, "", [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] newfstatat(AT_FDCWD, "./12/file0", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5936] <... mmap resumed>) = 0x7feda9000000 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(4, [pid 5934] <... ioctl resumed>) = 0 [pid 5934] close(3 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5934] <... close resumed>) = 0 [pid 5849] getdents64(4, [pid 5934] close(4 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5934] <... close resumed>) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./12/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./12" [pid 5852] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... rmdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] mkdir("./13", 0777 [pid 5852] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... mkdir resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] newfstatat(4, "", [pid 5849] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5852] getdents64(4, [pid 5849] <... ioctl resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] close(3 [pid 5934] mkdir("./file0", 0777 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5934] <... mkdir resumed>) = 0 [pid 5852] close(4 [pid 5934] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./12/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 5850] newfstatat(AT_FDCWD, "./12/file0", [pid 5852] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 200.858126][ T5852] [ 200.858126][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.858126][ T5852] [ 200.892712][ T5934] loop1: detected capacity change from 0 to 32768 [pid 5852] rmdir("./12" [pid 5850] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./13", 0777) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5850] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5934] <... mount resumed>) = 0 [pid 5934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5934] <... openat resumed>) = 3 [pid 5850] getdents64(4, [pid 5934] chdir("./file0" [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5934] <... chdir resumed>) = 0 [pid 5850] close(4 [pid 5934] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./12/file0" [pid 5934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5934] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 200.952077][ T5934] [ 200.952077][ T5934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.952077][ T5934] [pid 5850] rmdir("./12") = 0 [pid 5850] mkdir("./13", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 201.006281][ T5934] [ 201.006281][ T5934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.006281][ T5934] [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 201.049979][ T5934] [ 201.049979][ T5934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.049979][ T5934] [pid 5850] close(3 [pid 5934] <... lsetxattr resumed>) = 0 [pid 5934] exit_group(0) = ? [pid 5934] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5848] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./13/binderfs") = 0 [ 201.121378][ T112] [ 201.121378][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.121378][ T112] [pid 5848] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 201.180886][ T5848] [ 201.180886][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.180886][ T5848] [ 201.209158][ T5848] [ 201.209158][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.209158][ T5848] [pid 5848] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5935] <... write resumed>) = 16777216 [pid 5852] <... close resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5935] munmap(0x7feda9000000, 138412032 [pid 5848] newfstatat(4, "", [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5937 attached , child_tidptr=0x555584a2d750) = 5937 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5937] set_robust_list(0x555584a2d760, 24 [pid 5850] <... close resumed>) = 0 [pid 5848] getdents64(4, [pid 5937] <... set_robust_list resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5937] chdir("./13" [pid 5848] close(4./strace-static-x86_64: Process 5938 attached [pid 5937] <... chdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 ./strace-static-x86_64: Process 5939 attached [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] rmdir("./13/file0" [pid 5937] <... prctl resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5938 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5939 [pid 5848] <... rmdir resumed>) = 0 [pid 5937] setpgid(0, 0 [pid 5848] getdents64(3, [pid 5938] set_robust_list(0x555584a2d760, 24 [pid 5937] <... setpgid resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5938] <... set_robust_list resumed>) = 0 [pid 5939] set_robust_list(0x555584a2d760, 24 [pid 5938] chdir("./13" [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] close(3 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5938] <... chdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] rmdir("./13" [pid 5939] chdir("./13" [pid 5938] <... prctl resumed>) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5939] <... chdir resumed>) = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... rmdir resumed>) = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] mkdir("./14", 0777 [pid 5939] <... prctl resumed>) = 0 [pid 5938] <... openat resumed>) = 3 [pid 5939] setpgid(0, 0 [pid 5938] write(3, "1000", 4 [pid 5937] <... openat resumed>) = 3 [pid 5935] <... munmap resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5939] <... setpgid resumed>) = 0 [pid 5937] write(3, "1000", 4 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] <... write resumed>) = 4 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5938] close(3) = 0 [pid 5937] <... write resumed>) = 4 [pid 5848] <... openat resumed>) = 3 [pid 5939] <... openat resumed>) = 3 [pid 5938] symlink("/dev/binderfs", "./binderfs" [pid 5937] close(3 [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5939] write(3, "1000", 4 [pid 5938] <... symlink resumed>) = 0 [pid 5937] <... close resumed>) = 0 [pid 5935] <... openat resumed>) = 4 [pid 5848] <... ioctl resumed>) = 0 [pid 5939] <... write resumed>) = 4 executing program executing program executing program [pid 5938] write(1, "executing program\n", 18 [pid 5937] symlink("/dev/binderfs", "./binderfs" [pid 5848] close(3 [pid 5939] close(3 [pid 5938] <... write resumed>) = 18 [pid 5935] ioctl(4, LOOP_SET_FD, 3 [pid 5939] <... close resumed>) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5937] <... symlink resumed>) = 0 [pid 5937] write(1, "executing program\n", 18 [pid 5939] write(1, "executing program\n", 18 [pid 5937] <... write resumed>) = 18 [pid 5939] <... write resumed>) = 18 [pid 5937] memfd_create("syzkaller", 0 [pid 5935] <... ioctl resumed>) = 0 [pid 5939] memfd_create("syzkaller", 0 [pid 5937] <... memfd_create resumed>) = 3 [pid 5938] memfd_create("syzkaller", 0 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5938] <... memfd_create resumed>) = 3 [pid 5937] <... mmap resumed>) = 0x7feda9000000 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5939] <... memfd_create resumed>) = 3 [pid 5938] <... mmap resumed>) = 0x7feda9000000 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5935] close(3) = 0 [pid 5935] close(4) = 0 [pid 5935] mkdir("./file0", 0777) = 0 [ 201.322878][ T5935] loop4: detected capacity change from 0 to 32768 [ 201.366510][ T5935] [ 201.366510][ T5935] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.366510][ T5935] [pid 5935] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5935] chdir("./file0") = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 201.481749][ T5935] [ 201.481749][ T5935] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.481749][ T5935] [ 201.513524][ T5935] [ 201.513524][ T5935] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.513524][ T5935] [pid 5935] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5935] exit_group(0) = ? [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5935] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 201.546487][ T113] [ 201.546487][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.546487][ T113] [pid 5851] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] <... write resumed>) = 16777216 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5936] munmap(0x7feda9000000, 138412032 [pid 5851] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] <... close resumed>) = 0 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] getdents64(3, ./strace-static-x86_64: Process 5940 attached 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5940] set_robust_list(0x555584a2d760, 24 [pid 5851] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5940] <... set_robust_list resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] chdir("./14" [pid 5851] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5940] <... chdir resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5940] setpgid(0, 0) = 0 executing program [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] unlink("./13/binderfs" [pid 5940] <... openat resumed>) = 3 [pid 5940] write(3, "1000", 4) = 4 [pid 5940] close(3 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5940 [pid 5940] <... close resumed>) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5940] write(1, "executing program\n", 18) = 18 [pid 5940] memfd_create("syzkaller", 0) = 3 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... unlink resumed>) = 0 [pid 5851] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] <... munmap resumed>) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 201.710379][ T5851] [ 201.710379][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.710379][ T5851] [ 201.718564][ T5936] loop0: detected capacity change from 0 to 32768 [ 201.750003][ T5851] [ 201.750003][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.750003][ T5851] [pid 5936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5936] close(3) = 0 [pid 5936] close(4) = 0 [pid 5936] mkdir("./file0", 0777) = 0 [pid 5936] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5936] chdir("./file0") = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5851] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5936] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 201.772993][ T5936] [ 201.772993][ T5936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.772993][ T5936] [ 201.810477][ T5936] [ 201.810477][ T5936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.810477][ T5936] [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./13/file0") = 0 [pid 5936] <... lsetxattr resumed>) = 0 [pid 5936] exit_group(0) = ? [pid 5936] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [ 201.847161][ T5936] [ 201.847161][ T5936] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.847161][ T5936] [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5851] getdents64(3, [pid 5847] <... restart_syscall resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5847] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... close resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5851] rmdir("./13" [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./13/binderfs" [pid 5851] <... rmdir resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 5851] mkdir("./14", 0777 [pid 5847] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5938] <... write resumed>) = 16777216 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 201.890308][ T112] [ 201.890308][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.890308][ T112] [pid 5851] close(3 [pid 5938] munmap(0x7feda9000000, 138412032) = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 201.932292][ T5847] [ 201.932292][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.932292][ T5847] [ 201.970375][ T5847] [ 201.970375][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 201.970375][ T5847] [pid 5938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] mkdir("./file0", 0777) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5938] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [ 202.001722][ T5938] loop3: detected capacity change from 0 to 32768 [pid 5847] rmdir("./13/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./13") = 0 [pid 5847] mkdir("./14", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5938] <... mount resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5938] <... openat resumed>) = 3 [pid 5847] <... ioctl resumed>) = 0 [pid 5938] chdir("./file0") = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] close(3 [pid 5938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 202.057588][ T5938] [ 202.057588][ T5938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.057588][ T5938] [ 202.094756][ T5938] [ 202.094756][ T5938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.094756][ T5938] [ 202.139826][ T5938] [ 202.139826][ T5938] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.139826][ T5938] [pid 5938] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5938] exit_group(0) = ? [pid 5939] <... write resumed>) = 16777216 [pid 5938] +++ exited with 0 +++ [pid 5937] <... write resumed>) = 16777216 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5850] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] munmap(0x7feda9000000, 138412032 [pid 5937] munmap(0x7feda9000000, 138412032 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./13/binderfs") = 0 [pid 5850] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5939] <... munmap resumed>) = 0 [ 202.193269][ T113] [ 202.193269][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.193269][ T113] [pid 5939] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... close resumed>) = 0 [pid 5939] <... ioctl resumed>) = 0 [pid 5939] close(3 [pid 5937] <... munmap resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5939] <... close resumed>) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5939] close(4./strace-static-x86_64: Process 5941 attached ) = 0 [pid 5941] set_robust_list(0x555584a2d760, 24 [pid 5937] <... openat resumed>) = 4 [pid 5941] <... set_robust_list resumed>) = 0 [pid 5937] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5941 [ 202.249997][ T5850] [ 202.249997][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.249997][ T5850] [ 202.257287][ T5939] loop5: detected capacity change from 0 to 32768 [ 202.280630][ T5850] [ 202.280630][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.280630][ T5850] [pid 5941] chdir("./14" [pid 5939] mkdir("./file0", 0777) = 0 [pid 5939] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5941] <... chdir resumed>) = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] <... ioctl resumed>) = 0 [pid 5937] close(3 [pid 5941] setpgid(0, 0 [pid 5937] <... close resumed>) = 0 [pid 5941] <... setpgid resumed>) = 0 [pid 5937] close(4 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5937] <... close resumed>) = 0 [pid 5941] <... openat resumed>) = 3 [pid 5937] mkdir("./file0", 0777 [pid 5847] <... close resumed>) = 0 [pid 5941] write(3, "1000", 4) = 4 [pid 5939] <... mount resumed>) = 0 [pid 5937] <... mkdir resumed>) = 0 [pid 5941] close(3 [pid 5850] <... umount2 resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5941] <... close resumed>) = 0 [pid 5939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5937] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5939] <... openat resumed>) = 3 [pid 5850] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5942 attached [pid 5941] <... symlink resumed>) = 0 [pid 5939] chdir("./file0" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5942 [pid 5942] set_robust_list(0x555584a2d760, 24 [pid 5941] write(1, "executing program\n", 18 [pid 5939] <... chdir resumed>) = 0 [ 202.305684][ T5937] loop2: detected capacity change from 0 to 32768 [ 202.316564][ T5939] [ 202.316564][ T5939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.316564][ T5939] [pid 5850] newfstatat(AT_FDCWD, "./13/file0", [pid 5942] <... set_robust_list resumed>) = 0 [pid 5941] <... write resumed>) = 18 [pid 5939] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5939] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5942] chdir("./14" [pid 5850] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5942] <... chdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5942] <... prctl resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5942] setpgid(0, 0 [pid 5850] newfstatat(4, "", [pid 5942] <... setpgid resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] getdents64(4, [pid 5942] <... openat resumed>) = 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5942] write(3, "1000", 4 [pid 5850] getdents64(4, [pid 5942] <... write resumed>) = 4 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5942] close(3 [pid 5850] close(4 [pid 5942] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5942] symlink("/dev/binderfs", "./binderfs" [pid 5850] rmdir("./13/file0") = 0 [pid 5942] <... symlink resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./13"executing program [pid 5941] memfd_create("syzkaller", 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5942] write(1, "executing program\n", 18 [pid 5850] mkdir("./14", 0777 [pid 5942] <... write resumed>) = 18 [pid 5850] <... mkdir resumed>) = 0 [pid 5941] <... memfd_create resumed>) = 3 [pid 5942] memfd_create("syzkaller", 0 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5942] <... memfd_create resumed>) = 3 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5941] <... mmap resumed>) = 0x7feda9000000 [pid 5937] <... mount resumed>) = 0 [pid 5937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5937] chdir("./file0") = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 202.368011][ T5937] [ 202.368011][ T5937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.368011][ T5937] [ 202.379897][ T5939] [ 202.379897][ T5939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.379897][ T5939] [ 202.401585][ T5939] [ 202.401585][ T5939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.401585][ T5939] [ 202.423101][ T5937] [ 202.423101][ T5937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.423101][ T5937] [ 202.456279][ T5937] [ 202.456279][ T5937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.456279][ T5937] [ 202.469110][ T112] [pid 5937] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5939] <... lsetxattr resumed>) = 0 [pid 5939] exit_group(0) = ? [pid 5939] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5937] <... lsetxattr resumed>) = 0 [pid 5937] exit_group(0) = ? [pid 5937] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5940] <... write resumed>) = 16777216 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] newfstatat(3, "", [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5852] <... openat resumed>) = 3 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] getdents64(3, [pid 5849] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] unlink("./13/binderfs") = 0 [pid 5852] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 202.469110][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.469110][ T112] [ 202.512321][ T113] [ 202.512321][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.512321][ T113] [pid 5852] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5940] munmap(0x7feda9000000, 138412032 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./13/binderfs") = 0 [pid 5852] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5940] <... munmap resumed>) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 202.534518][ T5849] [ 202.534518][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.534518][ T5849] [ 202.550056][ T5849] [ 202.550056][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.550056][ T5849] [pid 5940] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5940] close(3) = 0 [pid 5940] close(4) = 0 [pid 5940] mkdir("./file0", 0777) = 0 [ 202.591708][ T5940] loop1: detected capacity change from 0 to 32768 [ 202.601177][ T5852] [ 202.601177][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.601177][ T5852] [ 202.620823][ T5852] [ 202.620823][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.620823][ T5852] [pid 5940] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./13/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 5940] <... mount resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./13" [pid 5940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./14", 0777 [pid 5940] <... openat resumed>) = 3 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5940] chdir("./file0") = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 202.644022][ T5940] [ 202.644022][ T5940] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.644022][ T5940] [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5940] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] newfstatat(AT_FDCWD, "./13/file0", [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5943 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5943 attached [pid 5943] set_robust_list(0x555584a2d760, 24 [pid 5852] <... openat resumed>) = 4 [pid 5943] <... set_robust_list resumed>) = 0 [pid 5943] chdir("./14" [pid 5852] newfstatat(4, "", [pid 5943] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5943] <... prctl resumed>) = 0 [pid 5943] setpgid(0, 0 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5943] <... setpgid resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] close(4) = 0 [pid 5943] <... openat resumed>) = 3 [pid 5852] rmdir("./13/file0") = 0 [pid 5943] write(3, "1000", 4 [pid 5852] getdents64(3, [pid 5943] <... write resumed>) = 4 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 202.711129][ T5940] [ 202.711129][ T5940] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.711129][ T5940] [ 202.732284][ T5940] [ 202.732284][ T5940] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.732284][ T5940] [pid 5943] close(3) = 0 [pid 5940] <... lsetxattr resumed>) = 0 [pid 5852] close(3 [pid 5943] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... close resumed>) = 0 [pid 5940] exit_group(0 [pid 5852] rmdir("./13" [pid 5943] <... symlink resumed>) = 0 [pid 5943] write(1, "executing program\n", 18 executing program [pid 5940] <... exit_group resumed>) = ? [pid 5852] <... rmdir resumed>) = 0 [pid 5943] <... write resumed>) = 18 [pid 5940] +++ exited with 0 +++ [pid 5852] mkdir("./14", 0777 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5943] memfd_create("syzkaller", 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5943] <... memfd_create resumed>) = 3 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5943] <... mmap resumed>) = 0x7feda9000000 [pid 5852] close(3 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./14/binderfs") = 0 [ 202.775031][ T113] [ 202.775031][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.775031][ T113] [pid 5848] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5848] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./14/file0") = 0 [ 202.823196][ T5848] [ 202.823196][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.823196][ T5848] [ 202.860437][ T5848] [ 202.860437][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.860437][ T5848] [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./14") = 0 [pid 5848] mkdir("./15", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5944 ./strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x555584a2d760, 24) = 0 [pid 5944] chdir("./14") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] <... close resumed>) = 0 executing program [pid 5944] write(1, "executing program\n", 18 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5944] <... write resumed>) = 18 ./strace-static-x86_64: Process 5945 attached [pid 5944] memfd_create("syzkaller", 0 [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5945 [pid 5945] set_robust_list(0x555584a2d760, 24 [pid 5944] <... memfd_create resumed>) = 3 [pid 5942] <... write resumed>) = 16777216 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5945] chdir("./14" [pid 5944] <... mmap resumed>) = 0x7feda9000000 [pid 5945] <... chdir resumed>) = 0 [pid 5942] munmap(0x7feda9000000, 138412032 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0 [pid 5848] <... close resumed>) = 0 [pid 5945] <... setpgid resumed>) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached [pid 5945] write(3, "1000", 4 [pid 5946] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5946 [pid 5945] <... write resumed>) = 4 [pid 5942] <... munmap resumed>) = 0 [pid 5946] <... set_robust_list resumed>) = 0 [pid 5945] close(3 [pid 5942] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5946] chdir("./15" [pid 5945] <... close resumed>) = 0 [pid 5942] <... openat resumed>) = 4 [pid 5946] <... chdir resumed>) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs" [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5941] <... write resumed>) = 16777216 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5941] munmap(0x7feda9000000, 138412032executing program [pid 5946] <... prctl resumed>) = 0 [pid 5945] <... symlink resumed>) = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5946] setpgid(0, 0 [pid 5945] write(1, "executing program\n", 18 [pid 5946] <... setpgid resumed>) = 0 [pid 5945] <... write resumed>) = 18 [pid 5942] close(3 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5945] memfd_create("syzkaller", 0 [pid 5942] <... close resumed>) = 0 [pid 5945] <... memfd_create resumed>) = 3 [pid 5942] close(4 [pid 5946] <... openat resumed>) = 3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5946] write(3, "1000", 4 [pid 5945] <... mmap resumed>) = 0x7feda9000000 [pid 5946] <... write resumed>) = 4 [pid 5946] close(3 [pid 5942] <... close resumed>) = 0 [pid 5946] <... close resumed>) = 0 [pid 5942] mkdir("./file0", 0777 executing program [pid 5941] <... munmap resumed>) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5946] write(1, "executing program\n", 18) = 18 [ 203.188053][ T5942] loop0: detected capacity change from 0 to 32768 [pid 5946] memfd_create("syzkaller", 0 [pid 5942] <... mkdir resumed>) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5941] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5941] close(3 [pid 5946] <... memfd_create resumed>) = 3 [pid 5942] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5941] <... close resumed>) = 0 [pid 5941] close(4) = 0 [pid 5941] mkdir("./file0", 0777) = 0 [ 203.241812][ T5941] loop4: detected capacity change from 0 to 32768 [pid 5941] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5942] <... mount resumed>) = 0 [pid 5942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5942] chdir("./file0") = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 203.282888][ T5942] [ 203.282888][ T5942] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.282888][ T5942] [ 203.304913][ T5941] [ 203.304913][ T5941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.304913][ T5941] [pid 5942] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5941] <... mount resumed>) = 0 [pid 5941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5941] chdir("./file0") = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 203.330994][ T5942] [ 203.330994][ T5942] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.330994][ T5942] [ 203.362683][ T5942] [ 203.362683][ T5942] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.362683][ T5942] [ 203.384426][ T5941] [ 203.384426][ T5941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.384426][ T5941] [ 203.418579][ T5941] [ 203.418579][ T5941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.418579][ T5941] [ 203.430802][ T112] [pid 5941] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5942] <... lsetxattr resumed>) = 0 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5942] exit_group(0) = ? [pid 5941] <... lsetxattr resumed>) = 0 [pid 5941] exit_group(0) = ? [pid 5942] +++ exited with 0 +++ [pid 5941] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./14/binderfs") = 0 [pid 5847] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./14/binderfs") = 0 [ 203.430802][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.430802][ T112] [ 203.457798][ T113] [ 203.457798][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.457798][ T113] [pid 5851] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 203.503020][ T5847] [ 203.503020][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.503020][ T5847] [ 203.503448][ T5851] [ 203.503448][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.503448][ T5851] [ 203.539371][ T5847] [ 203.539371][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.539371][ T5847] [pid 5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./14/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./14") = 0 [pid 5847] mkdir("./15", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5943] <... write resumed>) = 16777216 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5943] munmap(0x7feda9000000, 138412032 [pid 5847] <... ioctl resumed>) = 0 [ 203.580716][ T5851] [ 203.580716][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.580716][ T5851] [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./14/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./14") = 0 [pid 5851] mkdir("./15", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5943] <... munmap resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5943] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5943] close(3) = 0 [pid 5943] close(4) = 0 [pid 5943] mkdir("./file0", 0777) = 0 [ 203.714554][ T5943] loop3: detected capacity change from 0 to 32768 [ 203.772574][ T5943] [ 203.772574][ T5943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.772574][ T5943] [pid 5943] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5943] chdir("./file0") = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5943] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 203.853541][ T5943] [ 203.853541][ T5943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.853541][ T5943] [ 203.874901][ T5943] [ 203.874901][ T5943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.874901][ T5943] [pid 5943] exit_group(0) = ? [pid 5847] <... close resumed>) = 0 [pid 5943] +++ exited with 0 +++ [pid 5944] <... write resumed>) = 16777216 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5944] munmap(0x7feda9000000, 138412032 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5947 ./strace-static-x86_64: Process 5947 attached [ 203.917690][ T113] [ 203.917690][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.917690][ T113] [pid 5850] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5947] set_robust_list(0x555584a2d760, 24 [pid 5850] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] <... set_robust_list resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] chdir("./15" [pid 5850] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5947] <... chdir resumed>) = 0 [pid 5944] <... munmap resumed>) = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5945] <... write resumed>) = 16777216 [pid 5851] <... close resumed>) = 0 [pid 5850] unlink("./14/binderfs" [pid 5947] <... prctl resumed>) = 0 [pid 5947] setpgid(0, 0 [pid 5850] <... unlink resumed>) = 0 [pid 5947] <... setpgid resumed>) = 0 [pid 5850] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4 [pid 5945] munmap(0x7feda9000000, 138412032 [pid 5947] <... write resumed>) = 4 [pid 5944] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5944] <... openat resumed>) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5947] close(3./strace-static-x86_64: Process 5948 attached ) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5948 executing program [pid 5948] set_robust_list(0x555584a2d760, 24 [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5947] write(1, "executing program\n", 18) = 18 [pid 5947] memfd_create("syzkaller", 0) = 3 [pid 5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5945] <... munmap resumed>) = 0 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5944] <... ioctl resumed>) = 0 [pid 5944] close(3) = 0 [pid 5944] close(4 [pid 5948] chdir("./15" [pid 5945] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5944] <... close resumed>) = 0 [pid 5948] <... chdir resumed>) = 0 [pid 5945] <... openat resumed>) = 4 [ 204.019737][ T5850] [ 204.019737][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.019737][ T5850] [ 204.021449][ T5944] loop2: detected capacity change from 0 to 32768 [ 204.049376][ T5850] [ 204.049376][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.049376][ T5850] [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5945] ioctl(4, LOOP_SET_FD, 3 [pid 5948] <... prctl resumed>) = 0 [pid 5945] <... ioctl resumed>) = 0 [pid 5944] mkdir("./file0", 0777 [pid 5948] setpgid(0, 0 [pid 5945] close(3 [pid 5948] <... setpgid resumed>) = 0 [pid 5945] <... close resumed>) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5945] close(4) = 0 [pid 5948] <... openat resumed>) = 3 [pid 5945] mkdir("./file0", 0777 [pid 5944] <... mkdir resumed>) = 0 [pid 5948] write(3, "1000", 4 [pid 5944] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5948] <... write resumed>) = 4 [pid 5945] <... mkdir resumed>) = 0 [pid 5945] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 [ 204.073595][ T5945] loop5: detected capacity change from 0 to 32768 [ 204.106684][ T5944] [ 204.106684][ T5944] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.106684][ T5944] [ 204.109302][ T5945] executing program [pid 5948] write(1, "executing program\n", 18 [pid 5850] <... umount2 resumed>) = 0 [pid 5948] <... write resumed>) = 18 [pid 5946] <... write resumed>) = 16777216 [pid 5850] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5948] memfd_create("syzkaller", 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5946] munmap(0x7feda9000000, 138412032 [pid 5948] <... memfd_create resumed>) = 3 [pid 5944] <... mount resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./14/file0", [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5948] <... mmap resumed>) = 0x7feda9000000 [pid 5944] <... openat resumed>) = 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5944] chdir("./file0") = 0 [pid 5850] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5944] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 204.109302][ T5945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.109302][ T5945] [pid 5850] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5944] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] newfstatat(4, "", [pid 5944] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5945] <... mount resumed>) = 0 [pid 5850] close(4 [pid 5945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./14/file0" [pid 5945] <... openat resumed>) = 3 [pid 5850] <... rmdir resumed>) = 0 [pid 5945] chdir("./file0") = 0 [pid 5850] getdents64(3, [pid 5945] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] close(3 [pid 5945] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./14") = 0 [pid 5850] mkdir("./15", 0777) = 0 [ 204.162132][ T5944] [ 204.162132][ T5944] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.162132][ T5944] [ 204.194116][ T5945] [ 204.194116][ T5945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.194116][ T5945] [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5946] <... munmap resumed>) = 0 [pid 5945] <... lsetxattr resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5946] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5946] <... openat resumed>) = 4 [pid 5946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5945] exit_group(0 [pid 5850] <... ioctl resumed>) = 0 [ 204.217321][ T5944] [ 204.217321][ T5944] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.217321][ T5944] [ 204.227812][ T5945] [ 204.227812][ T5945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.227812][ T5945] [ 204.239189][ T113] [ 204.239189][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.239189][ T113] [ 204.251308][ T5946] loop1: detected capacity change from 0 to 32768 [pid 5946] close(3 [pid 5945] <... exit_group resumed>) = ? [pid 5850] close(3 [pid 5946] <... close resumed>) = 0 [pid 5946] close(4) = 0 [pid 5946] mkdir("./file0", 0777) = 0 [pid 5945] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5946] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./14/binderfs") = 0 [pid 5852] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5944] <... lsetxattr resumed>) = 0 [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./14/binderfs") = 0 [pid 5849] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5946] <... mount resumed>) = 0 [pid 5946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5946] chdir("./file0") = 0 [pid 5946] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 204.275032][ T5946] [ 204.275032][ T5946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.275032][ T5946] [ 204.312144][ T112] [ 204.312144][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.312144][ T112] [ 204.328542][ T5946] [ 204.328542][ T5946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.328542][ T5946] [ 204.339665][ T5852] [ 204.339665][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.339665][ T5852] [ 204.360038][ T5946] [ 204.360038][ T5946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.360038][ T5946] [ 204.375467][ T5849] [ 204.375467][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.375467][ T5849] [ 204.390149][ T5852] [ 204.390149][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.390149][ T5852] [ 204.410202][ T5849] [ 204.410202][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.410202][ T5849] [pid 5946] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5946] exit_group(0) = ? [pid 5946] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5946, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] <... openat resumed>) = 4 [pid 5848] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5852] newfstatat(4, "", [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] unlink("./15/binderfs" [pid 5852] getdents64(4, [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./14/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] rmdir("./14") = 0 [pid 5852] mkdir("./15", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5849] <... umount2 resumed>) = 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5849] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... ioctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] close(3 [pid 5849] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 204.432607][ T113] [ 204.432607][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.432607][ T113] [ 204.460260][ T5848] [ 204.460260][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.460260][ T5848] [pid 5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] close(4) = 0 [pid 5849] rmdir("./14/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./14") = 0 [pid 5849] mkdir("./15", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 204.504151][ T5848] [ 204.504151][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 204.504151][ T5848] [pid 5849] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./15/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./15") = 0 [pid 5848] mkdir("./16", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5949 ./strace-static-x86_64: Process 5949 attached [pid 5949] set_robust_list(0x555584a2d760, 24) = 0 [pid 5949] chdir("./15") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5949] setpgid(0, 0) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5949] write(3, "1000", 4) = 4 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5949] write(1, "executing program\n", 18) = 18 [pid 5949] memfd_create("syzkaller", 0) = 3 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5950 ./strace-static-x86_64: Process 5950 attached [pid 5950] set_robust_list(0x555584a2d760, 24) = 0 [pid 5950] chdir("./15") = 0 [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5950] setpgid(0, 0 [pid 5849] <... close resumed>) = 0 [pid 5950] <... setpgid resumed>) = 0 [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5950] write(3, "1000", 4) = 4 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5951 attached [pid 5950] close(3) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs" [pid 5951] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5951 [pid 5951] <... set_robust_list resumed>) = 0 [pid 5951] chdir("./15" [pid 5950] <... symlink resumed>) = 0 [pid 5951] <... chdir resumed>) = 0 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5951] setpgid(0, 0) = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5951] write(3, "1000", 4) = 4 [pid 5951] close(3) = 0 [pid 5951] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5951] write(1, "executing program\n", 18) = 18 [pid 5951] memfd_create("syzkaller", 0) = 3 [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 executing program [pid 5950] write(1, "executing program\n", 18) = 18 [pid 5950] memfd_create("syzkaller", 0) = 3 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5952 attached , child_tidptr=0x555584a2d750) = 5952 [pid 5952] set_robust_list(0x555584a2d760, 24) = 0 [pid 5952] chdir("./16") = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 executing program [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5952] write(3, "1000", 4) = 4 [pid 5952] close(3) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5952] write(1, "executing program\n", 18) = 18 [pid 5952] memfd_create("syzkaller", 0) = 3 [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5947] <... write resumed>) = 16777216 [pid 5947] munmap(0x7feda9000000, 138412032 [pid 5948] <... write resumed>) = 16777216 [pid 5947] <... munmap resumed>) = 0 [pid 5948] munmap(0x7feda9000000, 138412032 [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5947] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5947] close(3) = 0 [pid 5947] close(4) = 0 [pid 5948] <... munmap resumed>) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5947] mkdir("./file0", 0777) = 0 [ 205.101427][ T5947] loop0: detected capacity change from 0 to 32768 [pid 5948] <... openat resumed>) = 4 [pid 5947] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] close(3) = 0 [pid 5948] close(4) = 0 [pid 5948] mkdir("./file0", 0777) = 0 [pid 5947] <... mount resumed>) = 0 [pid 5948] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5947] chdir("./file0") = 0 [ 205.153761][ T5948] loop4: detected capacity change from 0 to 32768 [ 205.166431][ T5947] [ 205.166431][ T5947] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.166431][ T5947] [pid 5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5947] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 205.233475][ T5947] [ 205.233475][ T5947] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.233475][ T5947] [ 205.249418][ T5948] [ 205.249418][ T5948] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.249418][ T5948] [ 205.273650][ T5947] [ 205.273650][ T5947] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5948] <... mount resumed>) = 0 [pid 5948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5948] chdir("./file0") = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 205.273650][ T5947] [pid 5948] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5947] <... lsetxattr resumed>) = 0 [pid 5947] exit_group(0) = ? [pid 5947] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./15/binderfs") = 0 [ 205.320361][ T5948] [ 205.320361][ T5948] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.320361][ T5948] [ 205.331168][ T112] [ 205.331168][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.331168][ T112] [pid 5847] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 205.370420][ T5847] [ 205.370420][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.370420][ T5847] [ 205.380061][ T5948] [ 205.380061][ T5948] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.380061][ T5948] [ 205.390682][ T5847] [ 205.390682][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.390682][ T5847] [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5948] <... lsetxattr resumed>) = 0 [pid 5948] exit_group(0) = ? [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./15/file0" [pid 5948] +++ exited with 0 +++ [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5847] close(3 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./15" [pid 5851] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... rmdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] mkdir("./16", 0777 [pid 5851] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... mkdir resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 205.430934][ T113] [ 205.430934][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.430934][ T113] [pid 5851] unlink("./15/binderfs" [pid 5847] <... openat resumed>) = 3 [pid 5851] <... unlink resumed>) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5851] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... ioctl resumed>) = 0 [ 205.506076][ T5851] [ 205.506076][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.506076][ T5851] [ 205.570076][ T5851] [ 205.570076][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.570076][ T5851] [pid 5847] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./15/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./15") = 0 [pid 5851] mkdir("./16", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5949] <... write resumed>) = 16777216 [pid 5949] munmap(0x7feda9000000, 138412032) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5949] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5949] close(3 [pid 5950] <... write resumed>) = 16777216 [pid 5949] <... close resumed>) = 0 [ 205.781561][ T5949] loop3: detected capacity change from 0 to 32768 [pid 5951] <... write resumed>) = 16777216 [pid 5949] close(4) = 0 [pid 5950] munmap(0x7feda9000000, 138412032 [pid 5949] mkdir("./file0", 0777) = 0 [pid 5951] munmap(0x7feda9000000, 138412032 [pid 5949] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5953 ./strace-static-x86_64: Process 5953 attached [pid 5953] set_robust_list(0x555584a2d760, 24) = 0 [pid 5953] chdir("./16") = 0 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5950] <... munmap resumed>) = 0 [pid 5953] <... prctl resumed>) = 0 [pid 5953] setpgid(0, 0) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5950] <... openat resumed>) = 4 [pid 5953] <... openat resumed>) = 3 [pid 5950] ioctl(4, LOOP_SET_FD, 3 [pid 5953] write(3, "1000", 4) = 4 [pid 5950] <... ioctl resumed>) = 0 [pid 5953] close(3) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5953] write(1, "executing program\n", 18 [pid 5951] <... munmap resumed>) = 0 [pid 5950] close(3 [pid 5949] <... mount resumed>) = 0 [pid 5953] <... write resumed>) = 18 [pid 5951] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5950] <... close resumed>) = 0 [pid 5949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5953] memfd_create("syzkaller", 0 [pid 5949] <... openat resumed>) = 3 [pid 5951] <... openat resumed>) = 4 [pid 5950] close(4 [pid 5953] <... memfd_create resumed>) = 3 [pid 5951] ioctl(4, LOOP_SET_FD, 3 [ 205.874661][ T5949] [ 205.874661][ T5949] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.874661][ T5949] [ 205.912390][ T5950] loop5: detected capacity change from 0 to 32768 [pid 5949] chdir("./file0") = 0 [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5951] <... ioctl resumed>) = 0 [pid 5950] <... close resumed>) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5953] <... mmap resumed>) = 0x7feda9000000 [pid 5951] close(3 [pid 5950] mkdir("./file0", 0777 [pid 5949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5951] <... close resumed>) = 0 [pid 5950] <... mkdir resumed>) = 0 [pid 5949] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5951] close(4) = 0 [pid 5951] mkdir("./file0", 0777 [pid 5950] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5951] <... mkdir resumed>) = 0 [ 205.927993][ T5951] loop2: detected capacity change from 0 to 32768 [ 205.944030][ T5949] [ 205.944030][ T5949] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.944030][ T5949] [ 205.976031][ T5949] [pid 5951] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5952] <... write resumed>) = 16777216 [pid 5952] munmap(0x7feda9000000, 138412032 [pid 5949] <... lsetxattr resumed>) = 0 [pid 5951] <... mount resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5949] exit_group(0 [pid 5951] <... openat resumed>) = 3 [pid 5949] <... exit_group resumed>) = ? [pid 5951] chdir("./file0") = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5949] +++ exited with 0 +++ [pid 5950] <... mount resumed>) = 0 [pid 5951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5951] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5950] <... openat resumed>) = 3 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [ 205.976031][ T5949] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.976031][ T5949] [ 205.994153][ T5950] [ 205.994153][ T5950] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.994153][ T5950] [ 206.006728][ T5951] [ 206.006728][ T5951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.006728][ T5951] [ 206.017466][ T112] [ 206.017466][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.017466][ T112] [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5954 attached [pid 5952] <... munmap resumed>) = 0 [pid 5950] chdir("./file0" [pid 5850] unlink("./15/binderfs" [pid 5954] set_robust_list(0x555584a2d760, 24 [pid 5950] <... chdir resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5954] <... set_robust_list resumed>) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5954 [pid 5850] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5954] chdir("./16" [pid 5950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5954] <... chdir resumed>) = 0 [pid 5950] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 206.045829][ T5951] [ 206.045829][ T5951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.045829][ T5951] [ 206.063550][ T5950] [ 206.063550][ T5950] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.063550][ T5950] [ 206.063914][ T5850] [ 206.063914][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.063914][ T5850] [ 206.080691][ T5951] [ 206.080691][ T5951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.080691][ T5951] [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5952] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 5954] <... prctl resumed>) = 0 [pid 5952] <... ioctl resumed>) = 0 [pid 5952] close(3) = 0 [pid 5952] close(4 [pid 5954] setpgid(0, 0 [pid 5952] <... close resumed>) = 0 [pid 5952] mkdir("./file0", 0777) = 0 [ 206.091644][ T5952] loop1: detected capacity change from 0 to 32768 [ 206.097024][ T5950] [ 206.097024][ T5950] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.097024][ T5950] [ 206.129235][ T5952] [ 206.129235][ T5952] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.129235][ T5952] [ 206.140971][ T113] [pid 5952] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5954] <... setpgid resumed>) = 0 [pid 5951] <... lsetxattr resumed>) = 0 [pid 5950] <... lsetxattr resumed>) = 0 [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5951] exit_group(0 [pid 5954] <... openat resumed>) = 3 [pid 5951] <... exit_group resumed>) = ? [pid 5954] write(3, "1000", 4 [pid 5951] +++ exited with 0 +++ [pid 5954] <... write resumed>) = 4 [pid 5954] close(3executing program ) = 0 [pid 5954] symlink("/dev/binderfs", "./binderfs" [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5954] <... symlink resumed>) = 0 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5954] write(1, "executing program\n", 18) = 18 [pid 5954] memfd_create("syzkaller", 0 [pid 5950] exit_group(0 [pid 5954] <... memfd_create resumed>) = 3 [pid 5950] <... exit_group resumed>) = ? [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5950] +++ exited with 0 +++ [pid 5954] <... mmap resumed>) = 0x7feda9000000 [pid 5952] <... mount resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5950, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5849] <... restart_syscall resumed>) = 0 [pid 5952] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5849] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... restart_syscall resumed>) = 0 [pid 5952] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 206.140971][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.140971][ T113] [ 206.147824][ T112] [ 206.147824][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.147824][ T112] [ 206.182762][ T5850] [ 206.182762][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.182762][ T5850] [pid 5849] newfstatat(3, "", [pid 5952] chdir("./file0" [pid 5852] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5852] <... openat resumed>) = 3 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] newfstatat(3, "", [pid 5952] <... chdir resumed>) = 0 [pid 5849] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5952] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5952] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] getdents64(3, [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./15/binderfs" [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... unlink resumed>) = 0 [pid 5852] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./15/binderfs") = 0 [pid 5852] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [ 206.204272][ T5952] [ 206.204272][ T5952] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.204272][ T5952] [ 206.223003][ T5952] [ 206.223003][ T5952] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.223003][ T5952] [ 206.234700][ T5849] [ 206.234700][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.234700][ T5849] [ 206.245955][ T5852] [ 206.245955][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5952] <... lsetxattr resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] exit_group(0 [pid 5850] newfstatat(AT_FDCWD, "./15/file0", [pid 5952] <... exit_group resumed>) = ? [pid 5952] +++ exited with 0 +++ [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=32 /* 0.32 s */} --- [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5850] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5850] getdents64(4, [pid 5852] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] newfstatat(AT_FDCWD, "./15/file0", [pid 5850] getdents64(4, [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] close(4 [pid 5848] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... openat resumed>) = 4 [pid 5850] rmdir("./15/file0" [pid 5848] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] newfstatat(4, "", [pid 5849] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... rmdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(3, "", [pid 5852] getdents64(4, [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] close(3 [pid 5852] getdents64(4, [pid 5848] getdents64(3, [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] <... close resumed>) = 0 [pid 5852] close(4 [pid 5850] rmdir("./15" [pid 5849] newfstatat(AT_FDCWD, "./15/file0", [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... close resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./15/file0" [pid 5850] mkdir("./16", 0777 [pid 5849] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5852] <... rmdir resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5852] getdents64(3, [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] newfstatat(4, "", [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] unlink("./16/binderfs" [pid 5852] close(3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 5850] <... ioctl resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(3 [ 206.245955][ T5852] [ 206.257729][ T5852] [ 206.257729][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.257729][ T5852] [ 206.268700][ T5849] [ 206.268700][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.268700][ T5849] [ 206.269174][ T113] [ 206.269174][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.269174][ T113] [pid 5852] rmdir("./15" [pid 5849] close(4 [pid 5852] <... rmdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./15/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./15") = 0 [pid 5849] mkdir("./16", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5852] mkdir("./16", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 206.323537][ T5848] [ 206.323537][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.323537][ T5848] [ 206.353994][ T5848] [ 206.353994][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.353994][ T5848] [pid 5852] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./16/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./16") = 0 [pid 5848] mkdir("./17", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5955 ./strace-static-x86_64: Process 5955 attached [pid 5955] set_robust_list(0x555584a2d760, 24) = 0 [pid 5955] chdir("./16") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5955] write(1, "executing program\n", 18executing program ) = 18 [pid 5955] memfd_create("syzkaller", 0) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5956 attached , child_tidptr=0x555584a2d750) = 5956 [pid 5956] set_robust_list(0x555584a2d760, 24) = 0 [pid 5956] chdir("./16") = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5956] setpgid(0, 0) = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5956] write(3, "1000", 4) = 4 [pid 5956] close(3) = 0 [pid 5956] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5956] write(1, "executing program\n", 18 [pid 5852] <... close resumed>) = 0 [pid 5956] <... write resumed>) = 18 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5957 attached [pid 5956] memfd_create("syzkaller", 0 [pid 5957] set_robust_list(0x555584a2d760, 24 [pid 5956] <... memfd_create resumed>) = 3 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5957] <... set_robust_list resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5957 [pid 5957] chdir("./16") = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5953] <... write resumed>) = 16777216 [pid 5957] setpgid(0, 0) = 0 [pid 5953] munmap(0x7feda9000000, 138412032 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5957] close(3) = 0 [pid 5957] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5957] write(1, "executing program\n", 18) = 18 [pid 5957] memfd_create("syzkaller", 0) = 3 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5953] <... munmap resumed>) = 0 [pid 5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5953] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5848] <... close resumed>) = 0 [pid 5953] close(3) = 0 [pid 5953] close(4) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5953] mkdir("./file0", 0777) = 0 [pid 5953] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"./strace-static-x86_64: Process 5958 attached [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5958 [pid 5958] set_robust_list(0x555584a2d760, 24) = 0 [pid 5958] chdir("./17") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4 [pid 5953] <... mount resumed>) = 0 [pid 5958] <... write resumed>) = 4 [pid 5953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5958] close(3executing program ) = 0 [pid 5953] <... openat resumed>) = 3 [pid 5958] symlink("/dev/binderfs", "./binderfs" [pid 5953] chdir("./file0" [pid 5958] <... symlink resumed>) = 0 [pid 5958] write(1, "executing program\n", 18) = 18 [pid 5953] <... chdir resumed>) = 0 [pid 5958] memfd_create("syzkaller", 0 [pid 5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 206.832899][ T5953] loop0: detected capacity change from 0 to 32768 [ 206.865375][ T5953] [ 206.865375][ T5953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.865375][ T5953] [pid 5953] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5958] <... memfd_create resumed>) = 3 [pid 5954] <... write resumed>) = 16777216 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5954] munmap(0x7feda9000000, 138412032 [pid 5958] <... mmap resumed>) = 0x7feda9000000 [pid 5953] <... lsetxattr resumed>) = 0 [ 206.907287][ T5953] [ 206.907287][ T5953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.907287][ T5953] [ 206.940110][ T5953] [ 206.940110][ T5953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.940110][ T5953] [pid 5953] exit_group(0 [pid 5954] <... munmap resumed>) = 0 [pid 5953] <... exit_group resumed>) = ? [pid 5954] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5953] +++ exited with 0 +++ [pid 5954] <... openat resumed>) = 4 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5954] ioctl(4, LOOP_SET_FD, 3 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", [pid 5954] <... ioctl resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5954] close(3 [pid 5847] getdents64(3, [pid 5954] <... close resumed>) = 0 [pid 5954] close(4 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5954] <... close resumed>) = 0 [pid 5847] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5954] mkdir("./file0", 0777 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5954] <... mkdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5954] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] unlink("./16/binderfs") = 0 [ 206.984209][ T112] [ 206.984209][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 206.984209][ T112] [ 207.003024][ T5954] loop4: detected capacity change from 0 to 32768 [pid 5847] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 207.048124][ T5847] [ 207.048124][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.048124][ T5847] [ 207.075075][ T5847] [ 207.075075][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.075075][ T5847] [ 207.079210][ T5954] [ 207.079210][ T5954] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.079210][ T5954] [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5954] <... mount resumed>) = 0 [pid 5954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5954] chdir("./file0") = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5954] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./16/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./16") = 0 [pid 5847] mkdir("./17", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 207.140267][ T5954] [ 207.140267][ T5954] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.140267][ T5954] [ 207.174846][ T5954] [ 207.174846][ T5954] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.174846][ T5954] [pid 5847] close(3 [pid 5954] <... lsetxattr resumed>) = 0 [pid 5954] exit_group(0) = ? [pid 5954] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./16/binderfs") = 0 [ 207.230947][ T113] [ 207.230947][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.230947][ T113] [pid 5851] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 207.275477][ T5851] [ 207.275477][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.275477][ T5851] [ 207.310807][ T5851] [ 207.310807][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.310807][ T5851] [pid 5851] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./16/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./16") = 0 [pid 5851] mkdir("./17", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5955] <... write resumed>) = 16777216 [pid 5955] munmap(0x7feda9000000, 138412032) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5955] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... close resumed>) = 0 [pid 5955] <... ioctl resumed>) = 0 [pid 5955] close(3) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5955] close(4) = 0 [pid 5955] mkdir("./file0", 0777./strace-static-x86_64: Process 5959 attached ) = 0 [pid 5955] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5959] set_robust_list(0x555584a2d760, 24) = 0 [pid 5959] chdir("./17" [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5959 [pid 5959] <... chdir resumed>) = 0 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5959] setpgid(0, 0) = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] <... write resumed>) = 16777216 [pid 5959] write(3, "1000", 4 [pid 5957] munmap(0x7feda9000000, 138412032 [pid 5959] <... write resumed>) = 4 [pid 5959] close(3) = 0 [ 207.512977][ T5955] loop2: detected capacity change from 0 to 32768 [ 207.551696][ T5955] [ 207.551696][ T5955] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.551696][ T5955] [pid 5959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5959] write(1, "executing program\n", 18executing program ) = 18 [pid 5959] memfd_create("syzkaller", 0 [pid 5956] <... write resumed>) = 16777216 [pid 5956] munmap(0x7feda9000000, 138412032 [pid 5959] <... memfd_create resumed>) = 3 [pid 5957] <... munmap resumed>) = 0 [pid 5955] <... mount resumed>) = 0 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5957] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5959] <... mmap resumed>) = 0x7feda9000000 [pid 5957] <... openat resumed>) = 4 [pid 5957] ioctl(4, LOOP_SET_FD, 3 [pid 5955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] chdir("./file0") = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5955] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5957] <... ioctl resumed>) = 0 [pid 5957] close(3) = 0 [pid 5957] close(4 [pid 5956] <... munmap resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5957] mkdir("./file0", 0777) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 207.640432][ T5957] loop5: detected capacity change from 0 to 32768 [ 207.643961][ T5955] [ 207.643961][ T5955] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.643961][ T5955] [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5957] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5956] <... ioctl resumed>) = 0 [pid 5956] close(3) = 0 [pid 5956] close(4) = 0 [pid 5956] mkdir("./file0", 0777) = 0 [ 207.684157][ T5956] loop3: detected capacity change from 0 to 32768 [ 207.691174][ T5955] [ 207.691174][ T5955] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.691174][ T5955] [ 207.696245][ T5957] [ 207.696245][ T5957] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.696245][ T5957] [ 207.724334][ T112] [ 207.724334][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5956] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5955] <... lsetxattr resumed>) = 0 [pid 5955] exit_group(0) = ? [pid 5955] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5958] <... write resumed>) = 16777216 [pid 5957] <... mount resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5958] munmap(0x7feda9000000, 138412032 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5960 attached [pid 5960] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5960 [pid 5960] chdir("./17" [pid 5957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5960] <... chdir resumed>) = 0 [pid 5957] <... openat resumed>) = 3 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5957] chdir("./file0" [pid 5849] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5957] <... chdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5957] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5960] setpgid(0, 0 [pid 5957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] <... openat resumed>) = 3 [pid 5957] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] newfstatat(3, "", [pid 5960] <... setpgid resumed>) = 0 [ 207.724334][ T112] [ 207.752383][ T5956] [ 207.752383][ T5956] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.752383][ T5956] [ 207.775436][ T5957] [ 207.775436][ T5957] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5960] write(3, "1000", 4) = 4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5960] close(3 [pid 5849] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5960] <... close resumed>) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./16/binderfs", executing program [pid 5960] write(1, "executing program\n", 18 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5960] <... write resumed>) = 18 [pid 5849] unlink("./16/binderfs" [pid 5960] memfd_create("syzkaller", 0 [pid 5956] <... mount resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5960] <... memfd_create resumed>) = 3 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5958] <... munmap resumed>) = 0 [pid 5956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5956] <... openat resumed>) = 3 [pid 5958] <... openat resumed>) = 4 [pid 5956] chdir("./file0" [ 207.775436][ T5957] [ 207.802896][ T5957] [ 207.802896][ T5957] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.802896][ T5957] [ 207.823790][ T5958] loop1: detected capacity change from 0 to 32768 [ 207.831033][ T113] [pid 5958] ioctl(4, LOOP_SET_FD, 3 [pid 5956] <... chdir resumed>) = 0 [pid 5957] <... lsetxattr resumed>) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5958] <... ioctl resumed>) = 0 [pid 5957] exit_group(0 [pid 5956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5958] close(3) = 0 [pid 5958] close(4) = 0 [pid 5958] mkdir("./file0", 0777) = 0 [pid 5958] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5957] <... exit_group resumed>) = ? [pid 5956] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5958] <... mount resumed>) = 0 [ 207.831033][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.831033][ T113] [ 207.850269][ T5849] [ 207.850269][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.850269][ T5849] [ 207.862270][ T5958] [ 207.862270][ T5958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.862270][ T5958] [ 207.870313][ T5849] [ 207.870313][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.870313][ T5849] [pid 5958] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5958] chdir("./file0") = 0 [pid 5958] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5958] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5957] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [ 207.884908][ T5956] [ 207.884908][ T5956] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.884908][ T5956] [ 207.890292][ T5958] [ 207.890292][ T5958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.890292][ T5958] [ 207.906558][ T5956] [ 207.906558][ T5956] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.906558][ T5956] [ 207.922022][ T5958] [ 207.922022][ T5958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.922022][ T5958] [ 207.932635][ T113] [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] <... lsetxattr resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5956] exit_group(0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./16/file0" [pid 5956] <... exit_group resumed>) = ? [pid 5852] <... openat resumed>) = 3 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, [pid 5956] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] newfstatat(3, "", [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(3 [pid 5852] getdents64(3, [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./16") = 0 [pid 5849] mkdir("./17", 0777) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5852] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [ 207.932635][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.932635][ T113] [pid 5852] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5958] <... lsetxattr resumed>) = 0 [pid 5852] unlink("./16/binderfs" [pid 5850] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", [pid 5852] <... unlink resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5958] exit_group(0) = ? [pid 5852] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5958] +++ exited with 0 +++ [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./16/binderfs" [pid 5848] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... unlink resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 208.000617][ T112] [ 208.000617][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.000617][ T112] [ 208.033049][ T5852] [ 208.033049][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.033049][ T5852] [ 208.045071][ T5852] [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./17/binderfs") = 0 [ 208.045071][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.045071][ T5852] [ 208.056402][ T5850] [ 208.056402][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.056402][ T5850] [ 208.067964][ T5850] [ 208.067964][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.067964][ T5850] [ 208.090055][ T5848] [ 208.090055][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.090055][ T5848] [pid 5848] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./16/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./16" [pid 5850] <... umount2 resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5850] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] mkdir("./17", 0777 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5850] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5852] close(3 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5848] <... umount2 resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... close resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./17/file0", [pid 5850] rmdir("./16/file0" [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... rmdir resumed>) = 0 [ 208.112119][ T5848] [ 208.112119][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.112119][ T5848] [pid 5848] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(3, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] close(3 [pid 5848] <... openat resumed>) = 4 [pid 5850] <... close resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 5850] rmdir("./16") = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] mkdir("./17", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] getdents64(4, [pid 5850] <... openat resumed>) = 3 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5848] getdents64(4, [pid 5850] <... ioctl resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(3 [pid 5848] close(4) = 0 [pid 5848] rmdir("./17/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5961 attached [pid 5961] set_robust_list(0x555584a2d760, 24) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5961 [pid 5848] rmdir("./17" [pid 5961] chdir("./17" [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./18", 0777 [pid 5961] <... chdir resumed>) = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5961] setpgid(0, 0) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... mkdir resumed>) = 0 [pid 5961] <... openat resumed>) = 3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5961] write(3, "1000", 4 [pid 5848] <... openat resumed>) = 3 [pid 5961] <... write resumed>) = 4 [pid 5961] close(3) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5961] write(1, "executing program\n", 18) = 18 [pid 5961] memfd_create("syzkaller", 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5961] <... memfd_create resumed>) = 3 [pid 5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 5959] <... write resumed>) = 16777216 [pid 5959] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 5959] <... munmap resumed>) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... close resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5962 [pid 5959] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5962 attached [pid 5959] ioctl(4, LOOP_SET_FD, 3 [pid 5960] <... write resumed>) = 16777216 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5962] set_robust_list(0x555584a2d760, 24) = 0 [pid 5962] chdir("./17") = 0 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5962] setpgid(0, 0) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5962] write(3, "1000", 4) = 4 [pid 5962] close(3./strace-static-x86_64: Process 5963 attached [pid 5960] munmap(0x7feda9000000, 138412032 [pid 5959] <... ioctl resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5963 [pid 5962] <... close resumed>) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs" [pid 5963] set_robust_list(0x555584a2d760, 24 [pid 5962] <... symlink resumed>) = 0 [pid 5963] <... set_robust_list resumed>) = 0 executing program [pid 5962] write(1, "executing program\n", 18) = 18 [pid 5963] chdir("./17" [pid 5962] memfd_create("syzkaller", 0 [pid 5963] <... chdir resumed>) = 0 [pid 5962] <... memfd_create resumed>) = 3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5962] <... mmap resumed>) = 0x7feda9000000 [pid 5963] <... prctl resumed>) = 0 [pid 5963] setpgid(0, 0 [pid 5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5959] close(3) = 0 [pid 5959] close(4 [pid 5963] <... setpgid resumed>) = 0 [pid 5959] <... close resumed>) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5959] mkdir("./file0", 0777 [pid 5963] <... openat resumed>) = 3 [pid 5960] <... munmap resumed>) = 0 [pid 5959] <... mkdir resumed>) = 0 [pid 5963] write(3, "1000", 4) = 4 [ 208.503410][ T5959] loop0: detected capacity change from 0 to 32768 [pid 5963] close(3) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs" [pid 5959] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5963] <... symlink resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5963] write(1, "executing program\n", 18 [pid 5960] <... openat resumed>) = 4 executing program [pid 5960] ioctl(4, LOOP_SET_FD, 3 [pid 5963] <... write resumed>) = 18 [pid 5960] <... ioctl resumed>) = 0 [pid 5963] memfd_create("syzkaller", 0) = 3 [pid 5848] <... close resumed>) = 0 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5960] close(3) = 0 [pid 5960] close(4) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5960] mkdir("./file0", 0777) = 0 [pid 5959] <... mount resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5964 ./strace-static-x86_64: Process 5964 attached [pid 5960] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5964] set_robust_list(0x555584a2d760, 24) = 0 [pid 5964] chdir("./18") = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 208.569430][ T5959] [ 208.569430][ T5959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.569430][ T5959] [ 208.580297][ T5960] loop4: detected capacity change from 0 to 32768 [pid 5964] setpgid(0, 0 [pid 5959] chdir("./file0" [pid 5964] <... setpgid resumed>) = 0 [pid 5959] <... chdir resumed>) = 0 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5964] <... openat resumed>) = 3 [pid 5964] write(3, "1000", 4) = 4 [pid 5964] close(3) = 0 [pid 5964] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5964] write(1, "executing program\n", 18) = 18 [pid 5964] memfd_create("syzkaller", 0) = 3 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5959] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5960] <... mount resumed>) = 0 [pid 5960] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5960] chdir("./file0") = 0 [ 208.653992][ T5960] [ 208.653992][ T5960] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.653992][ T5960] [ 208.681191][ T5959] [ 208.681191][ T5959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.681191][ T5959] [ 208.701447][ T5960] [pid 5960] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 208.701447][ T5960] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.701447][ T5960] [ 208.738376][ T5959] [ 208.738376][ T5959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.738376][ T5959] [ 208.740230][ T5960] [pid 5960] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5959] <... lsetxattr resumed>) = 0 [pid 5959] exit_group(0) = ? [pid 5959] +++ exited with 0 +++ [ 208.740230][ T5960] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.740230][ T5960] [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5960] <... lsetxattr resumed>) = 0 [pid 5847] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./17/binderfs" [pid 5960] exit_group(0 [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5960] <... exit_group resumed>) = ? [pid 5960] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 208.789600][ T112] [ 208.789600][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.789600][ T112] [ 208.820775][ T113] [ 208.820775][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.820775][ T113] [pid 5851] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 208.844209][ T5847] [ 208.844209][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.844209][ T5847] [ 208.877012][ T5847] [ 208.877012][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.877012][ T5847] [pid 5851] unlink("./17/binderfs" [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... unlink resumed>) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5851] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./17/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./17") = 0 [pid 5847] mkdir("./18", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5961] <... write resumed>) = 16777216 [pid 5851] <... umount2 resumed>) = 0 [ 208.930006][ T5851] [ 208.930006][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.930006][ T5851] [ 208.960328][ T5851] [ 208.960328][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.960328][ T5851] [pid 5961] munmap(0x7feda9000000, 138412032 [pid 5851] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5961] <... munmap resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5961] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5851] <... openat resumed>) = 4 [pid 5961] ioctl(4, LOOP_SET_FD, 3 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5961] <... ioctl resumed>) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4 [pid 5961] close(3 [pid 5851] <... close resumed>) = 0 [pid 5961] <... close resumed>) = 0 [pid 5851] rmdir("./17/file0" [pid 5961] close(4) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5961] mkdir("./file0", 0777) = 0 [pid 5961] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [ 209.061852][ T5961] loop2: detected capacity change from 0 to 32768 [pid 5851] rmdir("./17") = 0 [pid 5851] mkdir("./18", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5961] <... mount resumed>) = 0 [pid 5961] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5961] chdir("./file0") = 0 [pid 5961] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 209.118555][ T5961] [ 209.118555][ T5961] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.118555][ T5961] [pid 5961] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 209.167707][ T5961] [ 209.167707][ T5961] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.167707][ T5961] [ 209.190022][ T5961] [ 209.190022][ T5961] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.190022][ T5961] [pid 5961] exit_group(0) = ? [pid 5961] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./17/binderfs") = 0 [ 209.230117][ T112] [ 209.230117][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.230117][ T112] [pid 5849] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5963] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 5963] munmap(0x7feda9000000, 138412032 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5965 attached , child_tidptr=0x555584a2d750) = 5965 [pid 5965] set_robust_list(0x555584a2d760, 24) = 0 [pid 5965] chdir("./18") = 0 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5965] setpgid(0, 0) = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4 [pid 5962] <... write resumed>) = 16777216 [ 209.270599][ T5849] [ 209.270599][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.270599][ T5849] [ 209.310156][ T5849] [ 209.310156][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.310156][ T5849] [pid 5963] <... munmap resumed>) = 0 [pid 5965] <... write resumed>) = 4 [pid 5962] munmap(0x7feda9000000, 138412032 [pid 5849] <... umount2 resumed>) = 0 [pid 5965] close(3) = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5965] symlink("/dev/binderfs", "./binderfs" [pid 5963] <... openat resumed>) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5963] ioctl(4, LOOP_SET_FD, 3 [pid 5965] <... symlink resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./17/file0", [pid 5965] write(1, "executing program\n", 18 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, executing program [pid 5965] <... write resumed>) = 18 [pid 5963] <... ioctl resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./17/file0" [pid 5965] memfd_create("syzkaller", 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5965] <... memfd_create resumed>) = 3 [pid 5849] getdents64(3, [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] close(3 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5965] <... mmap resumed>) = 0x7feda9000000 [pid 5963] <... close resumed>) = 0 [pid 5963] close(4) = 0 [pid 5963] mkdir("./file0", 0777 [pid 5962] <... munmap resumed>) = 0 [pid 5849] close(3 [pid 5963] <... mkdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5963] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] rmdir("./17") = 0 [pid 5849] mkdir("./18", 0777) = 0 [ 209.363269][ T5963] loop3: detected capacity change from 0 to 32768 [pid 5962] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5962] <... openat resumed>) = 4 [pid 5849] <... openat resumed>) = 3 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5964] <... write resumed>) = 16777216 [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 5962] <... ioctl resumed>) = 0 [pid 5964] munmap(0x7feda9000000, 138412032 [pid 5962] close(3) = 0 [pid 5962] close(4) = 0 [pid 5962] mkdir("./file0", 0777) = 0 [ 209.407317][ T5962] loop5: detected capacity change from 0 to 32768 [ 209.419284][ T5963] [ 209.419284][ T5963] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.419284][ T5963] [pid 5962] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5964] <... munmap resumed>) = 0 [pid 5964] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5963] <... mount resumed>) = 0 [pid 5964] <... openat resumed>) = 4 [pid 5963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5963] chdir("./file0") = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5963] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5962] <... mount resumed>) = 0 [pid 5964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5964] close(3 [pid 5962] <... openat resumed>) = 3 [pid 5964] <... close resumed>) = 0 [pid 5962] chdir("./file0" [pid 5964] close(4) = 0 [pid 5962] <... chdir resumed>) = 0 [pid 5964] mkdir("./file0", 0777 [pid 5962] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 209.483633][ T5962] [ 209.483633][ T5962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.483633][ T5962] [ 209.507067][ T5963] [ 209.507067][ T5963] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.507067][ T5963] [ 209.521126][ T5964] loop1: detected capacity change from 0 to 32768 [pid 5962] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5964] <... mkdir resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5964] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5963] <... lsetxattr resumed>) = 0 [ 209.537391][ T5962] [ 209.537391][ T5962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.537391][ T5962] [ 209.541024][ T5963] [ 209.541024][ T5963] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.541024][ T5963] [ 209.574582][ T5962] [ 209.574582][ T5962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.574582][ T5962] [pid 5963] exit_group(0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5966 ./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x555584a2d760, 24 [pid 5963] <... exit_group resumed>) = ? [pid 5966] <... set_robust_list resumed>) = 0 [pid 5963] +++ exited with 0 +++ [pid 5962] <... lsetxattr resumed>) = 0 [pid 5966] chdir("./18" [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5966] <... chdir resumed>) = 0 [pid 5850] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5964] <... mount resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] unlink("./17/binderfs") = 0 [pid 5850] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5964] <... openat resumed>) = 3 [ 209.588564][ T113] [ 209.588564][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.588564][ T113] [ 209.615574][ T5964] [ 209.615574][ T5964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.615574][ T5964] [ 209.620862][ T112] [ 209.620862][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.620862][ T112] [pid 5964] chdir("./file0" [pid 5962] exit_group(0) = ? [pid 5964] <... chdir resumed>) = 0 [pid 5962] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5964] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5964] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./17/binderfs") = 0 [pid 5852] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] <... prctl resumed>) = 0 [pid 5966] setpgid(0, 0) = 0 [ 209.652785][ T5850] [ 209.652785][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.652785][ T5850] [ 209.670286][ T5964] [ 209.670286][ T5964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.670286][ T5964] [ 209.690820][ T5852] [ 209.690820][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.690820][ T5852] [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [ 209.700051][ T5964] [ 209.700051][ T5964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.700051][ T5964] [ 209.710638][ T5852] [ 209.710638][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.710638][ T5852] [ 209.720049][ T5850] [ 209.720049][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.720049][ T5850] [ 209.746109][ T113] executing program [pid 5852] <... umount2 resumed>) = 0 [pid 5966] close(3 [pid 5964] <... lsetxattr resumed>) = 0 [pid 5852] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] <... close resumed>) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./17/file0", [pid 5966] <... symlink resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5966] write(1, "executing program\n", 18 [pid 5852] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] <... write resumed>) = 18 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5966] memfd_create("syzkaller", 0 [pid 5852] newfstatat(4, "", [pid 5966] <... memfd_create resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./17/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./17" [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5964] exit_group(0 [pid 5852] <... rmdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5966] <... mmap resumed>) = 0x7feda9000000 [pid 5964] <... exit_group resumed>) = ? [pid 5852] mkdir("./18", 0777 [pid 5850] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... mkdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5964] +++ exited with 0 +++ [pid 5852] <... ioctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] close(3 [pid 5850] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5850] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] unlink("./18/binderfs") = 0 [pid 5848] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5967 [pid 5850] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5967 attached [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5967] set_robust_list(0x555584a2d760, 24 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 209.746109][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.746109][ T113] [pid 5850] getdents64(4, [pid 5967] <... set_robust_list resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 5967] chdir("./18" [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./17/file0" [pid 5967] <... chdir resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] getdents64(3, [pid 5967] setpgid(0, 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5967] <... setpgid resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] close(3 [pid 5967] <... openat resumed>) = 3 [pid 5850] <... close resumed>) = 0 [pid 5967] write(3, "1000", 4 [pid 5850] rmdir("./17") = 0 [pid 5967] <... write resumed>) = 4 [pid 5850] mkdir("./18", 0777 [pid 5967] close(3) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs" [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5967] <... symlink resumed>) = 0 executing program [pid 5967] write(1, "executing program\n", 18 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5967] <... write resumed>) = 18 [pid 5850] <... ioctl resumed>) = 0 [pid 5967] memfd_create("syzkaller", 0 [pid 5850] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5967] <... memfd_create resumed>) = 3 [pid 5848] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./18/file0", [ 209.804324][ T5848] [ 209.804324][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.804324][ T5848] [ 209.833905][ T5848] [ 209.833905][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.833905][ T5848] [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./18/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./18") = 0 [pid 5848] mkdir("./19", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5968 ./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x555584a2d760, 24) = 0 [pid 5968] chdir("./18") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5968] write(1, "executing program\n", 18) = 18 [pid 5968] memfd_create("syzkaller", 0) = 3 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5968] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached , child_tidptr=0x555584a2d750) = 5969 [pid 5848] <... close resumed>) = 0 [pid 5969] set_robust_list(0x555584a2d760, 24) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5969] chdir("./18") = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5969] setpgid(0, 0) = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5970 ./strace-static-x86_64: Process 5970 attached [pid 5970] set_robust_list(0x555584a2d760, 24 [pid 5969] <... openat resumed>) = 3 [pid 5969] write(3, "1000", 4 [pid 5970] <... set_robust_list resumed>) = 0 [pid 5969] <... write resumed>) = 4 [pid 5970] chdir("./19" [pid 5969] close(3 [pid 5970] <... chdir resumed>) = 0 [pid 5969] <... close resumed>) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs" [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5969] <... symlink resumed>) = 0 [pid 5969] write(1, "executing program\n", 18 [pid 5970] setpgid(0, 0executing program ) = 0 [pid 5969] <... write resumed>) = 18 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5969] memfd_create("syzkaller", 0) = 3 [pid 5965] <... write resumed>) = 16777216 [pid 5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5970] <... openat resumed>) = 3 [pid 5970] write(3, "1000", 4) = 4 [pid 5970] close(3 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5965] munmap(0x7feda9000000, 138412032 [pid 5970] <... close resumed>) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] <... munmap resumed>) = 0 executing program [pid 5970] write(1, "executing program\n", 18) = 18 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 5970] memfd_create("syzkaller", 0) = 3 [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5965] <... ioctl resumed>) = 0 [pid 5965] close(3) = 0 [pid 5965] close(4) = 0 [pid 5965] mkdir("./file0", 0777) = 0 [pid 5965] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5965] chdir("./file0") = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 210.276675][ T5965] loop0: detected capacity change from 0 to 32768 [ 210.310328][ T5965] [ 210.310328][ T5965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.310328][ T5965] [ 210.349402][ T5965] [ 210.349402][ T5965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.349402][ T5965] [ 210.389998][ T5965] [ 210.389998][ T5965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.389998][ T5965] [pid 5965] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5965] <... lsetxattr resumed>) = 0 [pid 5965] exit_group(0) = ? [pid 5965] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./18/binderfs") = 0 [ 210.430465][ T112] [ 210.430465][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.430465][ T112] [pid 5847] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] <... write resumed>) = 16777216 [pid 5966] munmap(0x7feda9000000, 138412032 [pid 5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5966] <... munmap resumed>) = 0 [ 210.492107][ T5847] [ 210.492107][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.492107][ T5847] [ 210.523850][ T5847] [ 210.523850][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.523850][ T5847] [pid 5966] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] mkdir("./file0", 0777) = 0 [ 210.540009][ T5966] loop4: detected capacity change from 0 to 32768 [pid 5966] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5966] <... openat resumed>) = 3 [pid 5966] chdir("./file0") = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 210.580578][ T5966] [ 210.580578][ T5966] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.580578][ T5966] [pid 5966] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 210.636246][ T5966] [ 210.636246][ T5966] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.636246][ T5966] [pid 5847] getdents64(4, [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, [pid 5966] <... lsetxattr resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4 [pid 5966] exit_group(0 [pid 5967] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 5966] <... exit_group resumed>) = ? [pid 5967] munmap(0x7feda9000000, 138412032 [pid 5966] +++ exited with 0 +++ [pid 5847] rmdir("./18/file0") = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5847] getdents64(3, [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./18") = 0 [pid 5847] mkdir("./19", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5851] <... restart_syscall resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 5851] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 210.679456][ T5966] [ 210.679456][ T5966] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.679456][ T5966] [ 210.703191][ T112] [ 210.703191][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.703191][ T112] [pid 5851] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", [pid 5967] <... munmap resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./18/binderfs") = 0 [pid 5851] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5968] <... write resumed>) = 16777216 [pid 5967] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5968] munmap(0x7feda9000000, 138412032 [pid 5967] <... openat resumed>) = 4 [ 210.806992][ T5851] [ 210.806992][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.806992][ T5851] [ 210.830070][ T5851] [ 210.830070][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.830070][ T5851] [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5968] <... munmap resumed>) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5967] <... ioctl resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5968] <... openat resumed>) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5967] close(3 [pid 5851] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5968] close(3) = 0 [pid 5967] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5968] close(4 [pid 5967] close(4 [pid 5851] newfstatat(AT_FDCWD, "./18/file0", [pid 5968] <... close resumed>) = 0 [pid 5968] mkdir("./file0", 0777 [pid 5967] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5968] <... mkdir resumed>) = 0 [pid 5967] mkdir("./file0", 0777 [pid 5968] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5967] <... mkdir resumed>) = 0 [pid 5851] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5967] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 210.860709][ T5967] loop2: detected capacity change from 0 to 32768 [ 210.881339][ T5968] loop5: detected capacity change from 0 to 32768 [pid 5851] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./18/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./18") = 0 [pid 5851] mkdir("./19", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5968] <... mount resumed>) = 0 [pid 5968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5968] chdir("./file0") = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 210.920209][ T5968] [ 210.920209][ T5968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.920209][ T5968] [ 210.959390][ T5968] [ 210.959390][ T5968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.959390][ T5968] [pid 5968] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5968] exit_group(0) = ? [pid 5967] <... mount resumed>) = 0 [pid 5968] +++ exited with 0 +++ [pid 5967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [ 210.982700][ T5968] [ 210.982700][ T5968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.982700][ T5968] [ 211.001770][ T5967] [ 211.001770][ T5967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.001770][ T5967] [ 211.020373][ T113] [ 211.020373][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.020373][ T113] [pid 5967] chdir("./file0") = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5969] <... write resumed>) = 16777216 [pid 5967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5969] munmap(0x7feda9000000, 138412032 [pid 5967] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, ./strace-static-x86_64: Process 5971 attached 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5971] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5971 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5971] <... set_robust_list resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5971] chdir("./19" [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./18/binderfs" [pid 5971] <... chdir resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5852] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [ 211.058581][ T5967] [ 211.058581][ T5967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.058581][ T5967] [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5969] <... munmap resumed>) = 0 executing program [pid 5971] write(1, "executing program\n", 18) = 18 [pid 5971] memfd_create("syzkaller", 0 [ 211.099141][ T5852] [ 211.099141][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.099141][ T5852] [ 211.121206][ T5967] [ 211.121206][ T5967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.121206][ T5967] [ 211.134023][ T5852] [ 211.134023][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.134023][ T5852] [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5971] <... memfd_create resumed>) = 3 [pid 5969] <... openat resumed>) = 4 [pid 5969] ioctl(4, LOOP_SET_FD, 3 [pid 5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5967] <... lsetxattr resumed>) = 0 [pid 5967] exit_group(0) = ? [pid 5967] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5971] <... mmap resumed>) = 0x7feda9000000 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./18/binderfs") = 0 [ 211.146389][ T5969] loop3: detected capacity change from 0 to 32768 [ 211.153642][ T112] [ 211.153642][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.153642][ T112] [pid 5849] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 5969] <... ioctl resumed>) = 0 [pid 5852] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./18/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./18") = 0 [pid 5852] mkdir("./19", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5969] close(3) = 0 [pid 5969] close(4 [pid 5852] close(3 [pid 5970] <... write resumed>) = 16777216 [pid 5969] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5969] mkdir("./file0", 0777) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... umount2 resumed>) = 0 [pid 5970] munmap(0x7feda9000000, 138412032 [pid 5849] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5972 attached [pid 5969] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./18/file0", [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5972 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5972] set_robust_list(0x555584a2d760, 24 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5972] <... set_robust_list resumed>) = 0 [ 211.190330][ T5849] [ 211.190330][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.190330][ T5849] [ 211.218081][ T5849] [ 211.218081][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.218081][ T5849] [pid 5849] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5972] chdir("./19" [pid 5849] <... openat resumed>) = 4 [pid 5970] <... munmap resumed>) = 0 [pid 5972] <... chdir resumed>) = 0 [pid 5969] <... mount resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5972] <... prctl resumed>) = 0 [pid 5849] getdents64(4, [ 211.259755][ T5969] [ 211.259755][ T5969] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.259755][ T5969] [pid 5972] setpgid(0, 0 [pid 5970] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5969] <... openat resumed>) = 3 [pid 5849] getdents64(4, [pid 5972] <... setpgid resumed>) = 0 [pid 5970] <... openat resumed>) = 4 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5970] ioctl(4, LOOP_SET_FD, 3 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5969] chdir("./file0") = 0 [pid 5969] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5969] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5972] <... openat resumed>) = 3 [pid 5970] <... ioctl resumed>) = 0 [pid 5849] rmdir("./18/file0" [pid 5972] write(3, "1000", 4 [pid 5849] <... rmdir resumed>) = 0 [pid 5972] <... write resumed>) = 4 [pid 5849] getdents64(3, [pid 5972] close(3) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs" [pid 5970] close(3 [pid 5849] close(3 [pid 5972] <... symlink resumed>) = 0 [ 211.304697][ T5970] loop1: detected capacity change from 0 to 32768 [ 211.311252][ T5969] [ 211.311252][ T5969] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.311252][ T5969] [pid 5970] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 executing program [pid 5972] write(1, "executing program\n", 18 [pid 5970] close(4 [pid 5849] rmdir("./18" [pid 5970] <... close resumed>) = 0 [pid 5972] <... write resumed>) = 18 [pid 5970] mkdir("./file0", 0777 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./19", 0777) = 0 [pid 5970] <... mkdir resumed>) = 0 [pid 5972] memfd_create("syzkaller", 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5972] <... memfd_create resumed>) = 3 [pid 5970] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [ 211.351638][ T5969] [ 211.351638][ T5969] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.351638][ T5969] [ 211.377569][ T113] [ 211.377569][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.377569][ T113] [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5969] <... lsetxattr resumed>) = 0 [pid 5972] <... mmap resumed>) = 0x7feda9000000 [pid 5969] exit_group(0) = ? [pid 5969] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5970] <... mount resumed>) = 0 [pid 5970] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5970] chdir("./file0") = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5970] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./18/binderfs") = 0 [ 211.412821][ T5970] [ 211.412821][ T5970] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.412821][ T5970] [ 211.448747][ T5970] [ 211.448747][ T5970] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.448747][ T5970] [ 211.472037][ T5850] [ 211.472037][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.472037][ T5850] [ 211.500070][ T5850] [ 211.500070][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.500070][ T5850] [ 211.502924][ T5970] [ 211.502924][ T5970] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.502924][ T5970] [pid 5850] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5970] <... lsetxattr resumed>) = 0 [pid 5970] exit_group(0) = ? [pid 5970] +++ exited with 0 +++ [pid 5852] <... close resumed>) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached [pid 5850] <... umount2 resumed>) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5973 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5973] set_robust_list(0x555584a2d760, 24 [pid 5848] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5973] <... set_robust_list resumed>) = 0 [pid 5850] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, [pid 5850] newfstatat(AT_FDCWD, "./18/file0", [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5850] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./19/binderfs" [pid 5850] <... openat resumed>) = 4 [pid 5848] <... unlink resumed>) = 0 [pid 5850] newfstatat(4, "", [pid 5848] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5973] chdir("./19") = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 211.546116][ T113] [ 211.546116][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.546116][ T113] [ 211.584973][ T5848] [ 211.584973][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.584973][ T5848] [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5973] setpgid(0, 0 [pid 5850] close(4 [pid 5973] <... setpgid resumed>) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... close resumed>) = 0 [pid 5973] <... openat resumed>) = 3 [pid 5850] rmdir("./18/file0" [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5973] write(1, "executing program\n", 18executing program [pid 5850] getdents64(3, [pid 5973] <... write resumed>) = 18 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5973] memfd_create("syzkaller", 0 [pid 5850] close(3 [pid 5973] <... memfd_create resumed>) = 3 [pid 5850] <... close resumed>) = 0 [pid 5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] rmdir("./18") = 0 [pid 5850] mkdir("./19", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4 [pid 5850] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./19/file0" [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 211.601347][ T5848] [ 211.601347][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.601347][ T5848] [pid 5850] close(3 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./19") = 0 [pid 5848] mkdir("./20", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5974 attached [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5974] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5974 [pid 5974] <... set_robust_list resumed>) = 0 [pid 5974] chdir("./19") = 0 [pid 5974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5974] setpgid(0, 0) = 0 [pid 5974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5974] write(3, "1000", 4) = 4 [pid 5974] close(3) = 0 executing program [pid 5974] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5974] write(1, "executing program\n", 18) = 18 [pid 5974] memfd_create("syzkaller", 0) = 3 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5971] <... write resumed>) = 16777216 [pid 5973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5971] munmap(0x7feda9000000, 138412032 [pid 5850] <... close resumed>) = 0 [pid 5971] <... munmap resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5975 ./strace-static-x86_64: Process 5975 attached [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5975] set_robust_list(0x555584a2d760, 24 [pid 5971] <... openat resumed>) = 4 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5971] ioctl(4, LOOP_SET_FD, 3 [pid 5975] chdir("./19") = 0 [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0) = 0 [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5975] write(3, "1000", 4) = 4 [pid 5975] close(3) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5975] write(1, "executing program\n", 18executing program [pid 5848] <... close resumed>) = 0 [pid 5975] <... write resumed>) = 18 [pid 5971] <... ioctl resumed>) = 0 [pid 5975] memfd_create("syzkaller", 0 [pid 5971] close(3 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5975] <... memfd_create resumed>) = 3 [pid 5971] <... close resumed>) = 0 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5971] close(4./strace-static-x86_64: Process 5976 attached ) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5976 [pid 5975] <... mmap resumed>) = 0x7feda9000000 [pid 5971] mkdir("./file0", 0777 [pid 5976] set_robust_list(0x555584a2d760, 24 [pid 5971] <... mkdir resumed>) = 0 [pid 5976] <... set_robust_list resumed>) = 0 [pid 5976] chdir("./20") = 0 [pid 5971] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5976] setpgid(0, 0) = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 211.983741][ T5971] loop0: detected capacity change from 0 to 32768 [pid 5976] write(3, "1000", 4) = 4 [pid 5976] close(3) = 0 [pid 5976] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5976] write(1, "executing program\n", 18) = 18 [pid 5976] memfd_create("syzkaller", 0) = 3 [ 212.041342][ T5971] [ 212.041342][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.041342][ T5971] [pid 5971] <... mount resumed>) = 0 [pid 5971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5971] chdir("./file0") = 0 [pid 5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5971] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5976] <... mmap resumed>) = 0x7feda9000000 [pid 5971] <... lsetxattr resumed>) = 0 [pid 5971] exit_group(0) = ? [ 212.082987][ T5971] [ 212.082987][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.082987][ T5971] [ 212.119994][ T5971] [ 212.119994][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.119994][ T5971] [pid 5972] <... write resumed>) = 16777216 [pid 5971] +++ exited with 0 +++ [pid 5972] munmap(0x7feda9000000, 138412032 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5847] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./19/binderfs") = 0 [ 212.163709][ T112] [ 212.163709][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.163709][ T112] [pid 5847] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5972] <... munmap resumed>) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 212.210687][ T5847] [ 212.210687][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.210687][ T5847] [ 212.240595][ T5847] [ 212.240595][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.240595][ T5847] [pid 5972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5972] close(3 [pid 5847] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5972] <... close resumed>) = 0 [pid 5972] close(4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5972] <... close resumed>) = 0 [pid 5972] mkdir("./file0", 0777 [pid 5847] newfstatat(AT_FDCWD, "./19/file0", [pid 5972] <... mkdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5972] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 212.271291][ T5972] loop4: detected capacity change from 0 to 32768 [pid 5847] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./19/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./19") = 0 [pid 5847] mkdir("./20", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5973] <... write resumed>) = 16777216 [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5973] munmap(0x7feda9000000, 138412032 [pid 5972] <... mount resumed>) = 0 [pid 5972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 212.324146][ T5972] [ 212.324146][ T5972] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.324146][ T5972] [pid 5972] chdir("./file0") = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5972] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5973] <... munmap resumed>) = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5973] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5973] close(3) = 0 [pid 5973] close(4) = 0 [ 212.402112][ T5972] [ 212.402112][ T5972] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.402112][ T5972] [ 212.430530][ T5973] loop5: detected capacity change from 0 to 32768 [ 212.440413][ T5972] [ 212.440413][ T5972] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.440413][ T5972] [pid 5973] mkdir("./file0", 0777) = 0 [pid 5972] <... lsetxattr resumed>) = 0 [pid 5973] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5972] exit_group(0) = ? [ 212.471254][ T113] [ 212.471254][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.471254][ T113] [pid 5972] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./19/binderfs") = 0 [pid 5851] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5973] <... mount resumed>) = 0 [pid 5973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 212.512135][ T5973] [ 212.512135][ T5973] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.512135][ T5973] [ 212.542614][ T5851] [ 212.542614][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.542614][ T5851] [pid 5973] chdir("./file0") = 0 [pid 5973] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 212.579914][ T5851] [ 212.579914][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.579914][ T5851] [ 212.603577][ T5973] [ 212.603577][ T5973] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.603577][ T5973] [ 212.624811][ T5973] [pid 5973] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5974] <... write resumed>) = 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./19/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5974] munmap(0x7feda9000000, 138412032 [pid 5851] close(3) = 0 [pid 5851] rmdir("./19") = 0 [pid 5851] mkdir("./20", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 212.624811][ T5973] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.624811][ T5973] [pid 5851] close(3 [pid 5974] <... munmap resumed>) = 0 [pid 5973] <... lsetxattr resumed>) = 0 [pid 5973] exit_group(0) = ? [pid 5973] +++ exited with 0 +++ [pid 5847] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5974] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5974] <... openat resumed>) = 4 [pid 5974] ioctl(4, LOOP_SET_FD, 3 [pid 5852] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, ./strace-static-x86_64: Process 5977 attached 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5977] set_robust_list(0x555584a2d760, 24 [pid 5852] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5977 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./19/binderfs") = 0 [pid 5852] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5977] <... set_robust_list resumed>) = 0 [pid 5977] chdir("./20") = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5977] setpgid(0, 0) = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5977] write(3, "1000", 4) = 4 [pid 5977] close(3) = 0 [ 212.680256][ T113] [ 212.680256][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.680256][ T113] [ 212.713925][ T5974] loop2: detected capacity change from 0 to 32768 [pid 5977] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5977] write(1, "executing program\n", 18) = 18 [pid 5977] memfd_create("syzkaller", 0) = 3 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5974] <... ioctl resumed>) = 0 [pid 5974] close(3) = 0 [pid 5974] close(4) = 0 [pid 5974] mkdir("./file0", 0777) = 0 [pid 5974] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5976] <... write resumed>) = 16777216 [ 212.741862][ T5852] [ 212.741862][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.741862][ T5852] [ 212.775529][ T5852] [ 212.775529][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.775529][ T5852] [pid 5976] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5974] <... mount resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5974] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 4 [pid 5974] chdir("./file0" [pid 5852] newfstatat(4, "", [pid 5974] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 5974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 5974] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [ 212.811172][ T5974] [ 212.811172][ T5974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.811172][ T5974] [pid 5852] rmdir("./19/file0" [pid 5976] <... munmap resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5976] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] getdents64(3, [pid 5976] <... openat resumed>) = 4 [pid 5976] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5975] <... write resumed>) = 16777216 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 5976] close(3 [pid 5975] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 5976] <... close resumed>) = 0 [pid 5976] close(4 [pid 5852] rmdir("./19" [pid 5976] <... close resumed>) = 0 [pid 5975] <... munmap resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5976] mkdir("./file0", 0777 [pid 5975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] mkdir("./20", 0777 [pid 5976] <... mkdir resumed>) = 0 [pid 5975] <... openat resumed>) = 4 [pid 5974] <... lsetxattr resumed>) = 0 [ 212.860484][ T5974] [ 212.860484][ T5974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.860484][ T5974] [ 212.890312][ T5976] loop1: detected capacity change from 0 to 32768 [ 212.892249][ T5974] [ 212.892249][ T5974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.892249][ T5974] [pid 5852] <... mkdir resumed>) = 0 [pid 5974] exit_group(0) = ? [pid 5974] +++ exited with 0 +++ [pid 5851] <... close resumed>) = 0 [pid 5976] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5975] ioctl(4, LOOP_SET_FD, 3 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5974, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] <... openat resumed>) = 3 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5978 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5849] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5978 attached [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5975] <... ioctl resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5978] set_robust_list(0x555584a2d760, 24 [pid 5975] close(3 [pid 5852] close(3 [pid 5849] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5978] <... set_robust_list resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5978] chdir("./20" [pid 5975] <... close resumed>) = 0 [pid 5849] newfstatat(3, "", [pid 5978] <... chdir resumed>) = 0 [pid 5975] close(4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5975] <... close resumed>) = 0 [pid 5849] getdents64(3, [pid 5975] mkdir("./file0", 0777 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5975] <... mkdir resumed>) = 0 [pid 5849] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5975] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5978] <... prctl resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5976] <... mount resumed>) = 0 [pid 5978] setpgid(0, 0 [pid 5849] unlink("./19/binderfs" [pid 5978] <... setpgid resumed>) = 0 [pid 5976] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... unlink resumed>) = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5976] <... openat resumed>) = 3 [pid 5849] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5978] <... openat resumed>) = 3 [pid 5976] chdir("./file0" [pid 5978] write(3, "1000", 4 [pid 5976] <... chdir resumed>) = 0 [ 212.942081][ T113] [ 212.942081][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.942081][ T113] [ 212.958899][ T5975] loop3: detected capacity change from 0 to 32768 [ 212.981640][ T5976] [ 212.981640][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.981640][ T5976] [pid 5978] <... write resumed>) = 4 [pid 5976] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program ) = -1 EBUSY (Device or resource busy) [pid 5978] close(3) = 0 [pid 5978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5978] write(1, "executing program\n", 18) = 18 [pid 5978] memfd_create("syzkaller", 0) = 3 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5976] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5975] <... mount resumed>) = 0 [ 213.029123][ T5975] [ 213.029123][ T5975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.029123][ T5975] [ 213.040218][ T5849] [ 213.040218][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.040218][ T5849] [ 213.068059][ T5849] [ 213.068059][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.068059][ T5849] [pid 5975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5976] <... lsetxattr resumed>) = 0 [pid 5975] <... openat resumed>) = 3 [pid 5975] chdir("./file0") = 0 [pid 5976] exit_group(0 [ 213.068229][ T5976] [ 213.068229][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.068229][ T5976] [ 213.102607][ T5976] [ 213.102607][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.102607][ T5976] [ 213.115573][ T112] [ 213.115573][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.115573][ T112] [pid 5975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5976] <... exit_group resumed>) = ? [pid 5975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5975] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5976] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5976, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./20/binderfs") = 0 [pid 5848] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [ 213.132433][ T5975] [ 213.132433][ T5975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.132433][ T5975] [ 213.150009][ T5975] [ 213.150009][ T5975] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.150009][ T5975] [ 213.163908][ T5848] [ 213.163908][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.163908][ T5848] [ 213.174976][ T113] [pid 5975] <... lsetxattr resumed>) = 0 [pid 5975] exit_group(0) = ? [pid 5849] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 5975] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] getdents64(4, [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./19/file0") = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5849] getdents64(3, [pid 5850] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 213.174976][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.174976][ T113] [ 213.194734][ T5848] [ 213.194734][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.194734][ T5848] [pid 5850] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] close(3 [pid 5850] <... openat resumed>) = 3 [pid 5849] <... close resumed>) = 0 [pid 5850] newfstatat(3, "", [pid 5849] rmdir("./19" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, [pid 5849] mkdir("./20", 0777 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... mkdir resumed>) = 0 [pid 5850] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... openat resumed>) = 3 [pid 5850] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5850] unlink("./19/binderfs" [pid 5849] close(3 [pid 5850] <... unlink resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./20/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./20") = 0 [pid 5848] mkdir("./21", 0777) = 0 [pid 5850] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5979 attached [pid 5979] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5979 [pid 5979] <... set_robust_list resumed>) = 0 [pid 5979] chdir("./20") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [ 213.281132][ T5850] [ 213.281132][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.281132][ T5850] [ 213.310515][ T5850] [ 213.310515][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.310515][ T5850] [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5979] write(1, "executing program\n", 18) = 18 [pid 5979] memfd_create("syzkaller", 0) = 3 [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] newfstatat(4, "", [pid 5849] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5980 ./strace-static-x86_64: Process 5980 attached [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 5980] set_robust_list(0x555584a2d760, 24 [pid 5850] <... close resumed>) = 0 [pid 5980] <... set_robust_list resumed>) = 0 [pid 5980] chdir("./20" [pid 5850] rmdir("./19/file0" [pid 5980] <... chdir resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] getdents64(3, [pid 5980] <... prctl resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5980] setpgid(0, 0 [pid 5850] close(3 [pid 5980] <... setpgid resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] rmdir("./19") = 0 [pid 5980] <... openat resumed>) = 3 [pid 5850] mkdir("./20", 0777 [pid 5980] write(3, "1000", 4 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5980] <... write resumed>) = 4 [pid 5980] close(3 [pid 5850] <... ioctl resumed>) = 0 [pid 5980] <... close resumed>) = 0 [pid 5850] close(3 [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5980] write(1, "executing program\n", 18) = 18 [pid 5980] memfd_create("syzkaller", 0) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5981 attached [pid 5977] <... write resumed>) = 16777216 [pid 5981] set_robust_list(0x555584a2d760, 24) = 0 [pid 5981] chdir("./21" [pid 5977] munmap(0x7feda9000000, 138412032 [pid 5981] <... chdir resumed>) = 0 [pid 5981] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5981 [pid 5981] setpgid(0, 0) = 0 [pid 5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5981] write(3, "1000", 4) = 4 [pid 5981] close(3) = 0 [pid 5981] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5981] write(1, "executing program\n", 18) = 18 [pid 5981] memfd_create("syzkaller", 0) = 3 [pid 5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5977] <... munmap resumed>) = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5977] ioctl(4, LOOP_SET_FD, 3 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5977] <... ioctl resumed>) = 0 [pid 5977] close(3) = 0 [pid 5977] close(4) = 0 [pid 5977] mkdir("./file0", 0777) = 0 [ 213.634823][ T5977] loop0: detected capacity change from 0 to 32768 [pid 5977] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 213.692705][ T5977] [ 213.692705][ T5977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.692705][ T5977] [pid 5977] chdir("./file0") = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5977] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 213.771773][ T5977] [ 213.771773][ T5977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.771773][ T5977] [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5977] <... lsetxattr resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5977] exit_group(0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5977] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5982 attached [pid 5977] +++ exited with 0 +++ [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5982 [pid 5982] set_robust_list(0x555584a2d760, 24) = 0 [pid 5982] chdir("./20" [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5982] <... chdir resumed>) = 0 [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5982] <... prctl resumed>) = 0 [pid 5981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5982] setpgid(0, 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5982] <... setpgid resumed>) = 0 [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5982] <... openat resumed>) = 3 [pid 5847] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 213.819566][ T5977] [ 213.819566][ T5977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.819566][ T5977] [ 213.845008][ T113] [ 213.845008][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.845008][ T113] [pid 5847] unlink("./20/binderfs" [pid 5982] write(3, "1000", 4 [pid 5847] <... unlink resumed>) = 0 [pid 5982] <... write resumed>) = 4 [pid 5847] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5982] close(3) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5982] write(1, "executing program\n", 18) = 18 [pid 5982] memfd_create("syzkaller", 0) = 3 [pid 5982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5978] <... write resumed>) = 16777216 [ 213.892523][ T5847] [ 213.892523][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.892523][ T5847] [ 213.916081][ T5847] [ 213.916081][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.916081][ T5847] [pid 5978] munmap(0x7feda9000000, 138412032) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5979] <... write resumed>) = 16777216 [pid 5978] <... ioctl resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5978] close(3) = 0 [pid 5978] close(4) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5978] mkdir("./file0", 0777) = 0 [pid 5847] newfstatat(4, "", [ 214.000422][ T5978] loop4: detected capacity change from 0 to 32768 [pid 5978] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5979] munmap(0x7feda9000000, 138412032 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5978] <... mount resumed>) = 0 [pid 5847] rmdir("./20/file0" [pid 5978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5978] chdir("./file0") = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 214.057041][ T5978] [ 214.057041][ T5978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.057041][ T5978] [pid 5847] getdents64(3, [pid 5978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5978] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5979] <... munmap resumed>) = 0 [pid 5847] close(3 [pid 5979] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./20" [pid 5979] <... openat resumed>) = 4 [pid 5979] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./21", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5979] <... ioctl resumed>) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5979] close(3 [pid 5847] <... ioctl resumed>) = 0 [pid 5979] <... close resumed>) = 0 [pid 5847] close(3 [pid 5979] close(4) = 0 [pid 5979] mkdir("./file0", 0777 [pid 5978] <... lsetxattr resumed>) = 0 [ 214.110611][ T5978] [ 214.110611][ T5978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.110611][ T5978] [ 214.125812][ T5979] loop5: detected capacity change from 0 to 32768 [ 214.145354][ T5978] [ 214.145354][ T5978] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.145354][ T5978] [pid 5978] exit_group(0) = ? [pid 5978] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5979] <... mkdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./20/binderfs") = 0 [pid 5851] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5979] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5980] <... write resumed>) = 16777216 [ 214.179164][ T112] [ 214.179164][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.179164][ T112] [ 214.210574][ T5979] [ 214.210574][ T5979] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.210574][ T5979] [ 214.221276][ T5851] [ 214.221276][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5980] munmap(0x7feda9000000, 138412032 [pid 5979] <... mount resumed>) = 0 [pid 5979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5979] chdir("./file0") = 0 [pid 5979] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5979] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5980] <... munmap resumed>) = 0 [ 214.221276][ T5851] [ 214.240965][ T5851] [ 214.240965][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.240965][ T5851] [ 214.264691][ T5979] [ 214.264691][ T5979] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.264691][ T5979] [pid 5980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5981] <... write resumed>) = 16777216 [pid 5980] <... openat resumed>) = 4 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./20/file0" [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./20") = 0 [pid 5851] mkdir("./21", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5981] munmap(0x7feda9000000, 138412032 [pid 5980] <... ioctl resumed>) = 0 [pid 5980] close(3) = 0 [pid 5980] close(4 [pid 5979] <... lsetxattr resumed>) = 0 [pid 5980] <... close resumed>) = 0 [pid 5979] exit_group(0) = ? [pid 5979] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [ 214.320822][ T5979] [ 214.320822][ T5979] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.320822][ T5979] [ 214.343072][ T5980] loop2: detected capacity change from 0 to 32768 [ 214.367873][ T113] [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5980] mkdir("./file0", 0777 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5852] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5980] <... mkdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5983 [pid 5852] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5983 attached [pid 5852] unlink("./20/binderfs") = 0 [pid 5852] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5983] set_robust_list(0x555584a2d760, 24) = 0 [pid 5980] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5983] chdir("./21" [pid 5981] <... munmap resumed>) = 0 [pid 5983] <... chdir resumed>) = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5981] <... openat resumed>) = 4 [pid 5983] <... prctl resumed>) = 0 [pid 5981] ioctl(4, LOOP_SET_FD, 3 [pid 5983] setpgid(0, 0) = 0 [ 214.367873][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.367873][ T113] [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5983] write(3, "1000", 4) = 4 [pid 5983] close(3) = 0 [pid 5983] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5983] write(1, "executing program\n", 18) = 18 [pid 5983] memfd_create("syzkaller", 0) = 3 [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5981] <... ioctl resumed>) = 0 [pid 5981] close(3) = 0 [pid 5981] close(4) = 0 [pid 5981] mkdir("./file0", 0777) = 0 [pid 5981] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5980] <... mount resumed>) = 0 [pid 5980] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5980] chdir("./file0") = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 214.414311][ T5981] loop1: detected capacity change from 0 to 32768 [ 214.431964][ T5852] [ 214.431964][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.431964][ T5852] [ 214.443051][ T5980] [ 214.443051][ T5980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.443051][ T5980] [ 214.487763][ T5980] [ 214.487763][ T5980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.487763][ T5980] [ 214.489694][ T5981] [ 214.489694][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.489694][ T5981] [ 214.515444][ T5852] [ 214.515444][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.515444][ T5852] [pid 5980] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5981] <... mount resumed>) = 0 [pid 5981] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5981] chdir("./file0") = 0 [pid 5981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5980] <... lsetxattr resumed>) = 0 [ 214.536962][ T5980] [ 214.536962][ T5980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.536962][ T5980] [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5980] exit_group(0 [pid 5852] newfstatat(AT_FDCWD, "./20/file0", [pid 5980] <... exit_group resumed>) = ? [pid 5981] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5980] +++ exited with 0 +++ [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5981] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] getdents64(4, [pid 5849] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./20/file0" [ 214.581540][ T112] [ 214.581540][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.581540][ T112] [ 214.595574][ T5981] [ 214.595574][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.595574][ T5981] [pid 5849] getdents64(3, [pid 5852] <... rmdir resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./20/binderfs" [pid 5852] getdents64(3, [pid 5849] <... unlink resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(3) = 0 [pid 5852] rmdir("./20") = 0 [pid 5852] mkdir("./21", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 214.632794][ T5981] [ 214.632794][ T5981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.632794][ T5981] [pid 5852] close(3 [pid 5981] <... lsetxattr resumed>) = 0 [pid 5981] exit_group(0 [pid 5851] <... close resumed>) = 0 [pid 5981] <... exit_group resumed>) = ? [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5981] +++ exited with 0 +++ ./strace-static-x86_64: Process 5984 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5984 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5981, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5984] set_robust_list(0x555584a2d760, 24 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] chdir("./21" [pid 5848] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] <... chdir resumed>) = 0 [ 214.688698][ T113] [ 214.688698][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.688698][ T113] [ 214.720392][ T5849] [ 214.720392][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.720392][ T5849] [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] <... prctl resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5984] setpgid(0, 0 [pid 5848] newfstatat(3, "", [pid 5984] <... setpgid resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5984] <... openat resumed>) = 3 [pid 5848] getdents64(3, [pid 5984] write(3, "1000", 4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5984] <... write resumed>) = 4 [pid 5848] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] close(3) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5848] newfstatat(AT_FDCWD, "./21/binderfs", executing program [pid 5984] <... symlink resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5984] write(1, "executing program\n", 18 [pid 5848] unlink("./21/binderfs" [pid 5984] <... write resumed>) = 18 [pid 5848] <... unlink resumed>) = 0 [pid 5984] memfd_create("syzkaller", 0 [pid 5848] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] <... memfd_create resumed>) = 3 [ 214.738408][ T5849] [ 214.738408][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.738408][ T5849] [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5982] <... write resumed>) = 16777216 [pid 5849] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5982] munmap(0x7feda9000000, 138412032 [pid 5849] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5982] <... munmap resumed>) = 0 [pid 5849] rmdir("./20/file0" [pid 5982] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 5982] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5982] ioctl(4, LOOP_SET_FD, 3 [pid 5849] close(3 [pid 5848] newfstatat(AT_FDCWD, "./21/file0", [pid 5849] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 214.780234][ T5848] [ 214.780234][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.780234][ T5848] [ 214.801818][ T5848] [ 214.801818][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.801818][ T5848] [pid 5982] <... ioctl resumed>) = 0 [pid 5849] rmdir("./20" [pid 5848] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5982] close(3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5982] <... close resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5982] close(4) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", [pid 5982] mkdir("./file0", 0777 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5982] <... mkdir resumed>) = 0 [pid 5848] getdents64(4, [pid 5982] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 5849] mkdir("./21", 0777 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] rmdir("./21/file0") = 0 [pid 5848] getdents64(3, [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5849] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5848] <... close resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5848] rmdir("./21" [pid 5982] <... mount resumed>) = 0 [pid 5849] close(3 [pid 5848] <... rmdir resumed>) = 0 [ 214.852324][ T5982] loop3: detected capacity change from 0 to 32768 [ 214.876445][ T5982] [ 214.876445][ T5982] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.876445][ T5982] [pid 5848] mkdir("./22", 0777 [pid 5852] <... close resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5982] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5982] <... openat resumed>) = 3 [pid 5848] <... openat resumed>) = 3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5985 attached [pid 5982] chdir("./file0" [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5982] <... chdir resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5982] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] close(3 [pid 5982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5985 [pid 5982] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5985] set_robust_list(0x555584a2d760, 24 [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5985] <... set_robust_list resumed>) = 0 [pid 5985] chdir("./21") = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5985] write(1, "executing program\n", 18) = 18 [pid 5985] memfd_create("syzkaller", 0) = 3 [ 214.970597][ T5982] [ 214.970597][ T5982] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.970597][ T5982] [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5982] <... lsetxattr resumed>) = 0 [ 215.034400][ T5982] [ 215.034400][ T5982] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.034400][ T5982] [pid 5982] exit_group(0) = ? [pid 5982] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./20/binderfs") = 0 [ 215.080469][ T112] [ 215.080469][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.080469][ T112] [pid 5850] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5986 ./strace-static-x86_64: Process 5986 attached [ 215.160523][ T5850] [ 215.160523][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.160523][ T5850] [ 215.190168][ T5850] [ 215.190168][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.190168][ T5850] [pid 5986] set_robust_list(0x555584a2d760, 24) = 0 [pid 5986] chdir("./21") = 0 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5986] setpgid(0, 0) = 0 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5983] <... write resumed>) = 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5986] <... openat resumed>) = 3 [pid 5986] write(3, "1000", 4) = 4 [pid 5986] close(3) = 0 [pid 5986] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5986] write(1, "executing program\n", 18) = 18 [pid 5986] memfd_create("syzkaller", 0 [pid 5850] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5986] <... memfd_create resumed>) = 3 [pid 5850] newfstatat(AT_FDCWD, "./20/file0", [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5983] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./20/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./20") = 0 [pid 5848] <... close resumed>) = 0 [pid 5850] mkdir("./21", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5987 [pid 5850] close(3./strace-static-x86_64: Process 5987 attached [pid 5987] set_robust_list(0x555584a2d760, 24) = 0 [pid 5987] chdir("./22") = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5983] <... munmap resumed>) = 0 [pid 5987] <... prctl resumed>) = 0 [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] write(3, "1000", 4 [pid 5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5987] <... write resumed>) = 4 [pid 5983] ioctl(4, LOOP_SET_FD, 3 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5987] write(1, "executing program\n", 18) = 18 [pid 5987] memfd_create("syzkaller", 0) = 3 [pid 5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5983] <... ioctl resumed>) = 0 [pid 5987] <... mmap resumed>) = 0x7feda9000000 [pid 5983] close(3) = 0 [pid 5983] close(4) = 0 [pid 5983] mkdir("./file0", 0777) = 0 [pid 5983] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5983] chdir("./file0") = 0 [ 215.332448][ T5983] loop0: detected capacity change from 0 to 32768 [ 215.365524][ T5983] [ 215.365524][ T5983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.365524][ T5983] [pid 5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5983] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5984] <... write resumed>) = 16777216 [pid 5984] munmap(0x7feda9000000, 138412032 [pid 5983] <... lsetxattr resumed>) = 0 [pid 5983] exit_group(0) = ? [pid 5983] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 215.412162][ T5983] [ 215.412162][ T5983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.412162][ T5983] [ 215.434614][ T5983] [ 215.434614][ T5983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.434614][ T5983] [pid 5984] <... munmap resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5984] <... openat resumed>) = 4 [pid 5847] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./21/binderfs") = 0 [pid 5847] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5984] <... ioctl resumed>) = 0 [ 215.491609][ T112] [ 215.491609][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.491609][ T112] [ 215.515414][ T5984] loop4: detected capacity change from 0 to 32768 [ 215.530781][ T5847] [ 215.530781][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.530781][ T5847] [pid 5984] close(3) = 0 [pid 5984] close(4) = 0 [pid 5984] mkdir("./file0", 0777) = 0 [ 215.550400][ T5847] [ 215.550400][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.550400][ T5847] [pid 5984] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = 0 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5847] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./21/file0"./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x555584a2d760, 24 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, [pid 5988] <... set_robust_list resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5988] chdir("./21" [pid 5847] close(3 [pid 5988] <... chdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] rmdir("./21" [pid 5988] <... prctl resumed>) = 0 [pid 5988] setpgid(0, 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5988 [pid 5988] <... setpgid resumed>) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./22", 0777 [pid 5988] <... openat resumed>) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3 [pid 5847] <... mkdir resumed>) = 0 [pid 5988] <... close resumed>) = 0 [pid 5984] <... mount resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5984] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... openat resumed>) = 3 [pid 5984] <... openat resumed>) = 3 [ 215.623603][ T5984] [ 215.623603][ T5984] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.623603][ T5984] executing program [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5988] write(1, "executing program\n", 18) = 18 [pid 5988] memfd_create("syzkaller", 0) = 3 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5984] chdir("./file0") = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 215.703582][ T5984] [ 215.703582][ T5984] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.703582][ T5984] [pid 5984] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 215.750234][ T5984] [ 215.750234][ T5984] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.750234][ T5984] [pid 5984] exit_group(0) = ? [pid 5984] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./21/binderfs") = 0 [ 215.796850][ T112] [ 215.796850][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.796850][ T112] [pid 5851] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5985] <... write resumed>) = 16777216 [pid 5985] munmap(0x7feda9000000, 138412032) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5851] <... umount2 resumed>) = 0 [pid 5985] ioctl(4, LOOP_SET_FD, 3 [pid 5851] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 215.840298][ T5851] [ 215.840298][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.840298][ T5851] [ 215.871222][ T5851] [ 215.871222][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.871222][ T5851] [pid 5851] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./21/file0" [pid 5985] <... ioctl resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5985] close(3) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./21" [pid 5985] close(4 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./22", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5985] <... close resumed>) = 0 [pid 5985] mkdir("./file0", 0777) = 0 [pid 5847] <... close resumed>) = 0 [pid 5985] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5989 attached [pid 5989] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5989 [pid 5989] <... set_robust_list resumed>) = 0 [ 215.908734][ T5985] loop5: detected capacity change from 0 to 32768 [pid 5989] chdir("./22") = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5985] <... mount resumed>) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs" [pid 5985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5989] <... symlink resumed>) = 0 [pid 5989] write(1, "executing program\n", 18 [pid 5985] <... openat resumed>) = 3 executing program [pid 5989] <... write resumed>) = 18 [pid 5985] chdir("./file0") = 0 [pid 5989] memfd_create("syzkaller", 0 [ 215.972582][ T5985] [ 215.972582][ T5985] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.972582][ T5985] [pid 5985] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5989] <... memfd_create resumed>) = 3 [pid 5985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5985] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5989] <... mmap resumed>) = 0x7feda9000000 [ 216.050981][ T5985] [ 216.050981][ T5985] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.050981][ T5985] [ 216.063057][ T5985] [ 216.063057][ T5985] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.063057][ T5985] [ 216.091085][ T113] [ 216.091085][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5987] <... write resumed>) = 16777216 [pid 5985] <... lsetxattr resumed>) = 0 [pid 5987] munmap(0x7feda9000000, 138412032 [pid 5985] exit_group(0) = ? [pid 5985] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5852] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./21/binderfs") = 0 [pid 5852] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5987] <... munmap resumed>) = 0 [ 216.091085][ T113] [pid 5987] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5987] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5987] close(3) = 0 [pid 5987] close(4) = 0 [pid 5987] mkdir("./file0", 0777) = 0 [ 216.131532][ T5852] [ 216.131532][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.131532][ T5852] [ 216.143074][ T5987] loop1: detected capacity change from 0 to 32768 [ 216.161061][ T5852] [ 216.161061][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.161061][ T5852] [pid 5987] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5986] <... write resumed>) = 16777216 [pid 5986] munmap(0x7feda9000000, 138412032 [pid 5987] <... mount resumed>) = 0 [pid 5987] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5987] chdir("./file0" [pid 5852] <... umount2 resumed>) = 0 [pid 5987] <... chdir resumed>) = 0 [pid 5987] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 216.191107][ T5987] [ 216.191107][ T5987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.191107][ T5987] [pid 5987] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5986] <... munmap resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./21/file0") = 0 [pid 5986] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5852] getdents64(3, [pid 5986] close(3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5986] <... close resumed>) = 0 [pid 5852] close(3 [pid 5986] close(4 [pid 5852] <... close resumed>) = 0 [pid 5986] <... close resumed>) = 0 [pid 5852] rmdir("./21" [pid 5986] mkdir("./file0", 0777 [pid 5852] <... rmdir resumed>) = 0 [pid 5986] <... mkdir resumed>) = 0 [pid 5986] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] mkdir("./22", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 216.241346][ T5987] [ 216.241346][ T5987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.241346][ T5987] [ 216.261705][ T5986] loop2: detected capacity change from 0 to 32768 [ 216.267947][ T5987] [ 216.267947][ T5987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.267947][ T5987] [pid 5852] close(3 [pid 5851] <... close resumed>) = 0 [pid 5987] <... lsetxattr resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5987] exit_group(0) = ? [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 5990 ./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x555584a2d760, 24 [pid 5987] +++ exited with 0 +++ [pid 5990] <... set_robust_list resumed>) = 0 [pid 5990] chdir("./22" [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5990] <... chdir resumed>) = 0 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs" [pid 5848] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", executing program [pid 5990] <... symlink resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5990] write(1, "executing program\n", 18) = 18 [pid 5848] getdents64(3, [pid 5990] memfd_create("syzkaller", 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 216.305071][ T113] [ 216.305071][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.305071][ T113] [ 216.306993][ T5986] [ 216.306993][ T5986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.306993][ T5986] [pid 5990] <... memfd_create resumed>) = 3 [pid 5848] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5990] <... mmap resumed>) = 0x7feda9000000 [pid 5986] <... mount resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./22/binderfs") = 0 [pid 5848] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5986] <... openat resumed>) = 3 [pid 5986] chdir("./file0") = 0 [ 216.390730][ T5848] [ 216.390730][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.390730][ T5848] [pid 5986] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 216.431053][ T5848] [ 216.431053][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.431053][ T5848] [ 216.455265][ T5986] [ 216.455265][ T5986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.455265][ T5986] [pid 5986] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./22/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./22") = 0 [pid 5848] mkdir("./23", 0777) = 0 [ 216.490036][ T5986] [ 216.490036][ T5986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.490036][ T5986] [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5988] <... write resumed>) = 16777216 [pid 5986] <... lsetxattr resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5986] exit_group(0) = ? [pid 5988] munmap(0x7feda9000000, 138412032 [pid 5986] +++ exited with 0 +++ [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5848] <... ioctl resumed>) = 0 [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] close(3 [pid 5849] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 216.531021][ T112] [ 216.531021][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.531021][ T112] [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5988] <... munmap resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5988] <... openat resumed>) = 4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5988] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... close resumed>) = 0 [pid 5849] unlink("./21/binderfs" [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5991 attached [pid 5988] <... ioctl resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5991 [pid 5849] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5988] close(3) = 0 [pid 5991] set_robust_list(0x555584a2d760, 24) = 0 [pid 5988] close(4 [pid 5991] chdir("./22") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] <... close resumed>) = 0 [pid 5991] write(3, "1000", 4 [pid 5988] mkdir("./file0", 0777 [pid 5991] <... write resumed>) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5988] <... mkdir resumed>) = 0 executing program [pid 5991] write(1, "executing program\n", 18) = 18 [ 216.604373][ T5988] loop3: detected capacity change from 0 to 32768 [ 216.641899][ T5849] [ 216.641899][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.641899][ T5849] [pid 5991] memfd_create("syzkaller", 0 [pid 5988] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5991] <... memfd_create resumed>) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5988] <... mount resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5988] <... openat resumed>) = 3 [pid 5988] chdir("./file0" [pid 5849] newfstatat(AT_FDCWD, "./21/file0", [pid 5988] <... chdir resumed>) = 0 [pid 5988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 216.662280][ T5849] [ 216.662280][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.662280][ T5849] [ 216.678640][ T5988] [ 216.678640][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.678640][ T5988] [pid 5988] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./21/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./21") = 0 [pid 5849] mkdir("./22", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 216.732538][ T5988] [ 216.732538][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.732538][ T5988] [ 216.751067][ T5988] [ 216.751067][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.751067][ T5988] [pid 5849] close(3 [pid 5988] <... lsetxattr resumed>) = 0 [pid 5988] exit_group(0) = ? [pid 5988] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5848] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./21/binderfs") = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 216.840630][ T113] [ 216.840630][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.840630][ T113] [pid 5850] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5992 ./strace-static-x86_64: Process 5992 attached executing program [pid 5992] set_robust_list(0x555584a2d760, 24) = 0 [pid 5992] chdir("./23") = 0 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5992] setpgid(0, 0) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5992] write(3, "1000", 4) = 4 [pid 5992] close(3) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5992] write(1, "executing program\n", 18) = 18 [pid 5992] memfd_create("syzkaller", 0) = 3 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5989] <... write resumed>) = 16777216 [pid 5989] munmap(0x7feda9000000, 138412032) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./21/file0", [ 216.912224][ T5850] [ 216.912224][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.912224][ T5850] [ 216.942212][ T5850] [ 216.942212][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 216.942212][ T5850] [pid 5989] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5989] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5850] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5989] close(3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5989] <... close resumed>) = 0 [pid 5850] getdents64(4, [pid 5989] close(4 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5989] <... close resumed>) = 0 [pid 5850] close(4 [pid 5989] mkdir("./file0", 0777 [pid 5850] <... close resumed>) = 0 [pid 5989] <... mkdir resumed>) = 0 [pid 5989] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] rmdir("./21/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./21") = 0 [pid 5850] mkdir("./22", 0777) = 0 [ 216.982952][ T5989] loop0: detected capacity change from 0 to 32768 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5989] <... mount resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 217.050480][ T5989] [ 217.050480][ T5989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.050480][ T5989] [pid 5989] chdir("./file0") = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5989] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5990] <... write resumed>) = 16777216 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5993 attached [pid 5990] munmap(0x7feda9000000, 138412032 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5993 [pid 5993] set_robust_list(0x555584a2d760, 24) = 0 [pid 5993] chdir("./22" [pid 5990] <... munmap resumed>) = 0 [pid 5993] <... chdir resumed>) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] <... openat resumed>) = 4 [pid 5993] setpgid(0, 0 [ 217.108281][ T5989] [ 217.108281][ T5989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.108281][ T5989] [ 217.148027][ T5989] [ 217.148027][ T5989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.148027][ T5989] [pid 5990] ioctl(4, LOOP_SET_FD, 3 [pid 5989] <... lsetxattr resumed>) = 0 [pid 5989] exit_group(0) = ? [pid 5989] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./22/binderfs") = 0 [pid 5847] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5990] <... ioctl resumed>) = 0 [pid 5993] <... setpgid resumed>) = 0 [pid 5990] close(3 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5990] <... close resumed>) = 0 [pid 5993] <... openat resumed>) = 3 [pid 5990] close(4 [pid 5993] write(3, "1000", 4 [pid 5990] <... close resumed>) = 0 [pid 5990] mkdir("./file0", 0777 [pid 5993] <... write resumed>) = 4 [pid 5993] close(3 [pid 5990] <... mkdir resumed>) = 0 [pid 5993] <... close resumed>) = 0 [pid 5990] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5993] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5993] write(1, "executing program\n", 18) = 18 [pid 5993] memfd_create("syzkaller", 0) = 3 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 217.187730][ T5990] loop4: detected capacity change from 0 to 32768 [ 217.188037][ T112] [ 217.188037][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.188037][ T112] [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5990] <... mount resumed>) = 0 [pid 5990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5990] chdir("./file0" [pid 5850] <... close resumed>) = 0 [pid 5990] <... chdir resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5990] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 217.243499][ T5847] [ 217.243499][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.243499][ T5847] [ 217.250409][ T5990] [ 217.250409][ T5990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.250409][ T5990] [ 217.280744][ T5847] [ 217.280744][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.280744][ T5847] [pid 5990] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 5994 attached [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 5994 [pid 5994] set_robust_list(0x555584a2d760, 24) = 0 [pid 5994] chdir("./22") = 0 [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5994] setpgid(0, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5994] <... setpgid resumed>) = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] write(3, "1000", 4executing program [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5994] <... write resumed>) = 4 [pid 5994] close(3 [pid 5847] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5994] <... close resumed>) = 0 [pid 5994] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5994] <... symlink resumed>) = 0 [pid 5994] write(1, "executing program\n", 18 [pid 5847] getdents64(4, [pid 5994] <... write resumed>) = 18 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4 [pid 5994] memfd_create("syzkaller", 0) = 3 [pid 5847] <... close resumed>) = 0 [pid 5994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] rmdir("./22/file0" [pid 5994] <... mmap resumed>) = 0x7feda9000000 [pid 5847] <... rmdir resumed>) = 0 [ 217.313128][ T5990] [ 217.313128][ T5990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.313128][ T5990] [ 217.335094][ T5990] [ 217.335094][ T5990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.335094][ T5990] [pid 5990] <... lsetxattr resumed>) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./22") = 0 [pid 5847] mkdir("./23", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5990] exit_group(0) = ? [pid 5990] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./22/binderfs") = 0 [ 217.390229][ T113] [ 217.390229][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.390229][ T113] [pid 5851] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 217.448244][ T5851] [ 217.448244][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.448244][ T5851] [ 217.480447][ T5851] [ 217.480447][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.480447][ T5851] [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5991] <... write resumed>) = 16777216 [pid 5991] munmap(0x7feda9000000, 138412032 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./22/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5991] <... munmap resumed>) = 0 [pid 5851] rmdir("./22") = 0 [pid 5851] mkdir("./23", 0777 [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] <... mkdir resumed>) = 0 [pid 5991] <... openat resumed>) = 4 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5991] <... ioctl resumed>) = 0 [pid 5991] close(3) = 0 [pid 5991] close(4) = 0 [ 217.591875][ T5991] loop5: detected capacity change from 0 to 32768 [pid 5991] mkdir("./file0", 0777) = 0 [pid 5991] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5995 attached [pid 5991] <... mount resumed>) = 0 [pid 5995] set_robust_list(0x555584a2d760, 24 [pid 5991] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 5995 [pid 5995] <... set_robust_list resumed>) = 0 [pid 5995] chdir("./23" [pid 5991] <... openat resumed>) = 3 [pid 5995] <... chdir resumed>) = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5991] chdir("./file0" [pid 5995] <... prctl resumed>) = 0 [pid 5995] setpgid(0, 0 [pid 5991] <... chdir resumed>) = 0 [pid 5995] <... setpgid resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5991] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5995] <... openat resumed>) = 3 [pid 5991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 217.722220][ T5991] [ 217.722220][ T5991] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.722220][ T5991] [pid 5995] write(3, "1000", 4 [pid 5991] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5995] <... write resumed>) = 4 [pid 5995] close(3) = 0 [pid 5992] <... write resumed>) = 16777216 [pid 5992] munmap(0x7feda9000000, 138412032 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5992] <... munmap resumed>) = 0 executing program [pid 5995] write(1, "executing program\n", 18) = 18 [pid 5995] memfd_create("syzkaller", 0) = 3 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 217.768307][ T5991] [ 217.768307][ T5991] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.768307][ T5991] [ 217.807802][ T5991] [ 217.807802][ T5991] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.807802][ T5991] [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5991] <... lsetxattr resumed>) = 0 [pid 5992] <... openat resumed>) = 4 [pid 5991] exit_group(0 [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... exit_group resumed>) = ? [pid 5991] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5992] <... ioctl resumed>) = 0 [pid 5992] close(3 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5992] <... close resumed>) = 0 [pid 5852] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5992] close(4 [pid 5852] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5992] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5992] mkdir("./file0", 0777 [pid 5852] newfstatat(3, "", [pid 5992] <... mkdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5992] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] unlink("./22/binderfs") = 0 [ 217.841406][ T5992] loop1: detected capacity change from 0 to 32768 [ 217.842219][ T113] [ 217.842219][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.842219][ T113] [pid 5852] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 5996 ./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x555584a2d760, 24) = 0 [pid 5996] chdir("./23") = 0 [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] setpgid(0, 0) = 0 [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5996] write(3, "1000", 4) = 4 [pid 5996] close(3) = 0 [pid 5996] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5996] write(1, "executing program\n", 18) = 18 [pid 5996] memfd_create("syzkaller", 0) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5993] <... write resumed>) = 16777216 [pid 5993] munmap(0x7feda9000000, 138412032 [pid 5992] <... mount resumed>) = 0 [pid 5992] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5992] chdir("./file0") = 0 [pid 5992] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 217.896969][ T5852] [ 217.896969][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.896969][ T5852] [ 217.899258][ T5992] [ 217.899258][ T5992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.899258][ T5992] [ 217.929066][ T5852] [ 217.929066][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.929066][ T5852] [pid 5992] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5993] <... munmap resumed>) = 0 [ 217.978105][ T5992] [ 217.978105][ T5992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.978105][ T5992] [ 218.008063][ T5992] [ 218.008063][ T5992] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.008063][ T5992] [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [pid 5992] <... lsetxattr resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] <... ioctl resumed>) = 0 [pid 5992] exit_group(0 [pid 5993] close(3 [pid 5992] <... exit_group resumed>) = ? [pid 5993] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5992] +++ exited with 0 +++ [pid 5852] getdents64(4, [pid 5993] close(4 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] close(4) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5852] rmdir("./22/file0") = 0 [pid 5852] getdents64(3, [pid 5848] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5993] <... close resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] close(3 [pid 5848] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5993] mkdir("./file0", 0777 [pid 5852] <... close resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5993] <... mkdir resumed>) = 0 [pid 5852] rmdir("./22" [pid 5848] newfstatat(3, "", [pid 5993] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] mkdir("./23", 0777 [pid 5848] getdents64(3, [pid 5852] <... mkdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] ioctl(3, LOOP_CLR_FD [ 218.030743][ T112] [ 218.030743][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.030743][ T112] [ 218.044389][ T5993] loop2: detected capacity change from 0 to 32768 [pid 5848] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5852] <... ioctl resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] close(3 [pid 5848] unlink("./23/binderfs") = 0 [pid 5848] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... write resumed>) = 16777216 [pid 5994] munmap(0x7feda9000000, 138412032 [pid 5993] <... mount resumed>) = 0 [ 218.073560][ T5993] [ 218.073560][ T5993] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.073560][ T5993] [ 218.100639][ T5848] [ 218.100639][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.100639][ T5848] [pid 5993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5993] chdir("./file0") = 0 [pid 5994] <... munmap resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5993] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5994] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 218.133681][ T5848] [ 218.133681][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.133681][ T5848] [ 218.171604][ T5993] [ 218.171604][ T5993] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.171604][ T5993] [pid 5994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5994] close(3 [pid 5993] <... lsetxattr resumed>) = 0 [pid 5994] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5994] close(4) = 0 [pid 5994] mkdir("./file0", 0777) = 0 [pid 5848] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 218.187438][ T5994] loop3: detected capacity change from 0 to 32768 [ 218.197046][ T5993] [ 218.197046][ T5993] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.197046][ T5993] [ 218.222280][ T113] [ 218.222280][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.222280][ T113] [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./23/file0") = 0 [pid 5848] getdents64(3, [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5993] exit_group(0 [pid 5848] close(3 [pid 5993] <... exit_group resumed>) = ? [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./23") = 0 [pid 5993] +++ exited with 0 +++ [pid 5848] mkdir("./24", 0777 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5994] <... mount resumed>) = 0 [pid 5994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5849] <... restart_syscall resumed>) = 0 [pid 5994] <... openat resumed>) = 3 [pid 5848] <... ioctl resumed>) = 0 [pid 5994] chdir("./file0") = 0 [pid 5849] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(3 [pid 5994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./22/binderfs") = 0 [pid 5849] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 218.249729][ T5994] [ 218.249729][ T5994] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.249729][ T5994] [ 218.311812][ T5994] [ 218.311812][ T5994] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.311812][ T5994] [ 218.334116][ T5849] [ 218.334116][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.334116][ T5849] [ 218.350474][ T5994] [ 218.350474][ T5994] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.350474][ T5994] [pid 5994] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5994] exit_group(0 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... umount2 resumed>) = 0 [pid 5994] <... exit_group resumed>) = ? [pid 5849] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5997 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 5997 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./22/file0", [pid 5997] set_robust_list(0x555584a2d760, 24 [pid 5994] +++ exited with 0 +++ [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5997] <... set_robust_list resumed>) = 0 [pid 5849] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5997] chdir("./23" [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5994, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5850] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] <... chdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5849] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5849] newfstatat(4, "", [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(4, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5849] getdents64(4, [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] unlink("./22/binderfs" [pid 5849] close(4 [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... close resumed>) = 0 [ 218.371151][ T5849] [ 218.371151][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.371151][ T5849] [ 218.393211][ T112] [ 218.393211][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.393211][ T112] [pid 5850] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] rmdir("./22/file0" [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5997] setpgid(0, 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5997] <... setpgid resumed>) = 0 [pid 5849] getdents64(3, [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5997] <... openat resumed>) = 3 [pid 5849] rmdir("./22" [pid 5997] write(3, "1000", 4 [pid 5849] <... rmdir resumed>) = 0 [pid 5997] <... write resumed>) = 4 [pid 5849] mkdir("./23", 0777executing program [pid 5997] close(3 [pid 5849] <... mkdir resumed>) = 0 [pid 5997] <... close resumed>) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs" [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5997] <... symlink resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5997] write(1, "executing program\n", 18) = 18 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5997] memfd_create("syzkaller", 0) = 3 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 218.440329][ T5850] [ 218.440329][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.440329][ T5850] [ 218.490494][ T5850] [ 218.490494][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.490494][ T5850] [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 5998 ./strace-static-x86_64: Process 5998 attached [pid 5850] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5998] set_robust_list(0x555584a2d760, 24 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5998] <... set_robust_list resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5998] chdir("./24" [pid 5850] <... openat resumed>) = 4 [pid 5998] <... chdir resumed>) = 0 [pid 5850] newfstatat(4, "", [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5998] <... prctl resumed>) = 0 [pid 5998] setpgid(0, 0 [pid 5850] getdents64(4, [pid 5998] <... setpgid resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5998] <... openat resumed>) = 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./22/file0" [pid 5998] write(3, "1000", 4 [pid 5850] <... rmdir resumed>) = 0 [pid 5998] <... write resumed>) = 4 [pid 5998] close(3) = 0 [pid 5995] <... write resumed>) = 16777216 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5995] munmap(0x7feda9000000, 138412032 [pid 5850] close(3 [pid 5998] write(1, "executing program\n", 18) = 18 [pid 5998] memfd_create("syzkaller", 0) = 3 [pid 5998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./22") = 0 [pid 5850] mkdir("./23", 0777 [pid 5995] <... munmap resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5995] <... openat resumed>) = 4 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 5995] <... ioctl resumed>) = 0 [ 218.667582][ T5995] loop0: detected capacity change from 0 to 32768 [pid 5995] close(3) = 0 [pid 5995] close(4) = 0 [pid 5995] mkdir("./file0", 0777 [pid 5849] <... close resumed>) = 0 [pid 5995] <... mkdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5995] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"./strace-static-x86_64: Process 5999 attached [pid 5996] <... write resumed>) = 16777216 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 5999 [pid 5999] set_robust_list(0x555584a2d760, 24) = 0 [pid 5999] chdir("./23") = 0 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5999] setpgid(0, 0) = 0 [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5999] write(3, "1000", 4) = 4 [pid 5999] close(3) = 0 [pid 5999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5999] write(1, "executing program\n", 18 [pid 5996] munmap(0x7feda9000000, 138412032executing program [pid 5999] <... write resumed>) = 18 [pid 5999] memfd_create("syzkaller", 0) = 3 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 218.757227][ T5995] [ 218.757227][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.757227][ T5995] [pid 5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5996] <... munmap resumed>) = 0 [pid 5995] <... mount resumed>) = 0 [pid 5995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5995] chdir("./file0") = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5996] <... openat resumed>) = 4 [pid 5995] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5996] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5996] close(3) = 0 [ 218.829607][ T5995] [ 218.829607][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.829607][ T5995] [ 218.839269][ T5996] loop4: detected capacity change from 0 to 32768 [pid 5996] close(4) = 0 [pid 5996] mkdir("./file0", 0777) = 0 [ 218.870091][ T5995] [ 218.870091][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.870091][ T5995] [ 218.879502][ T5996] [ 218.879502][ T5996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.879502][ T5996] [pid 5996] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5995] <... lsetxattr resumed>) = 0 [pid 5995] exit_group(0) = ? [pid 5995] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5996] <... mount resumed>) = 0 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] getdents64(3, [pid 5996] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5996] chdir("./file0" [pid 5847] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./23/binderfs" [pid 5996] <... chdir resumed>) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... unlink resumed>) = 0 [pid 5996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5996] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 218.913569][ T113] [ 218.913569][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.913569][ T113] [ 218.951276][ T5996] [ 218.951276][ T5996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.951276][ T5996] [pid 5998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6000 attached , child_tidptr=0x555584a2d750) = 6000 [ 218.971141][ T5847] [ 218.971141][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.971141][ T5847] [ 218.990003][ T5996] [ 218.990003][ T5996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.990003][ T5996] [ 219.012654][ T5847] [ 219.012654][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5996] <... lsetxattr resumed>) = 0 [pid 6000] set_robust_list(0x555584a2d760, 24 [pid 5996] exit_group(0) = ? [pid 6000] <... set_robust_list resumed>) = 0 [pid 5996] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5996, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5851] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./23/binderfs") = 0 [pid 5851] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] chdir("./23") = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6000] setpgid(0, 0) = 0 [pid 5847] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./23/file0", [pid 6000] <... openat resumed>) = 3 [pid 6000] write(3, "1000", 4 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6000] <... write resumed>) = 4 [pid 5847] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] close(3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6000] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6000] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... openat resumed>) = 4 executing program [pid 6000] <... symlink resumed>) = 0 [pid 5847] newfstatat(4, "", [pid 6000] write(1, "executing program\n", 18) = 18 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 6000] memfd_create("syzkaller", 0) = 3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 219.012654][ T5847] [ 219.026105][ T113] [ 219.026105][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.026105][ T113] [ 219.055790][ T5851] [ 219.055790][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.055790][ T5851] [pid 5847] close(4) = 0 [pid 5847] rmdir("./23/file0" [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./23") = 0 [pid 5847] mkdir("./24", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 219.089145][ T5851] [ 219.089145][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.089145][ T5851] [pid 5847] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./23/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./23") = 0 [pid 5851] mkdir("./24", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5997] <... write resumed>) = 16777216 [pid 5997] munmap(0x7feda9000000, 138412032) = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5997] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5997] close(3) = 0 [pid 5997] close(4) = 0 [pid 5997] mkdir("./file0", 0777) = 0 [pid 5997] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 219.352183][ T5997] loop5: detected capacity change from 0 to 32768 [ 219.380371][ T5997] [ 219.380371][ T5997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.380371][ T5997] [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5997] <... mount resumed>) = 0 [pid 5997] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5997] chdir("./file0") = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] <... close resumed>) = 0 [pid 5997] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6001 attached , child_tidptr=0x555584a2d750) = 6001 [pid 6001] set_robust_list(0x555584a2d760, 24) = 0 [pid 6001] chdir("./24") = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5997] <... lsetxattr resumed>) = 0 [ 219.453035][ T5997] [ 219.453035][ T5997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.453035][ T5997] [ 219.480152][ T5997] [ 219.480152][ T5997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.480152][ T5997] [ 219.500697][ T113] [pid 5998] <... write resumed>) = 16777216 [pid 6001] write(3, "1000", 4 [pid 5998] munmap(0x7feda9000000, 138412032 [pid 5997] exit_group(0 [pid 6001] <... write resumed>) = 4 [pid 5997] <... exit_group resumed>) = ? [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs" [pid 5997] +++ exited with 0 +++ [pid 5851] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 6001] <... symlink resumed>) = 0 [pid 5852] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./23/binderfs") = 0 [pid 5852] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 219.500697][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.500697][ T113] [pid 6001] write(1, "executing program\n", 18executing program ) = 18 [pid 6001] memfd_create("syzkaller", 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5998] <... munmap resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6002 ./strace-static-x86_64: Process 6002 attached [pid 6002] set_robust_list(0x555584a2d760, 24 [pid 6001] <... memfd_create resumed>) = 3 [pid 5998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5998] ioctl(4, LOOP_SET_FD, 3 [pid 6002] <... set_robust_list resumed>) = 0 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5999] <... write resumed>) = 16777216 [pid 6002] chdir("./24" [pid 6001] <... mmap resumed>) = 0x7feda9000000 [pid 6002] <... chdir resumed>) = 0 [pid 5998] <... ioctl resumed>) = 0 [pid 5998] close(3) = 0 [pid 5998] close(4 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5998] <... close resumed>) = 0 [pid 5999] munmap(0x7feda9000000, 138412032 [pid 6002] <... prctl resumed>) = 0 [pid 5998] mkdir("./file0", 0777 [pid 6002] setpgid(0, 0 [pid 5998] <... mkdir resumed>) = 0 [pid 6002] <... setpgid resumed>) = 0 [pid 5998] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 219.549821][ T5852] [ 219.549821][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.549821][ T5852] [ 219.571059][ T5852] [ 219.571059][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.571059][ T5852] [ 219.583708][ T5998] loop1: detected capacity change from 0 to 32768 [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs" [pid 5999] <... munmap resumed>) = 0 executing program [pid 6002] <... symlink resumed>) = 0 [pid 6002] write(1, "executing program\n", 18) = 18 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6002] memfd_create("syzkaller", 0 [pid 5998] <... mount resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] newfstatat(AT_FDCWD, "./23/file0", [pid 5998] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5998] chdir("./file0" [pid 5852] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6002] <... memfd_create resumed>) = 3 [pid 5998] <... chdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... openat resumed>) = 4 [ 219.616102][ T5998] [ 219.616102][ T5998] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.616102][ T5998] [pid 5998] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] newfstatat(4, "", [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6002] <... mmap resumed>) = 0x7feda9000000 [pid 5999] <... openat resumed>) = 4 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 5999] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./23/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./23") = 0 [pid 5852] mkdir("./24", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5999] <... ioctl resumed>) = 0 [ 219.659143][ T5998] [ 219.659143][ T5998] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.659143][ T5998] [ 219.690948][ T5998] [ 219.690948][ T5998] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.690948][ T5998] [ 219.701856][ T5999] loop2: detected capacity change from 0 to 32768 [pid 6000] <... write resumed>) = 16777216 [pid 5999] close(3 [pid 5998] <... lsetxattr resumed>) = 0 [pid 5998] exit_group(0 [pid 5999] <... close resumed>) = 0 [pid 5998] <... exit_group resumed>) = ? [pid 5999] close(4) = 0 [pid 5998] +++ exited with 0 +++ [pid 5999] mkdir("./file0", 0777 [pid 6000] munmap(0x7feda9000000, 138412032 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5999] <... mkdir resumed>) = 0 [pid 5999] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./24/binderfs") = 0 [ 219.739288][ T112] [ 219.739288][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.739288][ T112] [pid 5848] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] <... munmap resumed>) = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5999] <... mount resumed>) = 0 [ 219.790243][ T5999] [ 219.790243][ T5999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.790243][ T5999] [ 219.803994][ T5848] [ 219.803994][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.803994][ T5848] [pid 6000] ioctl(4, LOOP_SET_FD, 3 [pid 5999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5999] chdir("./file0" [pid 6000] <... ioctl resumed>) = 0 [pid 6000] close(3 [pid 5999] <... chdir resumed>) = 0 [pid 6000] <... close resumed>) = 0 [pid 5999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6000] close(4 [pid 5999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6000] <... close resumed>) = 0 [ 219.840310][ T6000] loop3: detected capacity change from 0 to 32768 [ 219.847792][ T5848] [ 219.847792][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.847792][ T5848] [pid 5999] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6000] mkdir("./file0", 0777 [pid 5848] <... umount2 resumed>) = 0 [pid 6000] <... mkdir resumed>) = 0 [pid 5848] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./24/file0") = 0 [ 219.884909][ T5999] [ 219.884909][ T5999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.884909][ T5999] [ 219.907888][ T6000] [ 219.907888][ T6000] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.907888][ T6000] [ 219.920808][ T5999] [ 219.920808][ T5999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.920808][ T5999] [pid 5999] <... lsetxattr resumed>) = 0 [pid 5848] getdents64(3, [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6000] <... mount resumed>) = 0 [pid 5999] exit_group(0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5999] <... exit_group resumed>) = ? [pid 5848] close(3 [pid 6000] <... openat resumed>) = 3 [pid 5999] +++ exited with 0 +++ [pid 6000] chdir("./file0" [pid 5848] <... close resumed>) = 0 [pid 6000] <... chdir resumed>) = 0 [pid 5848] rmdir("./24" [pid 6000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 6000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] mkdir("./25", 0777 [pid 5849] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6000] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./23/binderfs") = 0 [pid 5849] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 219.951364][ T113] [ 219.951364][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.951364][ T113] [ 219.981282][ T6000] [ 219.981282][ T6000] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.981282][ T6000] [pid 5852] <... close resumed>) = 0 [pid 5848] close(3 [ 220.008823][ T6000] [ 220.008823][ T6000] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.008823][ T6000] [ 220.014490][ T5849] [ 220.014490][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.014490][ T5849] [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6003 attached [pid 6000] <... lsetxattr resumed>) = 0 [pid 6003] set_robust_list(0x555584a2d760, 24 [pid 6000] exit_group(0) = ? [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6003 [pid 6000] +++ exited with 0 +++ [pid 6003] <... set_robust_list resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 6003] chdir("./24" [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6003] <... chdir resumed>) = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6003] <... prctl resumed>) = 0 [pid 5850] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6003] setpgid(0, 0) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6003] <... openat resumed>) = 3 [pid 5850] unlink("./23/binderfs") = 0 [pid 6003] write(3, "1000", 4 [ 220.053317][ T112] [ 220.053317][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.053317][ T112] [ 220.069155][ T5849] [ 220.069155][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.069155][ T5849] [ 220.100908][ T5850] [pid 5850] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6003] <... write resumed>) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6003] write(1, "executing program\n", 18) = 18 [pid 6003] memfd_create("syzkaller", 0) = 3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./23/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./23") = 0 [pid 5849] mkdir("./24", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... umount2 resumed>) = 0 [ 220.100908][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.100908][ T5850] [ 220.127515][ T5850] [ 220.127515][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.127515][ T5850] [pid 5850] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./23/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./23") = 0 [pid 5850] mkdir("./24", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6004 ./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x555584a2d760, 24) = 0 [pid 6004] chdir("./25") = 0 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] setpgid(0, 0) = 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6001] <... write resumed>) = 16777216 [pid 6004] <... openat resumed>) = 3 [pid 6001] munmap(0x7feda9000000, 138412032 [pid 6004] write(3, "1000", 4) = 4 [pid 6004] close(3) = 0 [pid 5849] <... close resumed>) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs" [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6005 attached [pid 6004] <... symlink resumed>) = 0 [pid 6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6002] <... write resumed>) = 16777216 [pid 6001] <... munmap resumed>) = 0 executing program [pid 6004] write(1, "executing program\n", 18 [pid 6002] munmap(0x7feda9000000, 138412032 [pid 6001] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6004] <... write resumed>) = 18 [pid 6005] set_robust_list(0x555584a2d760, 24 [pid 6001] <... openat resumed>) = 4 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6004] memfd_create("syzkaller", 0 [pid 6001] ioctl(4, LOOP_SET_FD, 3 [pid 6005] chdir("./24" [pid 6004] <... memfd_create resumed>) = 3 [pid 6001] <... ioctl resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6005 [pid 6005] <... chdir resumed>) = 0 [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6005] setpgid(0, 0) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6005] write(3, "1000", 4 [pid 5850] <... close resumed>) = 0 [pid 6005] <... write resumed>) = 4 [pid 6005] close(3 [pid 6004] <... mmap resumed>) = 0x7feda9000000 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6005] <... close resumed>) = 0 [pid 6005] symlink("/dev/binderfs", "./binderfs" [pid 6001] close(3 [pid 6005] <... symlink resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 6001] close(4 [pid 6005] write(1, "executing program\n", 18 [pid 6001] <... close resumed>) = 0 [pid 6001] mkdir("./file0", 0777) = 0 [pid 6001] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"executing program [pid 6002] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6006 attached [pid 6005] <... write resumed>) = 18 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6006 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 220.471353][ T6001] loop0: detected capacity change from 0 to 32768 [ 220.505001][ T6001] [ 220.505001][ T6001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.505001][ T6001] [pid 6002] ioctl(4, LOOP_SET_FD, 3 [pid 6001] <... mount resumed>) = 0 [pid 6001] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6001] chdir("./file0") = 0 [pid 6001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6001] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6002] <... ioctl resumed>) = 0 [pid 6002] close(3) = 0 [pid 6002] close(4) = 0 [pid 6002] mkdir("./file0", 0777) = 0 [pid 6002] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6006] set_robust_list(0x555584a2d760, 24) = 0 [pid 6006] chdir("./24") = 0 [ 220.534556][ T6002] loop4: detected capacity change from 0 to 32768 [ 220.550359][ T6001] [ 220.550359][ T6001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.550359][ T6001] [ 220.580767][ T6001] [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6006] setpgid(0, 0 [pid 6001] <... lsetxattr resumed>) = 0 [pid 6006] <... setpgid resumed>) = 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6006] write(3, "1000", 4) = 4 [pid 6001] exit_group(0) = ? [pid 6001] +++ exited with 0 +++ [pid 6006] close(3 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6006] <... close resumed>) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6006] <... symlink resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./24/binderfs"executing program ) = 0 [pid 6006] write(1, "executing program\n", 18 [pid 5847] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6006] <... write resumed>) = 18 [pid 6002] <... mount resumed>) = 0 [pid 6002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6006] memfd_create("syzkaller", 0 [pid 6002] chdir("./file0") = 0 [pid 6006] <... memfd_create resumed>) = 3 [ 220.580767][ T6001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.580767][ T6001] [ 220.610858][ T113] [ 220.610858][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.610858][ T113] [ 220.623622][ T6002] [ 220.623622][ T6002] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.623622][ T6002] [pid 6002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6002] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 220.669127][ T5847] [ 220.669127][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.669127][ T5847] [ 220.674121][ T6002] [ 220.674121][ T6002] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.674121][ T6002] [pid 6002] <... lsetxattr resumed>) = 0 [pid 6002] exit_group(0) = ? [pid 6002] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6002, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./24/binderfs") = 0 [ 220.710117][ T6002] [ 220.710117][ T6002] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.710117][ T6002] [ 220.730051][ T5847] [ 220.730051][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.730051][ T5847] [ 220.739360][ T112] [ 220.739360][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.739360][ T112] [pid 5851] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./24/file0") = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(3, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./24/file0", [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] close(3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 220.785071][ T5851] [ 220.785071][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.785071][ T5851] [ 220.810808][ T5851] [ 220.810808][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.810808][ T5851] [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./24/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... close resumed>) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./24") = 0 [pid 5851] mkdir("./25", 0777 [pid 5847] rmdir("./24" [pid 5851] <... mkdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] mkdir("./25", 0777 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6003] <... write resumed>) = 16777216 [pid 6003] munmap(0x7feda9000000, 138412032) = 0 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6003] close(3) = 0 [pid 6003] close(4) = 0 [pid 6003] mkdir("./file0", 0777) = 0 [ 221.090709][ T6003] loop5: detected capacity change from 0 to 32768 [pid 6003] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6007 attached [pid 6007] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6007 [pid 6007] chdir("./25") = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6007] setpgid(0, 0) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6007] write(3, "1000", 4) = 4 [pid 6007] close(3) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6007] write(1, "executing program\n", 18executing program ) = 18 [pid 6007] memfd_create("syzkaller", 0) = 3 [pid 6003] <... mount resumed>) = 0 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6007] <... mmap resumed>) = 0x7feda9000000 [pid 6003] <... openat resumed>) = 3 [pid 6003] chdir("./file0") = 0 [pid 6003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 221.161643][ T6003] [ 221.161643][ T6003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.161643][ T6003] [pid 6003] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6004] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 6004] munmap(0x7feda9000000, 138412032 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6008 [ 221.208867][ T6003] [ 221.208867][ T6003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.208867][ T6003] [ 221.240136][ T6003] [ 221.240136][ T6003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.240136][ T6003] ./strace-static-x86_64: Process 6008 attached [pid 6003] <... lsetxattr resumed>) = 0 [pid 6008] set_robust_list(0x555584a2d760, 24 [pid 6003] exit_group(0 [pid 6008] <... set_robust_list resumed>) = 0 [pid 6003] <... exit_group resumed>) = ? [pid 6008] chdir("./25" [pid 6003] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6004] <... munmap resumed>) = 0 [pid 6008] <... chdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6004] <... openat resumed>) = 4 [pid 6008] <... prctl resumed>) = 0 [pid 6004] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... openat resumed>) = 3 [pid 6008] setpgid(0, 0 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6008] <... setpgid resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./24/binderfs", [pid 6004] <... ioctl resumed>) = 0 [pid 6004] close(3) = 0 [pid 6004] close(4) = 0 [pid 6004] mkdir("./file0", 0777 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6004] <... mkdir resumed>) = 0 [pid 6004] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] unlink("./24/binderfs") = 0 [pid 6008] <... openat resumed>) = 3 [pid 5852] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6008] write(3, "1000", 4) = 4 [pid 6008] close(3) = 0 [pid 6008] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6004] <... mount resumed>) = 0 [pid 6004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6004] chdir("./file0") = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 221.272987][ T112] [ 221.272987][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.272987][ T112] [ 221.302812][ T6004] loop1: detected capacity change from 0 to 32768 [ 221.328300][ T6004] [ 221.328300][ T6004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.328300][ T6004] [ 221.353945][ T6004] [ 221.353945][ T6004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.353945][ T6004] [ 221.365423][ T5852] [ 221.365423][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.365423][ T5852] [pid 6004] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 executing program [pid 6008] write(1, "executing program\n", 18 [pid 6005] <... write resumed>) = 16777216 [pid 6008] <... write resumed>) = 18 [pid 6005] munmap(0x7feda9000000, 138412032 [pid 6008] memfd_create("syzkaller", 0) = 3 [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6004] <... lsetxattr resumed>) = 0 [pid 6004] exit_group(0) = ? [pid 6005] <... munmap resumed>) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6004] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6004, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [ 221.390499][ T5852] [ 221.390499][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.390499][ T5852] [ 221.403440][ T6004] [ 221.403440][ T6004] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.403440][ T6004] [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6005] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] <... umount2 resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(3, "", [pid 5852] newfstatat(AT_FDCWD, "./24/file0", [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] getdents64(3, [pid 5852] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... openat resumed>) = 4 [pid 5848] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5852] newfstatat(4, "", [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] unlink("./25/binderfs" [pid 5852] getdents64(4, [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./24/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./24") = 0 [pid 5852] mkdir("./25", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6005] <... ioctl resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 6005] close(3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 6005] <... close resumed>) = 0 [pid 6005] close(4 [pid 5852] close(3 [pid 6005] <... close resumed>) = 0 [ 221.440454][ T113] [ 221.440454][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.440454][ T113] [ 221.453461][ T6005] loop2: detected capacity change from 0 to 32768 [pid 6005] mkdir("./file0", 0777) = 0 [pid 6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6005] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6006] <... write resumed>) = 16777216 [ 221.491193][ T5848] [ 221.491193][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.491193][ T5848] [ 221.509698][ T5848] [ 221.509698][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.509698][ T5848] [pid 6006] munmap(0x7feda9000000, 138412032 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6005] <... mount resumed>) = 0 [pid 6005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./25/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./25") = 0 [pid 5848] mkdir("./26", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 221.542091][ T6005] [ 221.542091][ T6005] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.542091][ T6005] [pid 5848] close(3 [pid 6006] <... munmap resumed>) = 0 [pid 6005] <... openat resumed>) = 3 [pid 6005] chdir("./file0" [pid 6006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6005] <... chdir resumed>) = 0 [pid 6006] <... openat resumed>) = 4 [pid 6005] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6006] ioctl(4, LOOP_SET_FD, 3 [pid 6005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6006] <... ioctl resumed>) = 0 [pid 6005] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6006] close(3) = 0 [pid 6006] close(4) = 0 [pid 6008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6006] mkdir("./file0", 0777) = 0 [pid 6006] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6005] <... lsetxattr resumed>) = 0 [ 221.640771][ T6006] loop3: detected capacity change from 0 to 32768 [ 221.648021][ T6005] [ 221.648021][ T6005] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.648021][ T6005] [ 221.675956][ T6005] [ 221.675956][ T6005] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.675956][ T6005] [pid 6005] exit_group(0) = ? [pid 6005] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 221.717449][ T112] [ 221.717449][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.717449][ T112] [pid 5849] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./24/binderfs") = 0 [pid 6006] <... mount resumed>) = 0 [ 221.760104][ T6006] [ 221.760104][ T6006] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.760104][ T6006] [pid 5849] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 6006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6006] <... openat resumed>) = 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6009 ./strace-static-x86_64: Process 6009 attached [pid 6006] chdir("./file0") = 0 [pid 6006] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 6009] set_robust_list(0x555584a2d760, 24 [pid 6006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6009] <... set_robust_list resumed>) = 0 [pid 6009] chdir("./25") = 0 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6009] setpgid(0, 0) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6009] write(1, "executing program\n", 18 [pid 6006] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6009] <... write resumed>) = 18 [pid 6009] memfd_create("syzkaller", 0) = 3 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 221.813252][ T5849] [ 221.813252][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.813252][ T5849] [ 221.850981][ T6006] [ 221.850981][ T6006] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.850981][ T6006] [ 221.860612][ T5849] [ 221.860612][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.860612][ T5849] [ 221.880080][ T6006] [ 221.880080][ T6006] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.880080][ T6006] [pid 5849] <... umount2 resumed>) = 0 [pid 6006] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./24/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./24") = 0 [pid 5849] mkdir("./25", 0777 [pid 6006] exit_group(0 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6006] <... exit_group resumed>) = ? [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6010 attached [pid 6006] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6010 [pid 6010] set_robust_list(0x555584a2d760, 24) = 0 [pid 5850] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] chdir("./26" [pid 5850] <... openat resumed>) = 3 [pid 6010] <... chdir resumed>) = 0 [ 221.915309][ T112] [ 221.915309][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.915309][ T112] [pid 5850] newfstatat(3, "", [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6010] <... prctl resumed>) = 0 [pid 6010] setpgid(0, 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6010] <... setpgid resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] unlink("./24/binderfs") = 0 [pid 6010] <... openat resumed>) = 3 [pid 5850] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6010] write(3, "1000", 4) = 4 [pid 6010] close(3) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6010] write(1, "executing program\n", 18 [pid 6007] <... write resumed>) = 16777216 [pid 6010] <... write resumed>) = 18 [pid 6007] munmap(0x7feda9000000, 138412032 [pid 6010] memfd_create("syzkaller", 0) = 3 [pid 6008] <... write resumed>) = 16777216 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6007] <... munmap resumed>) = 0 [ 222.010861][ T5850] [ 222.010861][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.010861][ T5850] [ 222.039355][ T5850] [ 222.039355][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.039355][ T5850] [pid 6008] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6007] ioctl(4, LOOP_SET_FD, 3 [pid 5850] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6007] <... ioctl resumed>) = 0 [pid 5850] newfstatat(4, "", [pid 6007] close(3) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6007] close(4 [pid 5850] getdents64(4, [pid 6007] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6007] mkdir("./file0", 0777 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6008] <... munmap resumed>) = 0 [pid 6007] <... mkdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6007] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] rmdir("./24/file0") = 0 [ 222.076885][ T6007] loop4: detected capacity change from 0 to 32768 [pid 6008] <... openat resumed>) = 4 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3 [pid 6008] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... close resumed>) = 0 [pid 6008] <... ioctl resumed>) = 0 [pid 5850] rmdir("./24" [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6008] close(3 [pid 5850] <... rmdir resumed>) = 0 [pid 6008] <... close resumed>) = 0 [pid 5850] mkdir("./25", 0777 [pid 6008] close(4) = 0 [pid 6008] mkdir("./file0", 0777 [pid 5850] <... mkdir resumed>) = 0 [pid 6008] <... mkdir resumed>) = 0 [ 222.128396][ T6008] loop0: detected capacity change from 0 to 32768 [ 222.132676][ T6007] [ 222.132676][ T6007] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.132676][ T6007] [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6008] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6007] <... mount resumed>) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 6007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6007] chdir("./file0") = 0 [pid 5850] close(3 [pid 6007] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6007] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6008] <... mount resumed>) = 0 [pid 6008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6008] chdir("./file0") = 0 [pid 5849] <... close resumed>) = 0 [ 222.193287][ T6007] [ 222.193287][ T6007] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.193287][ T6007] [ 222.209399][ T6008] [ 222.209399][ T6008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.209399][ T6008] [ 222.215695][ T6007] [ 222.215695][ T6007] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.215695][ T6007] [pid 6008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6008] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6011 attached , child_tidptr=0x555584a2d750) = 6011 [pid 6011] set_robust_list(0x555584a2d760, 24) = 0 [pid 6011] chdir("./25") = 0 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6011] setpgid(0, 0) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6007] <... lsetxattr resumed>) = 0 [pid 6011] write(3, "1000", 4) = 4 [pid 6011] close(3) = 0 [pid 6011] symlink("/dev/binderfs", "./binderfs" [pid 6007] exit_group(0 [pid 6011] <... symlink resumed>) = 0 [pid 6007] <... exit_group resumed>) = ? [ 222.280401][ T6008] [ 222.280401][ T6008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.280401][ T6008] [ 222.306720][ T112] [ 222.306720][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.306720][ T112] executing program [pid 6011] write(1, "executing program\n", 18 [pid 6007] +++ exited with 0 +++ [pid 6011] <... write resumed>) = 18 [pid 6011] memfd_create("syzkaller", 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6011] <... memfd_create resumed>) = 3 [pid 5851] unlink("./25/binderfs" [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... unlink resumed>) = 0 [pid 6011] <... mmap resumed>) = 0x7feda9000000 [pid 5851] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6008] <... lsetxattr resumed>) = 0 [pid 6008] exit_group(0) = ? [ 222.332702][ T6008] [ 222.332702][ T6008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.332702][ T6008] [ 222.354549][ T5851] [ 222.354549][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.354549][ T5851] [ 222.366005][ T113] [ 222.366005][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.366005][ T113] [pid 6008] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./25/binderfs") = 0 [ 222.402948][ T5851] [ 222.402948][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.402948][ T5851] [ 222.424089][ T5847] [ 222.424089][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.424089][ T5847] [pid 5847] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", [pid 5850] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./25/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [ 222.461124][ T5847] [ 222.461124][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.461124][ T5847] [pid 5851] rmdir("./25" [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6012 attached [pid 5851] mkdir("./26", 0777 [pid 6012] set_robust_list(0x555584a2d760, 24 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6012 [pid 5847] <... umount2 resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6012] <... set_robust_list resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 6012] chdir("./25" [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 6012] <... chdir resumed>) = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] close(3 [pid 6012] <... prctl resumed>) = 0 [pid 6012] setpgid(0, 0) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] write(3, "1000", 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6012] <... write resumed>) = 4 [pid 5847] newfstatat(AT_FDCWD, "./25/file0", executing program {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6012] close(3) = 0 [pid 5847] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6012] <... symlink resumed>) = 0 [pid 6012] write(1, "executing program\n", 18 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", [pid 6012] <... write resumed>) = 18 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6012] memfd_create("syzkaller", 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 6012] <... memfd_create resumed>) = 3 [pid 5847] rmdir("./25/file0") = 0 [pid 6012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] getdents64(3, [pid 6012] <... mmap resumed>) = 0x7feda9000000 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./25") = 0 [pid 5847] mkdir("./26", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6009] <... write resumed>) = 16777216 [pid 6009] munmap(0x7feda9000000, 138412032) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6009] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6009] close(3) = 0 [pid 6009] close(4) = 0 [ 222.696410][ T6009] loop5: detected capacity change from 0 to 32768 [pid 6009] mkdir("./file0", 0777) = 0 [pid 6009] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6010] <... write resumed>) = 16777216 [pid 6010] munmap(0x7feda9000000, 138412032 [pid 6009] <... mount resumed>) = 0 [pid 6009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6009] chdir("./file0") = 0 [pid 6010] <... munmap resumed>) = 0 [pid 6009] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6010] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6010] <... openat resumed>) = 4 [ 222.789808][ T6009] [ 222.789808][ T6009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.789808][ T6009] [pid 6009] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6010] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6010] close(3) = 0 [pid 6010] close(4) = 0 [ 222.842704][ T6009] [ 222.842704][ T6009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.842704][ T6009] [ 222.854256][ T6010] loop1: detected capacity change from 0 to 32768 [pid 6010] mkdir("./file0", 0777) = 0 [pid 6010] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6013 attached , child_tidptr=0x555584a2d750) = 6013 [pid 6013] set_robust_list(0x555584a2d760, 24) = 0 [pid 6012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6013] chdir("./26") = 0 [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] setpgid(0, 0) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6009] <... lsetxattr resumed>) = 0 [pid 6009] exit_group(0 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6014 attached , child_tidptr=0x555584a2d750) = 6014 [pid 6014] set_robust_list(0x555584a2d760, 24 [pid 6013] <... openat resumed>) = 3 [pid 6014] <... set_robust_list resumed>) = 0 [pid 6013] write(3, "1000", 4) = 4 [pid 6014] chdir("./26" [pid 6013] close(3 [pid 6014] <... chdir resumed>) = 0 [ 222.890983][ T6009] [ 222.890983][ T6009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.890983][ T6009] [ 222.922661][ T112] [ 222.922661][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.922661][ T112] [ 222.938228][ T6010] executing program [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6013] <... close resumed>) = 0 [pid 6009] <... exit_group resumed>) = ? [pid 6014] <... prctl resumed>) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6013] write(1, "executing program\n", 18) = 18 [pid 6014] setpgid(0, 0 [pid 6013] memfd_create("syzkaller", 0 [pid 6009] +++ exited with 0 +++ [pid 6014] <... setpgid resumed>) = 0 [pid 6013] <... memfd_create resumed>) = 3 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6013] <... mmap resumed>) = 0x7feda9000000 [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 6014] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6014] write(3, "1000", 4 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./25/binderfs") = 0 [pid 5852] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6014] <... write resumed>) = 4 [pid 6014] close(3) = 0 [ 222.938228][ T6010] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.938228][ T6010] [ 222.975833][ T5852] [ 222.975833][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.975833][ T5852] [pid 6014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6010] <... mount resumed>) = 0 [pid 6010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6010] chdir("./file0") = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6010] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0executing program [pid 6014] write(1, "executing program\n", 18) = 18 [pid 6014] memfd_create("syzkaller", 0) = 3 [ 222.996478][ T6010] [ 222.996478][ T6010] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.996478][ T6010] [ 222.998762][ T5852] [ 222.998762][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 222.998762][ T5852] [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6010] <... lsetxattr resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6010] exit_group(0 [pid 5852] newfstatat(4, "", [pid 6010] <... exit_group resumed>) = ? [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6010] +++ exited with 0 +++ [pid 5852] getdents64(4, [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] close(4 [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./26/binderfs" [pid 5852] <... close resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [ 223.040022][ T6010] [ 223.040022][ T6010] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.040022][ T6010] [ 223.074025][ T113] [ 223.074025][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.074025][ T113] [pid 5852] rmdir("./25/file0" [pid 5848] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./25") = 0 [pid 5852] mkdir("./26", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 6011] <... write resumed>) = 16777216 [pid 5852] close(3 [ 223.110878][ T5848] [ 223.110878][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.110878][ T5848] [ 223.142263][ T5848] [ 223.142263][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.142263][ T5848] [pid 6011] munmap(0x7feda9000000, 138412032) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./26/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] rmdir("./26" [pid 6011] <... openat resumed>) = 4 [pid 5848] <... rmdir resumed>) = 0 [pid 6011] ioctl(4, LOOP_SET_FD, 3 [pid 5848] mkdir("./27", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6011] <... ioctl resumed>) = 0 [pid 6011] close(3) = 0 [pid 6011] close(4) = 0 [pid 6011] mkdir("./file0", 0777) = 0 [ 223.221697][ T6011] loop2: detected capacity change from 0 to 32768 [pid 6011] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6011] <... mount resumed>) = 0 [ 223.277606][ T6011] [ 223.277606][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.277606][ T6011] [pid 6011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6011] chdir("./file0") = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6011] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6012] <... write resumed>) = 16777216 [ 223.326364][ T6011] [ 223.326364][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.326364][ T6011] [ 223.364596][ T6011] [ 223.364596][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.364596][ T6011] [pid 6012] munmap(0x7feda9000000, 138412032 [pid 6011] <... lsetxattr resumed>) = 0 [pid 6011] exit_group(0) = ? [pid 6011] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6012] <... munmap resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./25/binderfs") = 0 [ 223.397095][ T112] [ 223.397095][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.397095][ T112] [pid 5849] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6012] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6012] close(3) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6012] close(4) = 0 [pid 6012] mkdir("./file0", 0777 [pid 5852] <... close resumed>) = 0 [pid 6012] <... mkdir resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6015 attached [pid 6012] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 223.440497][ T5849] [ 223.440497][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.440497][ T5849] [ 223.460596][ T5849] [ 223.460596][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.460596][ T5849] [ 223.471958][ T6012] loop3: detected capacity change from 0 to 32768 [pid 5849] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6015] set_robust_list(0x555584a2d760, 24 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6015] <... set_robust_list resumed>) = 0 [pid 6015] chdir("./26" [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6015 [pid 5849] newfstatat(AT_FDCWD, "./25/file0", [pid 6015] <... chdir resumed>) = 0 [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6015] <... prctl resumed>) = 0 [pid 5849] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6015] setpgid(0, 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6015] <... setpgid resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... openat resumed>) = 4 [pid 6015] <... openat resumed>) = 3 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./25/file0" [pid 6015] write(3, "1000", 4 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6015] <... write resumed>) = 4 [pid 5849] close(3 [pid 5848] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./25") = 0 [pid 5849] mkdir("./26", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6015] close(3 [pid 5849] <... ioctl resumed>) = 0 [pid 6015] <... close resumed>) = 0 [pid 5849] close(3 [pid 6015] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6015] write(1, "executing program\n", 18) = 18 [pid 6015] memfd_create("syzkaller", 0 [pid 6012] <... mount resumed>) = 0 [pid 6015] <... memfd_create resumed>) = 3 [pid 6012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6012] chdir("./file0") = 0 [pid 6015] <... mmap resumed>) = 0x7feda9000000 [pid 6012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6016 [ 223.546819][ T6012] [ 223.546819][ T6012] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.546819][ T6012] [pid 6012] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 6016 attached [pid 6016] set_robust_list(0x555584a2d760, 24) = 0 [pid 6016] chdir("./27") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [ 223.602610][ T6012] [ 223.602610][ T6012] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.602610][ T6012] [ 223.634288][ T6012] [ 223.634288][ T6012] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.634288][ T6012] [pid 6016] symlink("/dev/binderfs", "./binderfs" [pid 6012] <... lsetxattr resumed>) = 0 [pid 6016] <... symlink resumed>) = 0 [pid 6012] exit_group(0) = ? [pid 6016] write(1, "executing program\n", 18executing program ) = 18 [pid 6012] +++ exited with 0 +++ [pid 6016] memfd_create("syzkaller", 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5850] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6016] <... memfd_create resumed>) = 3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 6016] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./25/binderfs") = 0 [ 223.670784][ T113] [ 223.670784][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.670784][ T113] [ 223.722811][ T5850] [ 223.722811][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.722811][ T5850] [pid 5850] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6014] <... write resumed>) = 16777216 [pid 6013] <... write resumed>) = 16777216 [pid 6014] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", [pid 6013] munmap(0x7feda9000000, 138412032 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./25/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./25") = 0 [pid 5850] mkdir("./26", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 223.780375][ T5850] [ 223.780375][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.780375][ T5850] [pid 5850] close(3 [pid 6014] <... munmap resumed>) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6013] <... munmap resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 6015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6014] <... ioctl resumed>) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6013] ioctl(4, LOOP_SET_FD, 3 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6017 attached [pid 6014] close(3 [pid 6013] <... ioctl resumed>) = 0 [pid 6017] set_robust_list(0x555584a2d760, 24 [pid 6014] <... close resumed>) = 0 [pid 6014] close(4) = 0 [pid 6014] mkdir("./file0", 0777) = 0 [pid 6014] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6017] <... set_robust_list resumed>) = 0 [pid 6017] chdir("./26" [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6017 [pid 6017] <... chdir resumed>) = 0 [ 223.885729][ T6014] loop0: detected capacity change from 0 to 32768 [ 223.913025][ T6013] loop4: detected capacity change from 0 to 32768 [ 223.929774][ T6014] [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6013] close(3 [pid 6017] <... prctl resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 6017] setpgid(0, 0 [pid 6013] close(4 [pid 6017] <... setpgid resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6013] mkdir("./file0", 0777 [pid 6017] <... openat resumed>) = 3 [pid 6017] write(3, "1000", 4 [pid 6014] <... mount resumed>) = 0 [pid 6013] <... mkdir resumed>) = 0 [pid 6017] <... write resumed>) = 4 [pid 6014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6013] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6017] close(3 [pid 6014] <... openat resumed>) = 3 [pid 6017] <... close resumed>) = 0 [pid 6014] chdir("./file0" [pid 6017] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6017] write(1, "executing program\n", 18 [pid 6014] <... chdir resumed>) = 0 [pid 6017] <... write resumed>) = 18 [pid 6014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6017] memfd_create("syzkaller", 0 [pid 6014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6017] <... memfd_create resumed>) = 3 [pid 6014] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6013] <... mount resumed>) = 0 [ 223.929774][ T6014] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.929774][ T6014] [ 223.955521][ T6013] [ 223.955521][ T6013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.955521][ T6013] [pid 6017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6013] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6017] <... mmap resumed>) = 0x7feda9000000 [pid 6013] chdir("./file0") = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 223.985160][ T6014] [ 223.985160][ T6014] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.985160][ T6014] [ 224.004109][ T6013] [ 224.004109][ T6013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.004109][ T6013] [ 224.026403][ T6014] [ 224.026403][ T6014] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.026403][ T6014] [ 224.047374][ T6013] [ 224.047374][ T6013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.047374][ T6013] [ 224.070144][ T112] [ 224.070144][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.070144][ T112] [ 224.080361][ T113] [pid 6013] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6014] <... lsetxattr resumed>) = 0 [pid 6013] <... lsetxattr resumed>) = 0 [pid 6014] exit_group(0 [pid 6013] exit_group(0 [pid 6014] <... exit_group resumed>) = ? [pid 6013] <... exit_group resumed>) = ? [pid 6014] +++ exited with 0 +++ [pid 6013] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6014, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5851] unlink("./26/binderfs") = 0 [pid 5851] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... close resumed>) = 0 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 224.080361][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.080361][ T113] [pid 5847] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./26/binderfs" [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6018 attached [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6018 [pid 6018] set_robust_list(0x555584a2d760, 24) = 0 executing program [pid 6018] chdir("./26") = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] setpgid(0, 0) = 0 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6018] write(3, "1000", 4) = 4 [pid 6018] close(3) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6018] write(1, "executing program\n", 18) = 18 [pid 6018] memfd_create("syzkaller", 0) = 3 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 224.127095][ T5851] [ 224.127095][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.127095][ T5851] [ 224.150588][ T5851] [ 224.150588][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.150588][ T5851] [ 224.164471][ T5847] [ 224.164471][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.164471][ T5847] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./26/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./26") = 0 [pid 5851] mkdir("./27", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... umount2 resumed>) = 0 [ 224.186794][ T5847] [ 224.186794][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.186794][ T5847] [pid 5847] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./26/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./26") = 0 [pid 5847] mkdir("./27", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6015] <... write resumed>) = 16777216 [pid 6015] munmap(0x7feda9000000, 138412032) = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6015] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6015] close(3) = 0 [pid 6015] close(4) = 0 [pid 6015] mkdir("./file0", 0777) = 0 [pid 6015] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6016] <... write resumed>) = 16777216 [pid 5851] <... close resumed>) = 0 [pid 6015] <... mount resumed>) = 0 [pid 6015] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6015] <... openat resumed>) = 3 [pid 6015] chdir("./file0") = 0 [pid 6015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 224.502756][ T6015] loop5: detected capacity change from 0 to 32768 [ 224.538361][ T6015] [ 224.538361][ T6015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.538361][ T6015] [pid 6015] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 6019 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6019 [pid 6019] set_robust_list(0x555584a2d760, 24) = 0 [pid 6019] chdir("./27") = 0 [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... close resumed>) = 0 [pid 6016] munmap(0x7feda9000000, 138412032 [pid 6019] <... prctl resumed>) = 0 [pid 6019] setpgid(0, 0) = 0 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6019] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6020 attached [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6020 [pid 6020] set_robust_list(0x555584a2d760, 24 [pid 6019] write(3, "1000", 4 [pid 6020] <... set_robust_list resumed>) = 0 [pid 6019] <... write resumed>) = 4 executing program [pid 6016] <... munmap resumed>) = 0 [pid 6020] chdir("./27" [pid 6019] close(3 [pid 6020] <... chdir resumed>) = 0 [pid 6019] <... close resumed>) = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs" [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6019] <... symlink resumed>) = 0 [pid 6020] <... prctl resumed>) = 0 [pid 6019] write(1, "executing program\n", 18 [pid 6020] setpgid(0, 0 [pid 6019] <... write resumed>) = 18 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6020] <... setpgid resumed>) = 0 [pid 6019] memfd_create("syzkaller", 0 [pid 6016] <... openat resumed>) = 4 [ 224.574440][ T6015] [ 224.574440][ T6015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.574440][ T6015] [ 224.610243][ T6015] [ 224.610243][ T6015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.610243][ T6015] [pid 6019] <... memfd_create resumed>) = 3 [pid 6016] ioctl(4, LOOP_SET_FD, 3 [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6020] <... openat resumed>) = 3 [pid 6019] <... mmap resumed>) = 0x7feda9000000 [pid 6016] <... ioctl resumed>) = 0 [pid 6020] write(3, "1000", 4 [pid 6015] <... lsetxattr resumed>) = 0 [pid 6020] <... write resumed>) = 4 [pid 6016] close(3 [pid 6015] exit_group(0 [pid 6016] <... close resumed>) = 0 [pid 6015] <... exit_group resumed>) = ? [pid 6016] close(4 [pid 6015] +++ exited with 0 +++ [pid 6020] close(3) = 0 [pid 6016] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6015, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 6020] symlink("/dev/binderfs", "./binderfs" [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6020] <... symlink resumed>) = 0 [pid 6016] mkdir("./file0", 0777) = 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 6020] write(1, "executing program\n", 18 [pid 6016] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"executing program [pid 6020] <... write resumed>) = 18 [ 224.644216][ T6016] loop1: detected capacity change from 0 to 32768 [ 224.657899][ T112] [ 224.657899][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.657899][ T112] [pid 6020] memfd_create("syzkaller", 0) = 3 [pid 5852] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] <... mmap resumed>) = 0x7feda9000000 [pid 5852] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 6016] <... mount resumed>) = 0 [pid 6016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6016] chdir("./file0") = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6016] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 224.701030][ T6016] [ 224.701030][ T6016] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.701030][ T6016] [ 224.725122][ T6016] [ 224.725122][ T6016] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.725122][ T6016] [ 224.749227][ T6016] [pid 5852] unlink("./26/binderfs") = 0 [ 224.749227][ T6016] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.749227][ T6016] [pid 5852] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6016] <... lsetxattr resumed>) = 0 [pid 6016] exit_group(0) = ? [pid 6016] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./27/binderfs") = 0 [pid 5848] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6017] <... write resumed>) = 16777216 [ 224.793266][ T5852] [ 224.793266][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.793266][ T5852] [ 224.793288][ T112] [ 224.793288][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.793288][ T112] [ 224.814704][ T5848] [ 224.814704][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.814704][ T5848] [ 224.833637][ T5848] [ 224.833637][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.833637][ T5848] [pid 6017] munmap(0x7feda9000000, 138412032) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 6017] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./27/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./27") = 0 [pid 5848] mkdir("./28", 0777 [pid 6017] <... openat resumed>) = 4 [pid 5848] <... mkdir resumed>) = 0 [pid 6019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6017] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... umount2 resumed>) = 0 [ 224.869571][ T5852] [ 224.869571][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.869571][ T5852] [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6017] <... ioctl resumed>) = 0 [pid 5852] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6017] close(3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] <... close resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./26/file0", [pid 6017] close(4 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6017] <... close resumed>) = 0 [pid 5852] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6017] mkdir("./file0", 0777 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6017] <... mkdir resumed>) = 0 [ 224.922517][ T6017] loop2: detected capacity change from 0 to 32768 [pid 5852] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6017] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./26/file0") = 0 [pid 5852] getdents64(3, [pid 6017] <... mount resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] close(3) = 0 [pid 6017] <... openat resumed>) = 3 [pid 5852] rmdir("./26" [pid 6017] chdir("./file0" [pid 6018] <... write resumed>) = 16777216 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./27", 0777 [pid 6017] <... chdir resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 6018] munmap(0x7feda9000000, 138412032 [pid 6017] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... openat resumed>) = 3 [pid 6017] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 224.966628][ T6017] [ 224.966628][ T6017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.966628][ T6017] [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 225.027542][ T6017] [ 225.027542][ T6017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.027542][ T6017] [pid 5852] close(3 [pid 6018] <... munmap resumed>) = 0 [pid 6018] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6018] ioctl(4, LOOP_SET_FD, 3) = 0 [ 225.070108][ T6017] [ 225.070108][ T6017] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.070108][ T6017] [ 225.099233][ T6018] loop3: detected capacity change from 0 to 32768 [pid 6018] close(3) = 0 [pid 6017] <... lsetxattr resumed>) = 0 [pid 6018] close(4 [pid 6017] exit_group(0 [pid 6018] <... close resumed>) = 0 [pid 6017] <... exit_group resumed>) = ? [pid 6018] mkdir("./file0", 0777 [pid 6017] +++ exited with 0 +++ [pid 6018] <... mkdir resumed>) = 0 [pid 6018] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./26/binderfs") = 0 [ 225.119650][ T112] [ 225.119650][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.119650][ T112] [ 225.147483][ T6018] [ 225.147483][ T6018] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.147483][ T6018] [pid 5849] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6018] <... mount resumed>) = 0 [pid 6018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6018] chdir("./file0") = 0 [pid 6018] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 225.183495][ T5849] [ 225.183495][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.183495][ T5849] [ 225.207071][ T6018] [ 225.207071][ T6018] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.207071][ T6018] [ 225.230303][ T5849] [pid 6018] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6018] exit_group(0 [pid 5849] <... umount2 resumed>) = 0 [pid 6018] <... exit_group resumed>) = ? [pid 5849] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6018] +++ exited with 0 +++ [pid 5849] newfstatat(AT_FDCWD, "./26/file0", [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... openat resumed>) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(4, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6021 [pid 5850] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6021 attached [pid 5850] <... openat resumed>) = 3 [ 225.230303][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.230303][ T5849] [ 225.240637][ T6018] [ 225.240637][ T6018] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.240637][ T6018] [ 225.270767][ T113] [ 225.270767][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.270767][ T113] [pid 5849] getdents64(4, [pid 5850] newfstatat(3, "", [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6021] set_robust_list(0x555584a2d760, 24 [pid 5849] close(4 [pid 6021] <... set_robust_list resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] rmdir("./26/file0" [pid 6021] chdir("./27" [pid 5850] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./26/binderfs", [pid 6021] <... chdir resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] unlink("./26/binderfs" [pid 5849] getdents64(3, [pid 6021] <... prctl resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... close resumed>) = 0 [pid 5850] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6021] setpgid(0, 0 [pid 5849] close(3 [pid 6021] <... setpgid resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./26" [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... rmdir resumed>) = 0 [pid 6021] <... openat resumed>) = 3 [pid 5849] mkdir("./27", 0777 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6021] write(3, "1000", 4 [pid 5849] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x555584a2d760, 24 [pid 6021] <... write resumed>) = 4 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6022] <... set_robust_list resumed>) = 0 executing program [pid 6022] chdir("./28" [pid 6021] close(3 [pid 5849] <... openat resumed>) = 3 [pid 6022] <... chdir resumed>) = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6022] write(1, "executing program\n", 18) = 18 [pid 6022] memfd_create("syzkaller", 0) = 3 [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6021] <... close resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6022 [pid 6021] symlink("/dev/binderfs", "./binderfs" [pid 5849] <... ioctl resumed>) = 0 [pid 6021] <... symlink resumed>) = 0 [pid 5849] close(3executing program [pid 6021] write(1, "executing program\n", 18) = 18 [pid 6021] memfd_create("syzkaller", 0) = 3 [ 225.333655][ T5850] [ 225.333655][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.333655][ T5850] [ 225.356363][ T5850] [ 225.356363][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.356363][ T5850] [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] <... umount2 resumed>) = 0 [pid 6021] <... mmap resumed>) = 0x7feda9000000 [pid 5850] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6019] <... write resumed>) = 16777216 [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6019] munmap(0x7feda9000000, 138412032 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6020] <... write resumed>) = 16777216 [pid 5850] getdents64(4, [pid 6019] <... munmap resumed>) = 0 [pid 6020] munmap(0x7feda9000000, 138412032 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6019] ioctl(4, LOOP_SET_FD, 3 [pid 5850] close(4) = 0 [pid 5850] rmdir("./26/file0") = 0 [pid 6019] <... ioctl resumed>) = 0 [pid 6019] close(3) = 0 [pid 6019] close(4 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./26" [pid 6019] <... close resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6019] mkdir("./file0", 0777 [pid 5850] mkdir("./27", 0777 [pid 6020] <... munmap resumed>) = 0 [pid 6019] <... mkdir resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6019] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] <... openat resumed>) = 3 [pid 6020] <... openat resumed>) = 4 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... ioctl resumed>) = 0 [ 225.507500][ T6019] loop4: detected capacity change from 0 to 32768 [ 225.544375][ T6020] loop0: detected capacity change from 0 to 32768 [pid 5850] close(3 [pid 6020] <... ioctl resumed>) = 0 [pid 6020] close(3) = 0 [pid 6020] close(4) = 0 [pid 6019] <... mount resumed>) = 0 [pid 6019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6019] chdir("./file0") = 0 [pid 6019] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 225.556983][ T6019] [ 225.556983][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.556983][ T6019] [pid 6019] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6020] mkdir("./file0", 0777) = 0 [pid 6020] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 225.613653][ T6019] [ 225.613653][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.613653][ T6019] [ 225.643014][ T6020] [ 225.643014][ T6020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.643014][ T6020] [ 225.650072][ T6019] [ 225.650072][ T6019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.650072][ T6019] [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 6019] <... lsetxattr resumed>) = 0 [pid 6020] <... mount resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6023 attached [pid 6020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6019] exit_group(0 [pid 6023] set_robust_list(0x555584a2d760, 24 [pid 6020] <... openat resumed>) = 3 [pid 6023] <... set_robust_list resumed>) = 0 [pid 6020] chdir("./file0" [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6023 [pid 6023] chdir("./27" [pid 6020] <... chdir resumed>) = 0 [pid 6019] <... exit_group resumed>) = ? [pid 6023] <... chdir resumed>) = 0 [pid 6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6019] +++ exited with 0 +++ [pid 6020] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6023] <... prctl resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6019, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 6023] setpgid(0, 0) = 0 [pid 5851] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./27/binderfs") = 0 [ 225.698858][ T112] [ 225.698858][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.698858][ T112] [ 225.731522][ T6020] [ 225.731522][ T6020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.731522][ T6020] [ 225.742523][ T5851] [pid 5851] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6023] <... openat resumed>) = 3 [pid 6023] write(3, "1000", 4) = 4 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6023] write(1, "executing program\n", 18) = 18 [pid 6020] <... lsetxattr resumed>) = 0 [ 225.742523][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.742523][ T5851] [ 225.755165][ T6020] [ 225.755165][ T6020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.755165][ T6020] [ 225.760283][ T5851] [ 225.760283][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.760283][ T5851] [pid 6023] memfd_create("syzkaller", 0 [pid 6020] exit_group(0) = ? [pid 6023] <... memfd_create resumed>) = 3 [pid 5851] <... umount2 resumed>) = 0 [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6020] +++ exited with 0 +++ [pid 6023] <... mmap resumed>) = 0x7feda9000000 [pid 5851] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6020, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... openat resumed>) = 3 [pid 5851] <... openat resumed>) = 4 [pid 5847] newfstatat(3, "", [pid 5851] newfstatat(4, "", [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5851] getdents64(4, [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(4, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [ 225.799357][ T113] [ 225.799357][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.799357][ T113] [pid 5847] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5851] close(4 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... close resumed>) = 0 [pid 5847] unlink("./27/binderfs" [pid 5851] rmdir("./27/file0" [pid 5847] <... unlink resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5847] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(3, [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 ./strace-static-x86_64: Process 6024 attached [pid 5851] rmdir("./27" [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6024 [pid 6024] set_robust_list(0x555584a2d760, 24 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./28", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6024] <... set_robust_list resumed>) = 0 [ 225.843372][ T5847] [ 225.843372][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.843372][ T5847] [ 225.854656][ T5847] [ 225.854656][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.854656][ T5847] [pid 6024] chdir("./27") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6024] write(3, "1000", 4) = 4 [pid 6024] close(3) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6024] write(1, "executing program\n", 18) = 18 [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6024] <... mmap resumed>) = 0x7feda9000000 [pid 5847] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./27/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./27") = 0 [pid 5847] mkdir("./28", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6022] <... write resumed>) = 16777216 [pid 6022] munmap(0x7feda9000000, 138412032 [pid 5851] <... close resumed>) = 0 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6022] <... munmap resumed>) = 0 [pid 6021] <... write resumed>) = 16777216 [pid 6022] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6025 attached [pid 6022] <... openat resumed>) = 4 [pid 6025] set_robust_list(0x555584a2d760, 24 [pid 6022] ioctl(4, LOOP_SET_FD, 3 [pid 6025] <... set_robust_list resumed>) = 0 [pid 6021] munmap(0x7feda9000000, 138412032 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6025 [pid 6025] chdir("./28") = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6025] setpgid(0, 0) = 0 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6025] write(3, "1000", 4) = 4 [pid 6025] close(3) = 0 [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6025] write(1, "executing program\n", 18) = 18 [pid 6025] memfd_create("syzkaller", 0) = 3 [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6022] <... ioctl resumed>) = 0 [pid 6022] close(3) = 0 [pid 6022] close(4 [pid 6025] <... mmap resumed>) = 0x7feda9000000 [pid 6022] <... close resumed>) = 0 [pid 6022] mkdir("./file0", 0777) = 0 [pid 6021] <... munmap resumed>) = 0 [pid 6022] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6021] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 226.221239][ T6022] loop1: detected capacity change from 0 to 32768 [pid 6021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6021] close(3) = 0 [pid 6021] close(4) = 0 ./strace-static-x86_64: Process 6026 attached [pid 6026] set_robust_list(0x555584a2d760, 24 [pid 6021] mkdir("./file0", 0777 [pid 6026] <... set_robust_list resumed>) = 0 [pid 6026] chdir("./28") = 0 [pid 6021] <... mkdir resumed>) = 0 [pid 6026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6026] setpgid(0, 0) = 0 [pid 6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6021] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6026 executing program [pid 6026] write(3, "1000", 4) = 4 [pid 6026] close(3) = 0 [pid 6026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6026] write(1, "executing program\n", 18) = 18 [pid 6026] memfd_create("syzkaller", 0) = 3 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 226.271352][ T6021] loop5: detected capacity change from 0 to 32768 [ 226.310236][ T6022] [ 226.310236][ T6022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.310236][ T6022] [pid 6022] <... mount resumed>) = 0 [pid 6022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6022] chdir("./file0") = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6022] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6021] <... mount resumed>) = 0 [pid 6021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6021] chdir("./file0") = 0 [ 226.347774][ T6021] [ 226.347774][ T6021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.347774][ T6021] [ 226.349407][ T6022] [ 226.349407][ T6022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.349407][ T6022] [pid 6021] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 226.402676][ T6021] [ 226.402676][ T6021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.402676][ T6021] [ 226.438823][ T6021] [ 226.438823][ T6021] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.438823][ T6021] [ 226.444048][ T6022] [pid 6021] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6021] exit_group(0) = ? [ 226.444048][ T6022] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.444048][ T6022] [ 226.480402][ T112] [ 226.480402][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.480402][ T112] [pid 6022] <... lsetxattr resumed>) = 0 [pid 6021] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5852] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6022] exit_group(0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... exit_group resumed>) = ? [pid 5852] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6022] +++ exited with 0 +++ [pid 5852] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./27/binderfs" [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... unlink resumed>) = 0 [pid 5852] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 226.503041][ T113] [ 226.503041][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.503041][ T113] [ 226.540942][ T5852] [ 226.540942][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.540942][ T5852] [pid 5848] newfstatat(3, "", [pid 6023] <... write resumed>) = 16777216 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6023] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5852] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./28/binderfs" [pid 5852] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./27/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./27") = 0 [pid 5852] mkdir("./28", 0777) = 0 [ 226.553310][ T5852] [ 226.553310][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.553310][ T5852] [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6023] <... munmap resumed>) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6023] close(3) = 0 [pid 6023] close(4) = 0 [pid 6023] mkdir("./file0", 0777) = 0 [pid 6023] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 226.640636][ T5848] [ 226.640636][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.640636][ T5848] [ 226.655430][ T6023] loop2: detected capacity change from 0 to 32768 [ 226.662042][ T5848] [ 226.662042][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.662042][ T5848] [pid 5848] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6024] <... write resumed>) = 16777216 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", [pid 6024] munmap(0x7feda9000000, 138412032 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./28/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 6024] <... munmap resumed>) = 0 [pid 5848] rmdir("./28" [pid 6024] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6023] <... mount resumed>) = 0 [pid 6023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6023] chdir("./file0") = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 6023] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5848] mkdir("./29", 0777 [pid 6024] <... openat resumed>) = 4 [ 226.728391][ T6023] [ 226.728391][ T6023] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.728391][ T6023] [pid 6023] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6024] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6024] <... ioctl resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [ 226.779486][ T6023] [ 226.779486][ T6023] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.779486][ T6023] [ 226.791275][ T6024] loop3: detected capacity change from 0 to 32768 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6023] <... lsetxattr resumed>) = 0 [pid 6023] exit_group(0) = ? [pid 6023] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 6024] close(3) = 0 [pid 6024] close(4) = 0 [pid 6024] mkdir("./file0", 0777 [pid 5849] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6024] <... mkdir resumed>) = 0 [ 226.823443][ T6023] [ 226.823443][ T6023] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.823443][ T6023] [ 226.860940][ T112] [ 226.860940][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.860940][ T112] [pid 5849] getdents64(3, [pid 6024] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... close resumed>) = 0 [pid 5849] unlink("./27/binderfs"executing program ) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6027 ./strace-static-x86_64: Process 6027 attached [pid 6027] set_robust_list(0x555584a2d760, 24) = 0 [pid 6027] chdir("./28") = 0 [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6027] setpgid(0, 0) = 0 [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6027] write(3, "1000", 4) = 4 [pid 6027] close(3) = 0 [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6027] write(1, "executing program\n", 18) = 18 [pid 6027] memfd_create("syzkaller", 0) = 3 [pid 6027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6024] <... mount resumed>) = 0 [pid 6024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6024] chdir("./file0") = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 226.912769][ T6024] [ 226.912769][ T6024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.912769][ T6024] [ 226.923686][ T5849] [ 226.923686][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.923686][ T5849] [ 226.941366][ T5849] [ 226.941366][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.941366][ T5849] [pid 6024] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./27/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./27" [pid 6024] <... lsetxattr resumed>) = 0 [ 226.982343][ T6024] [ 226.982343][ T6024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.982343][ T6024] [ 227.010067][ T6024] [ 227.010067][ T6024] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.010067][ T6024] [pid 6024] exit_group(0 [pid 5849] <... rmdir resumed>) = 0 [pid 6024] <... exit_group resumed>) = ? [pid 5849] mkdir("./28", 0777 [pid 6024] +++ exited with 0 +++ [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6028 attached [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6028] set_robust_list(0x555584a2d760, 24 [pid 5849] <... ioctl resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6028 [pid 6028] <... set_robust_list resumed>) = 0 [pid 5850] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./27/binderfs") = 0 [pid 6028] chdir("./29" [pid 5850] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6028] <... chdir resumed>) = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [ 227.038576][ T112] [ 227.038576][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.038576][ T112] [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4 [pid 6025] <... write resumed>) = 16777216 [pid 6028] <... write resumed>) = 4 [pid 6028] close(3) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6025] munmap(0x7feda9000000, 138412032 [pid 6028] write(1, "executing program\n", 18executing program ) = 18 [pid 6028] memfd_create("syzkaller", 0 [pid 6026] <... write resumed>) = 16777216 [pid 6028] <... memfd_create resumed>) = 3 [pid 6025] <... munmap resumed>) = 0 [pid 6028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6026] munmap(0x7feda9000000, 138412032 [pid 6025] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 227.108175][ T5850] [ 227.108175][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.108175][ T5850] [ 227.133338][ T5850] [ 227.133338][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.133338][ T5850] [pid 6025] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6026] <... munmap resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 6025] close(3) = 0 [pid 6025] close(4) = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6026] ioctl(4, LOOP_SET_FD, 3 [pid 5850] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6025] mkdir("./file0", 0777 [ 227.180727][ T6025] loop4: detected capacity change from 0 to 32768 [pid 5850] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6025] <... mkdir resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 6025] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./27/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./27") = 0 [pid 5850] mkdir("./28", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 6026] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 6027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6026] close(3 [pid 6025] <... mount resumed>) = 0 [pid 6026] <... close resumed>) = 0 [pid 6026] close(4) = 0 [pid 6026] mkdir("./file0", 0777) = 0 [pid 6026] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 227.223624][ T6026] loop0: detected capacity change from 0 to 32768 [ 227.243826][ T6025] [ 227.243826][ T6025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.243826][ T6025] [pid 6025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6025] chdir("./file0") = 0 [pid 6025] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 227.305659][ T6025] [ 227.305659][ T6025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.305659][ T6025] [ 227.339466][ T6025] [ 227.339466][ T6025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.339466][ T6025] [pid 6025] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6026] <... mount resumed>) = 0 [pid 6026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6026] chdir("./file0") = 0 [pid 6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6026] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6025] <... lsetxattr resumed>) = 0 [pid 6025] exit_group(0 [pid 5849] <... close resumed>) = 0 [pid 6025] <... exit_group resumed>) = ? [ 227.355002][ T6026] [ 227.355002][ T6026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.355002][ T6026] [ 227.383362][ T6026] [ 227.383362][ T6026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.383362][ T6026] [ 227.387608][ T113] [ 227.387608][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.387608][ T113] [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6025] +++ exited with 0 +++ [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6029 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6025, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x555584a2d760, 24 [pid 5851] <... restart_syscall resumed>) = 0 [pid 6029] <... set_robust_list resumed>) = 0 [pid 6029] chdir("./28" [pid 5851] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6029] <... prctl resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 6029] setpgid(0, 0) = 0 [pid 5851] newfstatat(3, "", [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6029] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 6029] write(3, "1000", 4 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6029] <... write resumed>) = 4 [pid 5851] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] close(3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./28/binderfs", executing program [pid 6029] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6029] <... symlink resumed>) = 0 [pid 5851] unlink("./28/binderfs" [pid 6029] write(1, "executing program\n", 18 [pid 5851] <... unlink resumed>) = 0 [pid 6029] <... write resumed>) = 18 [pid 5851] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] memfd_create("syzkaller", 0) = 3 [pid 6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 227.421155][ T6026] [ 227.421155][ T6026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.421155][ T6026] [pid 6026] <... lsetxattr resumed>) = 0 [pid 6026] exit_group(0) = ? [pid 6026] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6026, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./28/binderfs") = 0 [pid 5847] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 227.464731][ T5851] [ 227.464731][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.464731][ T5851] [ 227.475970][ T112] [ 227.475970][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.475970][ T112] [pid 6028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6030 attached [pid 6030] set_robust_list(0x555584a2d760, 24 [pid 5851] <... umount2 resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6030] <... set_robust_list resumed>) = 0 [ 227.510096][ T5847] [ 227.510096][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.510096][ T5847] [ 227.520846][ T5851] [ 227.520846][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.520846][ T5851] [ 227.540245][ T5847] [ 227.540245][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.540245][ T5847] [pid 5851] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6030] chdir("./28" [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6030 [pid 5847] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6030] <... chdir resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(AT_FDCWD, "./28/file0", [pid 6030] <... prctl resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6030] setpgid(0, 0 [pid 5851] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6030] <... setpgid resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] newfstatat(4, "", [pid 5847] close(4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... close resumed>) = 0 [pid 6030] <... openat resumed>) = 3 [pid 5851] getdents64(4, [pid 5847] rmdir("./28/file0" [pid 6030] write(3, "1000", 4 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... rmdir resumed>) = 0 [pid 6030] <... write resumed>) = 4 [pid 5851] getdents64(4, [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./28") = 0 [pid 5847] mkdir("./29", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6030] close(3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6030] <... close resumed>) = 0 [pid 5851] close(4 [pid 6030] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./28/file0" [pid 6030] <... symlink resumed>) = 0 [pid 6030] write(1, "executing program\n", 18 [pid 5851] <... rmdir resumed>) = 0 executing program [pid 6030] <... write resumed>) = 18 [pid 5851] getdents64(3, [pid 6030] memfd_create("syzkaller", 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./28" [pid 6030] <... memfd_create resumed>) = 3 [pid 5851] <... rmdir resumed>) = 0 [pid 6030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] mkdir("./29", 0777 [pid 6030] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6031 attached , child_tidptr=0x555584a2d750) = 6031 [pid 6031] set_robust_list(0x555584a2d760, 24 [pid 6027] <... write resumed>) = 16777216 [pid 6031] <... set_robust_list resumed>) = 0 [pid 6031] chdir("./29" [pid 6027] munmap(0x7feda9000000, 138412032 [pid 6031] <... chdir resumed>) = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6031] setpgid(0, 0) = 0 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6027] <... munmap resumed>) = 0 [pid 6031] write(3, "1000", 4) = 4 [pid 6031] close(3) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6031] write(1, "executing program\n", 18 [pid 6027] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6031] <... write resumed>) = 18 [pid 6027] <... openat resumed>) = 4 [pid 6027] ioctl(4, LOOP_SET_FD, 3 [pid 6031] memfd_create("syzkaller", 0) = 3 [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6027] <... ioctl resumed>) = 0 [pid 6027] close(3) = 0 [pid 6027] close(4 [pid 5851] <... close resumed>) = 0 [pid 6027] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6027] mkdir("./file0", 0777./strace-static-x86_64: Process 6032 attached [pid 6028] <... write resumed>) = 16777216 [pid 6027] <... mkdir resumed>) = 0 [pid 6032] set_robust_list(0x555584a2d760, 24 [pid 6028] munmap(0x7feda9000000, 138412032 [pid 6027] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6032 [ 227.879455][ T6027] loop5: detected capacity change from 0 to 32768 [pid 6032] <... set_robust_list resumed>) = 0 [pid 6032] chdir("./29") = 0 [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6032] setpgid(0, 0) = 0 [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6032] write(3, "1000", 4) = 4 [pid 6032] close(3) = 0 [pid 6032] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6032] write(1, "executing program\n", 18) = 18 [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6028] <... munmap resumed>) = 0 [pid 6028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6028] ioctl(4, LOOP_SET_FD, 3 [pid 6027] <... mount resumed>) = 0 [pid 6027] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6027] chdir("./file0") = 0 [pid 6027] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 227.977495][ T6027] [ 227.977495][ T6027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.977495][ T6027] [ 228.013675][ T6028] loop1: detected capacity change from 0 to 32768 [pid 6027] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6028] <... ioctl resumed>) = 0 [pid 6028] close(3) = 0 [pid 6028] close(4) = 0 [pid 6028] mkdir("./file0", 0777) = 0 [ 228.030519][ T6027] [ 228.030519][ T6027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.030519][ T6027] [ 228.054659][ T6027] [ 228.054659][ T6027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.054659][ T6027] [pid 6028] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6027] <... lsetxattr resumed>) = 0 [pid 6027] exit_group(0) = ? [pid 6027] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6027, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5852] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 228.110565][ T113] [ 228.110565][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.110565][ T113] [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6028] <... mount resumed>) = 0 [pid 5852] getdents64(3, [pid 6029] <... write resumed>) = 16777216 [pid 6029] munmap(0x7feda9000000, 138412032 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6028] chdir("./file0") = 0 [ 228.153627][ T6028] [ 228.153627][ T6028] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.153627][ T6028] [pid 6028] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6028] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./28/binderfs") = 0 [pid 5852] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] <... munmap resumed>) = 0 [ 228.214355][ T6028] [ 228.214355][ T6028] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.214355][ T6028] [ 228.238247][ T6028] [ 228.238247][ T6028] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.238247][ T6028] [ 228.249052][ T5852] [ 228.249052][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.249052][ T5852] [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6028] <... lsetxattr resumed>) = 0 [pid 6029] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6029] ioctl(4, LOOP_SET_FD, 3 [pid 6028] exit_group(0) = ? [pid 6028] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./29/binderfs") = 0 [ 228.272693][ T112] [ 228.272693][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.272693][ T112] [ 228.283422][ T5852] [ 228.283422][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.283422][ T5852] [ 228.295453][ T6029] loop2: detected capacity change from 0 to 32768 [ 228.320344][ T5848] [pid 5848] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 6029] <... ioctl resumed>) = 0 [pid 6029] close(3) = 0 [pid 6029] close(4) = 0 [pid 6029] mkdir("./file0", 0777) = 0 [pid 5852] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6029] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./28/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./28") = 0 [pid 5852] mkdir("./29", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 228.320344][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.320344][ T5848] [ 228.332726][ T5848] [ 228.332726][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.332726][ T5848] [pid 5852] close(3 [pid 6030] <... write resumed>) = 16777216 [pid 6029] <... mount resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [ 228.412240][ T6029] [ 228.412240][ T6029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.412240][ T6029] [pid 6029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6030] munmap(0x7feda9000000, 138412032 [pid 6029] <... openat resumed>) = 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6029] chdir("./file0" [pid 5848] newfstatat(AT_FDCWD, "./29/file0", [pid 6029] <... chdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6029] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] newfstatat(4, "", [pid 6029] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./29/file0") = 0 [pid 6030] <... munmap resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 6030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6029] <... lsetxattr resumed>) = 0 [ 228.492091][ T6029] [ 228.492091][ T6029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.492091][ T6029] [ 228.522148][ T6029] [ 228.522148][ T6029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.522148][ T6029] [pid 5848] rmdir("./29" [pid 6030] <... openat resumed>) = 4 [pid 6029] exit_group(0 [pid 5848] <... rmdir resumed>) = 0 [pid 6030] ioctl(4, LOOP_SET_FD, 3 [pid 6029] <... exit_group resumed>) = ? [pid 5848] mkdir("./30", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6029] +++ exited with 0 +++ [pid 5848] <... openat resumed>) = 3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6031] <... write resumed>) = 16777216 [pid 6030] <... ioctl resumed>) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6030] close(3 [pid 6031] munmap(0x7feda9000000, 138412032 [pid 5848] <... ioctl resumed>) = 0 [pid 6030] <... close resumed>) = 0 [pid 6030] close(4 [pid 5849] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6030] <... close resumed>) = 0 [pid 6030] mkdir("./file0", 0777 [pid 5849] <... openat resumed>) = 3 [ 228.552604][ T113] [ 228.552604][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.552604][ T113] [ 228.565166][ T6030] loop3: detected capacity change from 0 to 32768 [pid 5849] newfstatat(3, "", [pid 6030] <... mkdir resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6030] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./28/binderfs", [pid 6031] <... munmap resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./28/binderfs") = 0 [pid 5849] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6031] ioctl(4, LOOP_SET_FD, 3) = 0 [ 228.637372][ T5849] [ 228.637372][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.637372][ T5849] [ 228.639792][ T6030] [ 228.639792][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.639792][ T6030] [ 228.670249][ T6031] loop0: detected capacity change from 0 to 32768 [ 228.678592][ T5849] [ 228.678592][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6030] <... mount resumed>) = 0 [pid 6031] close(3) = 0 [pid 6031] close(4) = 0 [pid 6031] mkdir("./file0", 0777 [pid 6030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6030] chdir("./file0") = 0 [pid 6031] <... mkdir resumed>) = 0 [pid 6030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6031] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6030] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6030] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6033 [pid 6033] <... set_robust_list resumed>) = 0 [pid 6033] chdir("./29") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6033] setpgid(0, 0) = 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6033] write(3, "1000", 4) = 4 [pid 6033] close(3) = 0 [ 228.678592][ T5849] [ 228.704487][ T6030] [ 228.704487][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.704487][ T6030] [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6033] write(1, "executing program\n", 18executing program ) = 18 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6033] memfd_create("syzkaller", 0 [pid 5849] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6033] <... memfd_create resumed>) = 3 [pid 5849] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] <... lsetxattr resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6030] exit_group(0 [pid 5849] getdents64(4, [pid 6033] <... mmap resumed>) = 0x7feda9000000 [pid 6030] <... exit_group resumed>) = ? [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 228.750605][ T6030] [ 228.750605][ T6030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.750605][ T6030] [ 228.765697][ T6031] [ 228.765697][ T6031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.765697][ T6031] [ 228.791829][ T113] [ 228.791829][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6031] <... mount resumed>) = 0 [pid 5849] getdents64(4, [pid 6031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 6030] +++ exited with 0 +++ [pid 5849] <... close resumed>) = 0 [pid 6031] chdir("./file0" [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6030, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5849] rmdir("./28/file0" [pid 6031] <... chdir resumed>) = 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6031] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... rmdir resumed>) = 0 [pid 6031] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(3, [pid 6032] <... write resumed>) = 16777216 [pid 5850] <... openat resumed>) = 3 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6032] munmap(0x7feda9000000, 138412032 [pid 5850] newfstatat(3, "", [pid 5849] close(3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./28" [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6034 attached , child_tidptr=0x555584a2d750) = 6034 [pid 6034] set_robust_list(0x555584a2d760, 24) = 0 [pid 6034] chdir("./30") = 0 [pid 5850] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] mkdir("./29", 0777 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 228.791829][ T113] [ 228.819336][ T6031] [ 228.819336][ T6031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.819336][ T6031] [ 228.840368][ T6031] [ 228.840368][ T6031] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.840368][ T6031] [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5849] <... mkdir resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6031] <... lsetxattr resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] unlink("./28/binderfs" [pid 6031] exit_group(0 [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6034] setpgid(0, 0 [pid 5850] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6034] <... setpgid resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] close(3executing program [pid 6034] <... openat resumed>) = 3 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6032] <... munmap resumed>) = 0 [pid 6034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6034] write(1, "executing program\n", 18) = 18 [pid 6034] memfd_create("syzkaller", 0 [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6032] ioctl(4, LOOP_SET_FD, 3 [pid 6034] <... memfd_create resumed>) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6031] <... exit_group resumed>) = ? [pid 6032] <... ioctl resumed>) = 0 [pid 6032] close(3) = 0 [pid 6032] close(4) = 0 [pid 6032] mkdir("./file0", 0777) = 0 [pid 6032] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6031] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [ 228.866307][ T112] [ 228.866307][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.866307][ T112] [ 228.883896][ T6032] loop4: detected capacity change from 0 to 32768 [ 228.890141][ T5850] [ 228.890141][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.890141][ T5850] [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./29/binderfs") = 0 [pid 5847] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6032] <... mount resumed>) = 0 [pid 6032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6032] chdir("./file0") = 0 [pid 6032] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 228.917240][ T6032] [ 228.917240][ T6032] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.917240][ T6032] [ 228.928187][ T5850] [ 228.928187][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.928187][ T5850] [ 228.966045][ T6032] [ 228.966045][ T6032] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.966045][ T6032] [ 228.980095][ T5847] [ 228.980095][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.980095][ T5847] [ 229.000286][ T5847] [ 229.000286][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.000286][ T5847] [pid 6032] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 229.020324][ T6032] [ 229.020324][ T6032] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.020324][ T6032] [pid 6033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6032] <... lsetxattr resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5847] getdents64(4, [pid 5850] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6032] exit_group(0 [pid 5847] close(4 [pid 6032] <... exit_group resumed>) = ? [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... close resumed>) = 0 [pid 6032] +++ exited with 0 +++ [pid 5847] rmdir("./29/file0" [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6032, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] newfstatat(AT_FDCWD, "./28/file0", [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5850] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] getdents64(3, [pid 5851] <... restart_syscall resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3 [pid 5850] <... openat resumed>) = 4 [pid 5851] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(4, "", [pid 5847] rmdir("./29" [pid 5851] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] getdents64(4, [pid 5847] <... rmdir resumed>) = 0 [pid 5851] newfstatat(3, "", [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] mkdir("./30", 0777 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5847] <... mkdir resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] getdents64(3, [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] close(4 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... close resumed>) = 0 [pid 5851] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] rmdir("./28/file0" [pid 5847] <... openat resumed>) = 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5850] <... rmdir resumed>) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5850] getdents64(3, [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 5851] unlink("./29/binderfs" [pid 5847] close(3 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./28") = 0 [ 229.064532][ T113] [ 229.064532][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.064532][ T113] [pid 5851] <... unlink resumed>) = 0 [pid 5850] mkdir("./29", 0777 [pid 5851] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6035 attached [pid 6035] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6035 [pid 6035] <... set_robust_list resumed>) = 0 [pid 6035] chdir("./29") = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6035] write(3, "1000", 4) = 4 executing program [pid 6035] close(3 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6035] <... close resumed>) = 0 [pid 6035] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6035] write(1, "executing program\n", 18) = 18 [pid 6035] memfd_create("syzkaller", 0) = 3 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 229.156539][ T5851] [ 229.156539][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.156539][ T5851] [ 229.179386][ T5851] [ 229.179386][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.179386][ T5851] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./29/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./29") = 0 [pid 5851] mkdir("./30", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6036 ./strace-static-x86_64: Process 6037 attached [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6037 ./strace-static-x86_64: Process 6036 attached [pid 6036] set_robust_list(0x555584a2d760, 24) = 0 [pid 6036] chdir("./29") = 0 [pid 6037] set_robust_list(0x555584a2d760, 24 [pid 6036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6037] <... set_robust_list resumed>) = 0 [pid 6036] <... prctl resumed>) = 0 [pid 6037] chdir("./30" [pid 6036] setpgid(0, 0 [pid 6037] <... chdir resumed>) = 0 [pid 6036] <... setpgid resumed>) = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6037] <... prctl resumed>) = 0 [pid 6036] <... openat resumed>) = 3 [pid 6036] write(3, "1000", 4 [pid 6037] setpgid(0, 0 [pid 6036] <... write resumed>) = 4 [pid 6036] close(3) = 0 [pid 6036] symlink("/dev/binderfs", "./binderfs" [pid 6037] <... setpgid resumed>) = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6036] <... symlink resumed>) = 0 executing program [pid 6037] <... openat resumed>) = 3 [pid 6036] write(1, "executing program\n", 18 [pid 6037] write(3, "1000", 4) = 4 [pid 6037] close(3) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs" [pid 6036] <... write resumed>) = 18 [pid 6036] memfd_create("syzkaller", 0) = 3 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6037] <... symlink resumed>) = 0 [pid 6037] write(1, "executing program\n", 18executing program ) = 18 [pid 6037] memfd_create("syzkaller", 0) = 3 [pid 6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6033] <... write resumed>) = 16777216 [pid 6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6033] munmap(0x7feda9000000, 138412032 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6038 ./strace-static-x86_64: Process 6038 attached [pid 6033] <... munmap resumed>) = 0 [pid 6038] set_robust_list(0x555584a2d760, 24) = 0 [pid 6038] chdir("./30") = 0 [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6038] setpgid(0, 0) = 0 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6038] write(3, "1000", 4) = 4 [pid 6038] close(3) = 0 [pid 6038] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6038] write(1, "executing program\n", 18) = 18 [pid 6038] memfd_create("syzkaller", 0) = 3 [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6034] <... write resumed>) = 16777216 [pid 6033] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6034] munmap(0x7feda9000000, 138412032 [pid 6033] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6034] <... munmap resumed>) = 0 [pid 6033] close(3) = 0 [pid 6033] close(4 [pid 6034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6033] <... close resumed>) = 0 [pid 6033] mkdir("./file0", 0777 [pid 6034] <... openat resumed>) = 4 [pid 6033] <... mkdir resumed>) = 0 [pid 6034] ioctl(4, LOOP_SET_FD, 3 [ 229.663091][ T6033] loop5: detected capacity change from 0 to 32768 [pid 6033] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6034] <... ioctl resumed>) = 0 [pid 6034] close(3) = 0 [pid 6034] close(4) = 0 [pid 6034] mkdir("./file0", 0777) = 0 [ 229.710577][ T6034] loop1: detected capacity change from 0 to 32768 [ 229.747980][ T6033] [ 229.747980][ T6033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.747980][ T6033] [pid 6034] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6033] <... mount resumed>) = 0 [pid 6033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6033] chdir("./file0") = 0 [pid 6033] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6033] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6034] <... mount resumed>) = 0 [pid 6034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6034] chdir("./file0") = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 229.773519][ T6034] [ 229.773519][ T6034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.773519][ T6034] [ 229.790732][ T6033] [ 229.790732][ T6033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.790732][ T6033] [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6034] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6033] <... lsetxattr resumed>) = 0 [ 229.821787][ T6033] [ 229.821787][ T6033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.821787][ T6033] [ 229.834532][ T6034] [ 229.834532][ T6034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.834532][ T6034] [ 229.860134][ T6034] [ 229.860134][ T6034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.860134][ T6034] [pid 6033] exit_group(0) = ? [pid 6033] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./29/binderfs") = 0 [pid 5852] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6034] <... lsetxattr resumed>) = 0 [pid 6034] exit_group(0) = ? [ 229.875207][ T113] [ 229.875207][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.875207][ T113] [pid 6034] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6034, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5848] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./30/binderfs") = 0 [pid 5848] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 229.920366][ T112] [ 229.920366][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.920366][ T112] [ 229.957108][ T5848] [ 229.957108][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.957108][ T5848] [ 229.957213][ T5852] [ 229.957213][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.957213][ T5852] [ 229.992049][ T5848] [ 229.992049][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.992049][ T5848] [pid 6038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5848] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./30/file0", [pid 5852] newfstatat(AT_FDCWD, "./29/file0", [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... openat resumed>) = 4 [pid 5848] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", [pid 5848] newfstatat(4, "", [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 5848] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [ 230.020243][ T5852] [ 230.020243][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.020243][ T5852] [pid 6035] <... write resumed>) = 16777216 [pid 5852] close(4 [pid 5848] rmdir("./30/file0" [pid 6035] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5852] rmdir("./29/file0" [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./30") = 0 [pid 5848] mkdir("./31", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6035] <... munmap resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./29") = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] mkdir("./30", 0777 [pid 6035] <... openat resumed>) = 4 [pid 6035] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... mkdir resumed>) = 0 [pid 6035] <... ioctl resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6035] close(3 [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6035] <... close resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 6035] close(4) = 0 [pid 5852] close(3 [pid 6035] mkdir("./file0", 0777) = 0 [ 230.143677][ T6035] loop2: detected capacity change from 0 to 32768 [ 230.183641][ T6035] [ 230.183641][ T6035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.183641][ T6035] [pid 6035] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6035] chdir("./file0") = 0 [pid 6035] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6035] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6037] <... write resumed>) = 16777216 [ 230.253804][ T6035] [ 230.253804][ T6035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.253804][ T6035] [ 230.285068][ T6035] [ 230.285068][ T6035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.285068][ T6035] [pid 6037] munmap(0x7feda9000000, 138412032 [pid 6035] <... lsetxattr resumed>) = 0 [pid 6035] exit_group(0 [pid 6036] <... write resumed>) = 16777216 [pid 6035] <... exit_group resumed>) = ? [pid 6037] <... munmap resumed>) = 0 [pid 6035] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6036] munmap(0x7feda9000000, 138412032 [pid 5849] <... restart_syscall resumed>) = 0 [pid 6037] <... openat resumed>) = 4 [pid 5849] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6037] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 230.330648][ T113] [ 230.330648][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.330648][ T113] [pid 5849] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./29/binderfs") = 0 [pid 5849] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6036] <... munmap resumed>) = 0 [pid 6037] <... ioctl resumed>) = 0 [pid 6037] close(3) = 0 [pid 6037] close(4) = 0 [pid 5852] <... close resumed>) = 0 [pid 6037] mkdir("./file0", 0777 [pid 6036] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6037] <... mkdir resumed>) = 0 [pid 5849] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6037] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6036] <... openat resumed>) = 4 [ 230.375550][ T6037] loop0: detected capacity change from 0 to 32768 [ 230.398593][ T5849] [ 230.398593][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.398593][ T5849] [ 230.414078][ T5849] [ 230.414078][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.414078][ T5849] [pid 5849] newfstatat(AT_FDCWD, "./29/file0", ./strace-static-x86_64: Process 6039 attached [pid 6036] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6039 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6039] set_robust_list(0x555584a2d760, 24 [pid 5849] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6039] <... set_robust_list resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6039] chdir("./30" [pid 5849] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6039] <... chdir resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] newfstatat(4, "", [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6040 [pid 6039] <... prctl resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6040 attached [pid 6039] setpgid(0, 0 [pid 6036] <... ioctl resumed>) = 0 [pid 5849] getdents64(4, [pid 6040] set_robust_list(0x555584a2d760, 24 [pid 6039] <... setpgid resumed>) = 0 [pid 6036] close(3 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6040] <... set_robust_list resumed>) = 0 [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] getdents64(4, [pid 6040] chdir("./31" [pid 6039] <... openat resumed>) = 3 [pid 6038] <... write resumed>) = 16777216 [pid 6036] <... close resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6037] <... mount resumed>) = 0 [pid 6040] <... chdir resumed>) = 0 [pid 6039] write(3, "1000", 4 [pid 6038] munmap(0x7feda9000000, 138412032 [pid 6036] close(4 [pid 5849] close(4 [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6039] <... write resumed>) = 4 [pid 6037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6036] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 6040] <... prctl resumed>) = 0 [pid 5849] rmdir("./29/file0" [pid 6040] setpgid(0, 0 [pid 6036] mkdir("./file0", 0777 [pid 6040] <... setpgid resumed>) = 0 [pid 6036] <... mkdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6036] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6040] <... openat resumed>) = 3 [pid 5849] close(3 [pid 6040] write(3, "1000", 4) = 4 [pid 5849] <... close resumed>) = 0 [pid 6040] close(3 [ 230.435567][ T6036] loop3: detected capacity change from 0 to 32768 [ 230.444675][ T6037] [ 230.444675][ T6037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.444675][ T6037] [pid 5849] rmdir("./29"executing program executing program [pid 6040] <... close resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6040] write(1, "executing program\n", 18) = 18 [pid 6039] close(3 [pid 6040] memfd_create("syzkaller", 0 [pid 6039] <... close resumed>) = 0 [pid 6040] <... memfd_create resumed>) = 3 [pid 6039] symlink("/dev/binderfs", "./binderfs" [pid 6040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6039] <... symlink resumed>) = 0 [pid 6040] <... mmap resumed>) = 0x7feda9000000 [pid 6039] write(1, "executing program\n", 18) = 18 [pid 5849] mkdir("./30", 0777 [pid 6039] memfd_create("syzkaller", 0 [pid 5849] <... mkdir resumed>) = 0 [pid 6039] <... memfd_create resumed>) = 3 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6037] <... openat resumed>) = 3 [pid 5849] <... ioctl resumed>) = 0 [pid 6039] <... mmap resumed>) = 0x7feda9000000 [pid 6037] chdir("./file0") = 0 [pid 5849] close(3 [pid 6038] <... munmap resumed>) = 0 [pid 6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6038] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6038] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6037] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6036] <... mount resumed>) = 0 [ 230.489461][ T6036] [ 230.489461][ T6036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.489461][ T6036] [ 230.522823][ T6038] loop4: detected capacity change from 0 to 32768 [pid 6036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6038] close(3) = 0 [pid 6038] close(4) = 0 [pid 6036] <... openat resumed>) = 3 [pid 6038] mkdir("./file0", 0777) = 0 [pid 6038] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6036] chdir("./file0") = 0 [pid 6036] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 230.550886][ T6037] [ 230.550886][ T6037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.550886][ T6037] [ 230.575745][ T6036] [ 230.575745][ T6036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.575745][ T6036] [ 230.584806][ T6037] [ 230.584806][ T6037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.584806][ T6037] [ 230.596851][ T6038] [pid 6036] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6038] <... mount resumed>) = 0 [pid 6038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6038] chdir("./file0") = 0 [pid 6038] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6038] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6037] <... lsetxattr resumed>) = 0 [ 230.596851][ T6038] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.596851][ T6038] [ 230.618914][ T6036] [ 230.618914][ T6036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.618914][ T6036] [ 230.633252][ T6038] [ 230.633252][ T6038] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.633252][ T6038] [pid 6036] <... lsetxattr resumed>) = 0 [pid 6037] exit_group(0) = ? [pid 6037] +++ exited with 0 +++ [pid 6036] exit_group(0) = ? [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [ 230.650804][ T112] [ 230.650804][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.650804][ T112] [ 230.666228][ T113] [ 230.666228][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.666228][ T113] [ 230.677034][ T6038] [ 230.677034][ T6038] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.677034][ T6038] [pid 6036] +++ exited with 0 +++ [pid 6038] <... lsetxattr resumed>) = 0 [pid 6038] exit_group(0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6036, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5847] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./30/binderfs") = 0 [pid 5847] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6038] <... exit_group resumed>) = ? [pid 5850] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6038] +++ exited with 0 +++ [pid 5850] <... openat resumed>) = 3 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6038, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5850] newfstatat(3, "", [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./29/binderfs") = 0 [pid 5850] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./30/binderfs") = 0 [ 230.711137][ T112] [ 230.711137][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.711137][ T112] [ 230.730357][ T5847] [ 230.730357][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.730357][ T5847] [ 230.750514][ T5850] [ 230.750514][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.750514][ T5850] [pid 5851] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 230.762564][ T5851] [ 230.762564][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.762564][ T5851] [ 230.780189][ T5847] [ 230.780189][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.780189][ T5847] [ 230.791590][ T5850] [ 230.791590][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.791590][ T5850] [ 230.805977][ T5851] [pid 6040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 6039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5851] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./30/file0", [pid 5850] close(4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... close resumed>) = 0 [pid 5851] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] rmdir("./29/file0" [pid 5851] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] <... rmdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6041 [pid 5850] close(3./strace-static-x86_64: Process 6041 attached ) = 0 [ 230.805977][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.805977][ T5851] [pid 5850] rmdir("./29" [pid 6041] set_robust_list(0x555584a2d760, 24 [pid 5851] getdents64(4, [pid 5850] <... rmdir resumed>) = 0 [pid 6041] <... set_robust_list resumed>) = 0 [pid 5850] mkdir("./30", 0777 [pid 6041] chdir("./30" [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 executing program [pid 6041] <... chdir resumed>) = 0 [pid 5851] close(4 [pid 5847] <... umount2 resumed>) = 0 [pid 6041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6041] setpgid(0, 0) = 0 [pid 6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6041] write(3, "1000", 4) = 4 [pid 5847] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6041] close(3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] <... close resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./30/file0", [pid 6041] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6041] <... symlink resumed>) = 0 [pid 5847] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 6041] write(1, "executing program\n", 18 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6041] <... write resumed>) = 18 [pid 5847] getdents64(4, [pid 6041] memfd_create("syzkaller", 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6041] <... memfd_create resumed>) = 3 [pid 5851] <... close resumed>) = 0 [pid 5847] getdents64(4, [pid 5851] rmdir("./30/file0" [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6041] <... mmap resumed>) = 0x7feda9000000 [pid 5847] close(4) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, [pid 5847] rmdir("./30/file0" [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] close(3 [pid 5847] getdents64(3, [pid 5851] <... close resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./30") = 0 [pid 5847] mkdir("./31", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5851] rmdir("./30" [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./31", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... close resumed>) = 0 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6042 attached [pid 6042] set_robust_list(0x555584a2d760, 24) = 0 [pid 6042] chdir("./31") = 0 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... close resumed>) = 0 executing program [pid 6042] <... openat resumed>) = 3 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6042 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6042] write(1, "executing program\n", 18) = 18 [pid 6042] memfd_create("syzkaller", 0) = 3 [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6043 attached [pid 6043] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6043 [pid 6043] <... set_robust_list resumed>) = 0 [pid 6043] chdir("./30") = 0 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6043] setpgid(0, 0) = 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 5851] <... close resumed>) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6043] write(1, "executing program\n", 18) = 18 [pid 6043] memfd_create("syzkaller", 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6044 attached [pid 6043] <... memfd_create resumed>) = 3 [pid 6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6044] set_robust_list(0x555584a2d760, 24 [pid 6043] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6044 [pid 6044] <... set_robust_list resumed>) = 0 [pid 6039] <... write resumed>) = 16777216 [pid 6044] chdir("./31") = 0 [pid 6039] munmap(0x7feda9000000, 138412032 [pid 6044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6040] <... write resumed>) = 16777216 [pid 6044] <... prctl resumed>) = 0 [pid 6044] setpgid(0, 0) = 0 [pid 6040] munmap(0x7feda9000000, 138412032 [pid 6044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6044] write(3, "1000", 4) = 4 [pid 6039] <... munmap resumed>) = 0 [pid 6044] close(3 [pid 6039] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6044] <... close resumed>) = 0 [pid 6039] <... openat resumed>) = 4 [pid 6044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6039] ioctl(4, LOOP_SET_FD, 3executing program [pid 6044] write(1, "executing program\n", 18) = 18 [pid 6040] <... munmap resumed>) = 0 [pid 6044] memfd_create("syzkaller", 0 [pid 6039] <... ioctl resumed>) = 0 [pid 6044] <... memfd_create resumed>) = 3 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6039] close(3) = 0 [pid 6044] <... mmap resumed>) = 0x7feda9000000 [pid 6039] close(4) = 0 [pid 6039] mkdir("./file0", 0777) = 0 [pid 6039] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6040] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6040] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6040] close(3) = 0 [pid 6040] close(4) = 0 [pid 6039] <... mount resumed>) = 0 [pid 6040] mkdir("./file0", 0777) = 0 [ 231.340252][ T6039] loop5: detected capacity change from 0 to 32768 [ 231.364523][ T6039] [ 231.364523][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.364523][ T6039] [ 231.376768][ T6040] loop1: detected capacity change from 0 to 32768 [pid 6040] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6039] chdir("./file0") = 0 [pid 6039] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 231.435082][ T6039] [ 231.435082][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.435082][ T6039] [ 231.459488][ T6040] [ 231.459488][ T6040] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.459488][ T6040] [pid 6039] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6040] <... mount resumed>) = 0 [pid 6040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6040] chdir("./file0") = 0 [pid 6040] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 231.484528][ T6039] [ 231.484528][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.484528][ T6039] [ 231.504221][ T6040] [ 231.504221][ T6040] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.504221][ T6040] [pid 6040] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6039] <... lsetxattr resumed>) = 0 [pid 6039] exit_group(0) = ? [pid 6039] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 231.538300][ T112] [ 231.538300][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.538300][ T112] [ 231.541890][ T6040] [ 231.541890][ T6040] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.541890][ T6040] [pid 6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... openat resumed>) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./30/binderfs") = 0 [pid 5852] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6040] <... lsetxattr resumed>) = 0 [pid 6040] exit_group(0) = ? [pid 6040] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6040, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./31/binderfs") = 0 [ 231.584762][ T5852] [ 231.584762][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.584762][ T5852] [ 231.600768][ T113] [ 231.600768][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.600768][ T113] [ 231.615276][ T5852] [ 231.615276][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.615276][ T5852] [pid 5848] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] newfstatat(AT_FDCWD, "./30/file0", [pid 5848] <... umount2 resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5848] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(4, "", [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] <... write resumed>) = 16777216 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 231.640724][ T5848] [ 231.640724][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.640724][ T5848] [ 231.655489][ T5848] [ 231.655489][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.655489][ T5848] [pid 5848] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] munmap(0x7feda9000000, 138412032 [pid 5852] getdents64(4, [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(4, [pid 5852] close(4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... close resumed>) = 0 [pid 5848] close(4) = 0 [pid 5852] rmdir("./30/file0" [pid 5848] rmdir("./31/file0") = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./31") = 0 [pid 5848] mkdir("./32", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5852] getdents64(3, [pid 5848] <... ioctl resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5852] close(3) = 0 [pid 5852] rmdir("./30") = 0 [pid 5852] mkdir("./31", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6041] <... munmap resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6041] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6041] close(3) = 0 [pid 6041] close(4) = 0 [pid 6041] mkdir("./file0", 0777) = 0 [ 231.759478][ T6041] loop2: detected capacity change from 0 to 32768 [pid 6041] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6041] chdir("./file0") = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 231.863457][ T6041] [ 231.863457][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.863457][ T6041] [pid 6041] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 231.914928][ T6041] [ 231.914928][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.914928][ T6041] [ 231.948089][ T6041] [ 231.948089][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.948089][ T6041] [pid 6041] exit_group(0) = ? [pid 6041] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6041, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=34 /* 0.34 s */} --- [pid 5849] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./30/binderfs") = 0 [ 231.981092][ T112] [ 231.981092][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 231.981092][ T112] [ 232.017561][ T5849] [ 232.017561][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.017561][ T5849] [pid 5849] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6042] <... write resumed>) = 16777216 [pid 5848] <... close resumed>) = 0 [pid 6042] munmap(0x7feda9000000, 138412032 [pid 6043] <... write resumed>) = 16777216 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6045 attached , child_tidptr=0x555584a2d750) = 6045 [pid 6045] set_robust_list(0x555584a2d760, 24 [pid 6042] <... munmap resumed>) = 0 [pid 6043] munmap(0x7feda9000000, 138412032 [pid 6045] <... set_robust_list resumed>) = 0 [pid 6042] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6045] chdir("./32" [pid 6042] <... openat resumed>) = 4 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6045] <... chdir resumed>) = 0 [ 232.054502][ T5849] [ 232.054502][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.054502][ T5849] [pid 6042] ioctl(4, LOOP_SET_FD, 3 [pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6046 attached [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6046] set_robust_list(0x555584a2d760, 24 [pid 5849] newfstatat(AT_FDCWD, "./30/file0", [pid 6046] <... set_robust_list resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6046 [pid 5849] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6046] chdir("./31" [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6046] <... chdir resumed>) = 0 [pid 5849] close(4 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... close resumed>) = 0 [pid 6046] <... prctl resumed>) = 0 [pid 5849] rmdir("./30/file0" [pid 6046] setpgid(0, 0 [pid 6045] <... prctl resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6046] <... setpgid resumed>) = 0 [pid 5849] getdents64(3, [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6045] setpgid(0, 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 6045] <... setpgid resumed>) = 0 [pid 5849] rmdir("./30" [pid 6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... rmdir resumed>) = 0 [pid 6046] <... openat resumed>) = 3 [pid 6045] <... openat resumed>) = 3 [pid 5849] mkdir("./31", 0777 [pid 6046] write(3, "1000", 4 [pid 6045] write(3, "1000", 4 [pid 5849] <... mkdir resumed>) = 0 [pid 6046] <... write resumed>) = 4 [pid 6045] <... write resumed>) = 4 [pid 6046] close(3 [pid 6045] close(3 [pid 6042] <... ioctl resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6046] <... close resumed>) = 0 [pid 6045] <... close resumed>) = 0 [pid 6042] close(3 [pid 5849] <... openat resumed>) = 3 [pid 6046] symlink("/dev/binderfs", "./binderfs" [pid 6045] symlink("/dev/binderfs", "./binderfs" [pid 6042] <... close resumed>) = 0 [pid 6046] <... symlink resumed>) = 0 [pid 6042] close(4 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6046] write(1, "executing program\n", 18 [pid 6045] <... symlink resumed>) = 0 executing program [pid 6046] <... write resumed>) = 18 [pid 6042] <... close resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 6046] memfd_create("syzkaller", 0 [pid 6042] mkdir("./file0", 0777 [pid 5849] close(3 [pid 6043] <... munmap resumed>) = 0 [pid 6045] write(1, "executing program\n", 18executing program ) = 18 [pid 6044] <... write resumed>) = 16777216 [ 232.108446][ T6042] loop0: detected capacity change from 0 to 32768 [pid 6043] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6045] memfd_create("syzkaller", 0 [pid 6044] munmap(0x7feda9000000, 138412032 [pid 6043] <... openat resumed>) = 4 [pid 6042] <... mkdir resumed>) = 0 [pid 6045] <... memfd_create resumed>) = 3 [pid 6042] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6043] ioctl(4, LOOP_SET_FD, 3 [pid 6045] <... mmap resumed>) = 0x7feda9000000 [pid 6046] <... memfd_create resumed>) = 3 [pid 6046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6043] <... ioctl resumed>) = 0 [pid 6043] close(3) = 0 [pid 6043] close(4) = 0 [pid 6043] mkdir("./file0", 0777) = 0 [ 232.154019][ T6043] loop3: detected capacity change from 0 to 32768 [pid 6043] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6044] <... munmap resumed>) = 0 [pid 6044] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 232.200741][ T6042] [ 232.200741][ T6042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.200741][ T6042] [ 232.203082][ T6043] [ 232.203082][ T6043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.203082][ T6043] [pid 6044] ioctl(4, LOOP_SET_FD, 3 [pid 6042] <... mount resumed>) = 0 [pid 6044] <... ioctl resumed>) = 0 [pid 6042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6044] close(3 [pid 6042] <... openat resumed>) = 3 [pid 6044] <... close resumed>) = 0 [pid 6044] close(4) = 0 [pid 6044] mkdir("./file0", 0777 [pid 6042] chdir("./file0" [pid 6044] <... mkdir resumed>) = 0 [pid 6042] <... chdir resumed>) = 0 [pid 6044] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6042] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6043] <... mount resumed>) = 0 [pid 6043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6043] chdir("./file0") = 0 [ 232.242200][ T6044] loop4: detected capacity change from 0 to 32768 [ 232.265261][ T6042] [ 232.265261][ T6042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.265261][ T6042] [ 232.268143][ T6044] [ 232.268143][ T6044] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.268143][ T6044] [pid 6043] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6043] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6042] <... lsetxattr resumed>) = 0 [pid 6042] exit_group(0) = ? [pid 6042] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6042, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [ 232.309071][ T6042] [ 232.309071][ T6042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.309071][ T6042] [ 232.309212][ T6043] [ 232.309212][ T6043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.309212][ T6043] [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6044] <... mount resumed>) = 0 [pid 5847] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6044] <... openat resumed>) = 3 [pid 5847] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6044] chdir("./file0" [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6044] <... chdir resumed>) = 0 [pid 5847] getdents64(3, [pid 6044] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6044] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./31/binderfs" [pid 6044] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6043] <... lsetxattr resumed>) = 0 [ 232.365685][ T113] [ 232.365685][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.365685][ T113] [ 232.368174][ T6043] [ 232.368174][ T6043] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.368174][ T6043] [ 232.383737][ T6044] [ 232.383737][ T6044] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.383737][ T6044] [pid 6043] exit_group(0) = ? [pid 6043] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./30/binderfs") = 0 [pid 5850] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 232.420403][ T112] [ 232.420403][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.420403][ T112] [ 232.432153][ T5847] [ 232.432153][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.432153][ T5847] [ 232.448836][ T6044] [ 232.448836][ T6044] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.448836][ T6044] [ 232.453069][ T5850] [ 232.453069][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.453069][ T5850] [pid 6045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6044] <... lsetxattr resumed>) = 0 [pid 6044] exit_group(0) = ? [pid 6044] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6044, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5851] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./31/binderfs") = 0 [ 232.461145][ T5847] [ 232.461145][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.461145][ T5847] [ 232.490239][ T5850] [ 232.490239][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.490239][ T5850] [ 232.503330][ T113] [ 232.503330][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.503330][ T113] [pid 5851] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./31/file0") = 0 [pid 5847] getdents64(3, [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6047 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./31") = 0 [pid 5847] mkdir("./32", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6047 attached ) = 0 [pid 5847] close(3 [pid 6047] set_robust_list(0x555584a2d760, 24) = 0 [pid 6047] chdir("./31") = 0 [pid 6047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6047] setpgid(0, 0) = 0 [pid 6047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6047] write(3, "1000", 4 [pid 5850] <... umount2 resumed>) = 0 [pid 6047] <... write resumed>) = 4 [pid 5850] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6047] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6047] <... close resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./30/file0", [pid 6047] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6047] <... symlink resumed>) = 0 [pid 5850] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6047] write(1, "executing program\n", 18 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6047] <... write resumed>) = 18 [pid 5850] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6047] memfd_create("syzkaller", 0 [pid 5850] <... openat resumed>) = 4 [pid 6047] <... memfd_create resumed>) = 3 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] newfstatat(4, "", [pid 6047] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5850] getdents64(4, [pid 5851] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] newfstatat(AT_FDCWD, "./31/file0", [pid 5850] getdents64(4, [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] close(4 [pid 5851] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] <... close resumed>) = 0 [ 232.533019][ T5851] [ 232.533019][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.533019][ T5851] [ 232.553922][ T5851] [ 232.553922][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.553922][ T5851] [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] rmdir("./30/file0" [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./31/file0") = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./31" [pid 5850] getdents64(3, [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./32", 0777 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] close(3 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] rmdir("./30" [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./31", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6048 attached , child_tidptr=0x555584a2d750) = 6048 [pid 6048] set_robust_list(0x555584a2d760, 24) = 0 [pid 6048] chdir("./32") = 0 [pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6048] setpgid(0, 0) = 0 [pid 6048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6048] write(3, "1000", 4) = 4 [pid 6048] close(3) = 0 [pid 6048] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6048] write(1, "executing program\n", 18) = 18 [pid 6048] memfd_create("syzkaller", 0 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6048] <... memfd_create resumed>) = 3 [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 6045] <... write resumed>) = 16777216 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6049 attached [pid 6049] set_robust_list(0x555584a2d760, 24) = 0 [pid 6049] chdir("./32" [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6049 [pid 6049] <... chdir resumed>) = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6045] munmap(0x7feda9000000, 138412032 [pid 6049] <... prctl resumed>) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 executing program [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6049] write(1, "executing program\n", 18) = 18 [pid 6049] memfd_create("syzkaller", 0) = 3 [pid 6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6050 attached [pid 6045] <... munmap resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6050 [pid 6050] set_robust_list(0x555584a2d760, 24) = 0 [pid 6050] chdir("./31") = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6045] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6050] <... prctl resumed>) = 0 [pid 6045] <... openat resumed>) = 4 [pid 6045] ioctl(4, LOOP_SET_FD, 3 [pid 6050] setpgid(0, 0) = 0 [pid 6045] <... ioctl resumed>) = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6046] <... write resumed>) = 16777216 [pid 6045] close(3 [pid 6050] <... openat resumed>) = 3 [pid 6050] write(3, "1000", 4 [pid 6045] <... close resumed>) = 0 [pid 6050] <... write resumed>) = 4 [pid 6045] close(4 [pid 6050] close(3 [pid 6045] <... close resumed>) = 0 [pid 6050] <... close resumed>) = 0 [pid 6046] munmap(0x7feda9000000, 138412032 [pid 6045] mkdir("./file0", 0777 [pid 6050] symlink("/dev/binderfs", "./binderfs" [pid 6045] <... mkdir resumed>) = 0 [pid 6050] <... symlink resumed>) = 0 [pid 6050] write(1, "executing program\n", 18executing program ) = 18 [pid 6050] memfd_create("syzkaller", 0 [pid 6045] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6050] <... memfd_create resumed>) = 3 [ 233.052881][ T6045] loop1: detected capacity change from 0 to 32768 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6046] <... munmap resumed>) = 0 [pid 6046] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6046] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6046] close(3) = 0 [pid 6046] close(4) = 0 [pid 6046] mkdir("./file0", 0777) = 0 [pid 6046] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6045] <... mount resumed>) = 0 [pid 6045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6045] chdir("./file0") = 0 [ 233.143829][ T6046] loop5: detected capacity change from 0 to 32768 [ 233.155340][ T6045] [ 233.155340][ T6045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.155340][ T6045] [pid 6045] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6045] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6046] <... mount resumed>) = 0 [pid 6046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6046] chdir("./file0") = 0 [pid 6046] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 233.196562][ T6046] [ 233.196562][ T6046] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.196562][ T6046] [ 233.208846][ T6045] [ 233.208846][ T6045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.208846][ T6045] [ 233.233304][ T6045] [ 233.233304][ T6045] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.233304][ T6045] [pid 6046] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6045] <... lsetxattr resumed>) = 0 [pid 6045] exit_group(0 [pid 6049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6045] <... exit_group resumed>) = ? [pid 6045] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6045, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5848] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./32/binderfs") = 0 [ 233.251882][ T6046] [ 233.251882][ T6046] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.251882][ T6046] [ 233.273387][ T6046] [ 233.273387][ T6046] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.273387][ T6046] [ 233.285168][ T112] [ 233.285168][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.285168][ T112] [pid 5848] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6046] <... lsetxattr resumed>) = 0 [pid 6046] exit_group(0) = ? [pid 6046] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6046, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5852] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./31/binderfs") = 0 [pid 5852] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6047] <... write resumed>) = 16777216 [ 233.317929][ T5848] [ 233.317929][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.317929][ T5848] [ 233.329409][ T113] [ 233.329409][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.329409][ T113] [ 233.354341][ T5848] [ 233.354341][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.354341][ T5848] [pid 6047] munmap(0x7feda9000000, 138412032 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 6047] <... munmap resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6047] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] close(4 [pid 6047] <... openat resumed>) = 4 [pid 5848] <... close resumed>) = 0 [ 233.378216][ T5852] [ 233.378216][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.378216][ T5852] [ 233.403136][ T5852] [ 233.403136][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.403136][ T5852] [pid 6047] ioctl(4, LOOP_SET_FD, 3 [pid 5848] rmdir("./32/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./32") = 0 [pid 5848] mkdir("./33", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6047] <... ioctl resumed>) = 0 [pid 6047] close(3 [pid 5852] <... umount2 resumed>) = 0 [pid 6047] <... close resumed>) = 0 [pid 6047] close(4 [ 233.432354][ T6047] loop2: detected capacity change from 0 to 32768 [pid 5852] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6047] <... close resumed>) = 0 [pid 6047] mkdir("./file0", 0777 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6047] <... mkdir resumed>) = 0 [pid 6047] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./31/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./31") = 0 [pid 5852] mkdir("./32", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6047] <... mount resumed>) = 0 [pid 6047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./file0") = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 233.475765][ T6047] [ 233.475765][ T6047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.475765][ T6047] [ 233.540182][ T6047] [ 233.540182][ T6047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.540182][ T6047] [pid 6047] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 233.590043][ T6047] [ 233.590043][ T6047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.590043][ T6047] [pid 6047] exit_group(0) = ? [pid 6047] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6047, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./31/binderfs") = 0 [ 233.632847][ T113] [ 233.632847][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.632847][ T113] [pid 5849] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6048] <... write resumed>) = 16777216 [pid 6048] munmap(0x7feda9000000, 138412032) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 233.680440][ T5849] [ 233.680440][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.680440][ T5849] [ 233.710807][ T5849] [ 233.710807][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.710807][ T5849] [pid 6048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6048] ioctl(4, LOOP_SET_FD, 3 [pid 5849] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6048] <... ioctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6048] close(3 [pid 5849] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6048] <... close resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 6048] close(4 [pid 5849] newfstatat(4, "", [pid 6048] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./31/file0" [pid 6048] mkdir("./file0", 0777 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6052 attached [ 233.762635][ T6048] loop0: detected capacity change from 0 to 32768 [pid 6048] <... mkdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6052 [pid 6048] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... close resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6049] <... write resumed>) = 16777216 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... close resumed>) = 0 [pid 6049] munmap(0x7feda9000000, 138412032 [pid 5849] rmdir("./31") = 0 [pid 5849] mkdir("./32", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6052] set_robust_list(0x555584a2d760, 24) = 0 [pid 6052] chdir("./33") = 0 ./strace-static-x86_64: Process 6053 attached [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3executing program ) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6052] write(1, "executing program\n", 18) = 18 [pid 6052] memfd_create("syzkaller", 0 [pid 6053] set_robust_list(0x555584a2d760, 24 [pid 6052] <... memfd_create resumed>) = 3 [pid 6049] <... munmap resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6053 [pid 6053] <... set_robust_list resumed>) = 0 [ 233.836906][ T6048] [ 233.836906][ T6048] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.836906][ T6048] [pid 6053] chdir("./32" [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6053] <... chdir resumed>) = 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6053] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6048] <... mount resumed>) = 0 [pid 6048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6049] <... openat resumed>) = 4 [pid 6048] chdir("./file0" [pid 6053] <... openat resumed>) = 3 [pid 6049] ioctl(4, LOOP_SET_FD, 3 [pid 6048] <... chdir resumed>) = 0 [pid 6053] write(3, "1000", 4 [pid 6048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6048] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6053] <... write resumed>) = 4 [pid 6050] <... write resumed>) = 16777216 [pid 6049] <... ioctl resumed>) = 0 [pid 6053] close(3) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6050] munmap(0x7feda9000000, 138412032 [pid 6049] close(3) = 0 [pid 6049] close(4 [pid 6053] write(1, "executing program\n", 18 [pid 6049] <... close resumed>) = 0 executing program [pid 6053] <... write resumed>) = 18 [pid 6049] mkdir("./file0", 0777 [pid 6053] memfd_create("syzkaller", 0 [pid 6049] <... mkdir resumed>) = 0 [ 233.905773][ T6049] loop4: detected capacity change from 0 to 32768 [ 233.907596][ T6048] [ 233.907596][ T6048] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.907596][ T6048] [pid 6053] <... memfd_create resumed>) = 3 [pid 6049] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6050] <... munmap resumed>) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6048] <... lsetxattr resumed>) = 0 [pid 6048] exit_group(0) = ? [ 233.951050][ T6048] [ 233.951050][ T6048] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.951050][ T6048] [ 233.970034][ T6049] [ 233.970034][ T6049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.970034][ T6049] [ 233.998141][ T112] [pid 6048] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6048, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 6050] ioctl(4, LOOP_SET_FD, 3 [pid 5847] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6049] <... mount resumed>) = 0 [pid 5847] newfstatat(3, "", [pid 6049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6049] chdir("./file0") = 0 [pid 5847] getdents64(3, [pid 6049] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6049] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6050] <... ioctl resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6050] close(3 [pid 5847] newfstatat(AT_FDCWD, "./32/binderfs", [pid 6050] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6050] close(4 [pid 5847] unlink("./32/binderfs" [pid 6050] <... close resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [ 233.998141][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.998141][ T112] [ 234.020458][ T6050] loop3: detected capacity change from 0 to 32768 [ 234.034611][ T6049] [ 234.034611][ T6049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.034611][ T6049] [pid 5847] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6050] mkdir("./file0", 0777) = 0 [pid 6050] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6049] <... lsetxattr resumed>) = 0 [ 234.051991][ T5847] [ 234.051991][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.051991][ T5847] [ 234.060031][ T6049] [ 234.060031][ T6049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.060031][ T6049] [ 234.088752][ T6050] [ 234.088752][ T6050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.088752][ T6050] [pid 6050] <... mount resumed>) = 0 [pid 6050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6050] chdir("./file0") = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6049] exit_group(0 [pid 6050] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6049] <... exit_group resumed>) = ? [pid 6050] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6049] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./32/binderfs") = 0 [ 234.108741][ T5847] [ 234.108741][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.108741][ T5847] [ 234.120058][ T113] [ 234.120058][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.120058][ T113] [ 234.143488][ T6050] [ 234.143488][ T6050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.143488][ T6050] [pid 5851] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = 0 [ 234.163261][ T5851] [ 234.163261][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.163261][ T5851] [ 234.174269][ T6050] [ 234.174269][ T6050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.174269][ T6050] [ 234.190074][ T5851] [ 234.190074][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.190074][ T5851] [ 234.208486][ T112] [pid 5847] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6050] <... lsetxattr resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5851] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./32/file0", [pid 5847] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6050] exit_group(0 [pid 5851] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6054 attached [pid 6050] <... exit_group resumed>) = ? [pid 5851] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", [pid 6054] set_robust_list(0x555584a2d760, 24 [pid 5851] newfstatat(4, "", [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6054 [pid 6054] <... set_robust_list resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6054] chdir("./32" [pid 6050] +++ exited with 0 +++ [pid 5851] getdents64(4, [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6054] <... chdir resumed>) = 0 [pid 6054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, [pid 6054] <... prctl resumed>) = 0 [pid 5851] getdents64(4, [pid 6054] setpgid(0, 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] close(4 [pid 6054] <... setpgid resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(4, [pid 6054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] rmdir("./32/file0" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] close(4 [pid 5850] <... openat resumed>) = 3 [pid 5847] <... close resumed>) = 0 [pid 5850] newfstatat(3, "", [pid 5847] rmdir("./32/file0" [pid 5851] <... rmdir resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6054] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 5850] getdents64(3, [pid 5847] getdents64(3, [pid 6054] write(3, "1000", 4 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6054] <... write resumed>) = 4 [pid 5851] close(3 [pid 5850] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] close(3 [pid 6054] close(3 [pid 5851] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... close resumed>) = 0 [pid 6054] <... close resumed>) = 0 [pid 5851] rmdir("./32" [pid 5850] newfstatat(AT_FDCWD, "./31/binderfs", executing program [pid 5847] rmdir("./32" [pid 6054] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... rmdir resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] mkdir("./33", 0777 [pid 5850] unlink("./31/binderfs" [pid 5847] mkdir("./33", 0777 [pid 6054] <... symlink resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6054] write(1, "executing program\n", 18 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 234.208486][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.208486][ T112] [pid 5850] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6054] <... write resumed>) = 18 [pid 6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] <... openat resumed>) = 3 [pid 6054] memfd_create("syzkaller", 0 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6054] <... memfd_create resumed>) = 3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 234.254104][ T5850] [ 234.254104][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.254104][ T5850] [ 234.301155][ T5850] [ 234.301155][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.301155][ T5850] [pid 5851] close(3 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./31/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./31") = 0 [pid 5850] mkdir("./32", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5847] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6055 ./strace-static-x86_64: Process 6055 attached [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6055] set_robust_list(0x555584a2d760, 24./strace-static-x86_64: Process 6056 attached ) = 0 [pid 6055] chdir("./33" [pid 6056] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6056 [pid 6056] <... set_robust_list resumed>) = 0 [pid 6055] <... chdir resumed>) = 0 [pid 6056] chdir("./33" [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6056] <... chdir resumed>) = 0 [pid 6055] <... prctl resumed>) = 0 [pid 6055] setpgid(0, 0 [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6055] <... setpgid resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6056] <... prctl resumed>) = 0 [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6055] <... openat resumed>) = 3 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6057 [pid 6055] write(3, "1000", 4 [pid 6056] setpgid(0, 0 [pid 6055] <... write resumed>) = 4 [pid 6055] close(3) = 0 [pid 6056] <... setpgid resumed>) = 0 [pid 6055] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6057 attached [pid 6057] set_robust_list(0x555584a2d760, 24 [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6057] <... set_robust_list resumed>) = 0 [pid 6057] chdir("./32" [pid 6055] <... symlink resumed>) = 0 [pid 6056] <... openat resumed>) = 3 executing program [pid 6055] write(1, "executing program\n", 18 [pid 6056] write(3, "1000", 4 [pid 6055] <... write resumed>) = 18 [pid 6056] <... write resumed>) = 4 [pid 6057] <... chdir resumed>) = 0 [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6056] close(3 [pid 6055] memfd_create("syzkaller", 0 [pid 6056] <... close resumed>) = 0 [pid 6056] symlink("/dev/binderfs", "./binderfs" [pid 6055] <... memfd_create resumed>) = 3 [pid 6057] <... prctl resumed>) = 0 [pid 6057] setpgid(0, 0 [pid 6056] <... symlink resumed>) = 0 [pid 6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6057] <... setpgid resumed>) = 0 [pid 6056] write(1, "executing program\n", 18 [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6055] <... mmap resumed>) = 0x7feda9000000 [pid 6057] <... openat resumed>) = 3 executing program executing program [pid 6057] write(3, "1000", 4) = 4 [pid 6057] close(3) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6056] <... write resumed>) = 18 [pid 6057] write(1, "executing program\n", 18 [pid 6056] memfd_create("syzkaller", 0 [pid 6057] <... write resumed>) = 18 [pid 6056] <... memfd_create resumed>) = 3 [pid 6057] memfd_create("syzkaller", 0) = 3 [pid 6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6052] <... write resumed>) = 16777216 [pid 6052] munmap(0x7feda9000000, 138412032 [pid 6053] <... write resumed>) = 16777216 [pid 6052] <... munmap resumed>) = 0 [pid 6053] munmap(0x7feda9000000, 138412032 [pid 6052] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6052] ioctl(4, LOOP_SET_FD, 3 [pid 6053] <... munmap resumed>) = 0 [pid 6052] <... ioctl resumed>) = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6053] close(3) = 0 [ 234.801453][ T6052] loop1: detected capacity change from 0 to 32768 [ 234.830739][ T6053] loop5: detected capacity change from 0 to 32768 [pid 6052] close(3 [pid 6053] close(4 [pid 6052] <... close resumed>) = 0 [pid 6052] close(4) = 0 [pid 6052] mkdir("./file0", 0777) = 0 [pid 6052] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6053] <... close resumed>) = 0 [pid 6053] mkdir("./file0", 0777) = 0 [pid 6053] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6052] <... mount resumed>) = 0 [pid 6052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6052] chdir("./file0") = 0 [ 234.850436][ T6052] [ 234.850436][ T6052] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.850436][ T6052] [ 234.885550][ T6053] [ 234.885550][ T6053] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.885550][ T6053] [pid 6052] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6052] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6053] <... mount resumed>) = 0 [pid 6053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6053] chdir("./file0") = 0 [pid 6053] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 234.929609][ T6052] [ 234.929609][ T6052] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.929609][ T6052] [ 234.951769][ T6052] [ 234.951769][ T6052] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.951769][ T6052] [pid 6053] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6052] <... lsetxattr resumed>) = 0 [pid 6052] exit_group(0) = ? [pid 6057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6052] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6052, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6053] <... lsetxattr resumed>) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [ 234.980811][ T6053] [ 234.980811][ T6053] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.980811][ T6053] [ 234.995010][ T112] [ 234.995010][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.995010][ T112] [ 235.007045][ T6053] [ 235.007045][ T6053] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.007045][ T6053] [pid 6053] exit_group(0 [pid 5848] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./33/binderfs") = 0 [pid 5848] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6053] <... exit_group resumed>) = ? [pid 6053] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] <... umount2 resumed>) = 0 [pid 5852] newfstatat(3, "", [pid 5848] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./33/file0", [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5852] unlink("./32/binderfs" [pid 5848] newfstatat(4, "", [pid 5852] <... unlink resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 235.035489][ T112] [ 235.035489][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.035489][ T112] [ 235.058548][ T5848] [ 235.058548][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.058548][ T5848] [ 235.070815][ T5848] [ 235.070815][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.070815][ T5848] [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./33/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./33") = 0 [pid 5848] mkdir("./34", 0777 [pid 5852] <... umount2 resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5852] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 3 [pid 5852] newfstatat(AT_FDCWD, "./32/file0", [ 235.125687][ T5852] [ 235.125687][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.125687][ T5852] [ 235.156204][ T5852] [ 235.156204][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.156204][ T5852] [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6054] <... write resumed>) = 16777216 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 6054] munmap(0x7feda9000000, 138412032 [pid 5848] close(3 [pid 5852] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6054] <... munmap resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6056] <... write resumed>) = 16777216 [pid 6054] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] getdents64(4, [pid 6054] <... openat resumed>) = 4 [pid 6054] ioctl(4, LOOP_SET_FD, 3 [pid 6056] munmap(0x7feda9000000, 138412032 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 6054] <... ioctl resumed>) = 0 [pid 5852] rmdir("./32/file0" [pid 6054] close(3) = 0 [pid 6054] close(4) = 0 [pid 6054] mkdir("./file0", 0777) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 6054] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./32") = 0 [pid 5852] mkdir("./33", 0777 [pid 6056] <... munmap resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [ 235.301008][ T6054] loop2: detected capacity change from 0 to 32768 [pid 6056] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6056] <... openat resumed>) = 4 [pid 6056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6056] close(3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6056] <... close resumed>) = 0 [pid 6056] close(4) = 0 [ 235.361297][ T6056] loop4: detected capacity change from 0 to 32768 [ 235.368001][ T6054] [ 235.368001][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.368001][ T6054] [pid 6056] mkdir("./file0", 0777 [pid 6054] <... mount resumed>) = 0 [pid 6054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6056] <... mkdir resumed>) = 0 [pid 6054] chdir("./file0") = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6054] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 235.431175][ T6054] [ 235.431175][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.431175][ T6054] [ 235.447451][ T6056] [ 235.447451][ T6056] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.447451][ T6056] [ 235.464489][ T6054] [ 235.464489][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.464489][ T6054] [pid 6056] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] <... close resumed>) = 0 [pid 6056] chdir("./file0" [pid 6054] <... lsetxattr resumed>) = 0 [pid 6054] exit_group(0) = ? [pid 6054] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6054, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./32/binderfs") = 0 [pid 5849] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6056] <... chdir resumed>) = 0 [pid 6056] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6056] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6060 ./strace-static-x86_64: Process 6060 attached [pid 6057] <... write resumed>) = 16777216 [pid 6060] set_robust_list(0x555584a2d760, 24) = 0 [pid 6060] chdir("./34") = 0 [pid 6060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6060] setpgid(0, 0) = 0 [pid 6060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6060] write(3, "1000", 4) = 4 [pid 6060] close(3) = 0 [pid 6057] munmap(0x7feda9000000, 138412032 [pid 6060] symlink("/dev/binderfs", "./binderfs" [pid 6056] <... lsetxattr resumed>) = 0 [pid 6060] <... symlink resumed>) = 0 [ 235.517137][ T112] [ 235.517137][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.517137][ T112] [ 235.531867][ T6056] [ 235.531867][ T6056] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.531867][ T6056] [ 235.546353][ T5849] [ 235.546353][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.546353][ T5849] [ 235.550616][ T6056] [ 235.550616][ T6056] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.550616][ T6056] [pid 6056] exit_group(0) = ? executing program [pid 6060] write(1, "executing program\n", 18) = 18 [pid 6060] memfd_create("syzkaller", 0) = 3 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6056] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6056, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6055] <... write resumed>) = 16777216 [pid 6055] munmap(0x7feda9000000, 138412032 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./33/binderfs") = 0 [pid 5851] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 6057] <... munmap resumed>) = 0 [ 235.591129][ T113] [ 235.591129][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.591129][ T113] [ 235.601884][ T5849] [ 235.601884][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.601884][ T5849] [pid 6057] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5852] <... close resumed>) = 0 [pid 6055] <... munmap resumed>) = 0 [pid 5849] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6057] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./32/file0", [pid 6055] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6055] <... openat resumed>) = 4 [pid 5849] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6055] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6061 attached [pid 5849] newfstatat(4, "", [pid 6061] set_robust_list(0x555584a2d760, 24 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6061] <... set_robust_list resumed>) = 0 [pid 5849] getdents64(4, [pid 6061] chdir("./33" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 executing program [pid 6061] <... chdir resumed>) = 0 [pid 5849] getdents64(4, [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6057] <... ioctl resumed>) = 0 [pid 6057] close(3) = 0 [pid 6057] close(4 [pid 6061] write(3, "1000", 4 [pid 6057] <... close resumed>) = 0 [pid 6061] <... write resumed>) = 4 [pid 6061] close(3 [pid 6057] mkdir("./file0", 0777 [pid 6061] <... close resumed>) = 0 [pid 6057] <... mkdir resumed>) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] write(1, "executing program\n", 18 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6061 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6061] <... write resumed>) = 18 [pid 5849] close(4 [pid 6061] memfd_create("syzkaller", 0 [pid 5849] <... close resumed>) = 0 [pid 6057] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] rmdir("./32/file0") = 0 [pid 6061] <... memfd_create resumed>) = 3 [pid 6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] getdents64(3, [pid 6055] <... ioctl resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6055] close(3) = 0 [pid 5849] <... close resumed>) = 0 [pid 6055] close(4 [ 235.651757][ T5851] [ 235.651757][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.651757][ T5851] [ 235.663812][ T6057] loop3: detected capacity change from 0 to 32768 [ 235.671522][ T5851] [ 235.671522][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.671522][ T5851] [ 235.685105][ T6055] loop0: detected capacity change from 0 to 32768 [pid 5849] rmdir("./32") = 0 [pid 6055] <... close resumed>) = 0 [pid 5849] mkdir("./33", 0777 [pid 6055] mkdir("./file0", 0777) = 0 [pid 6055] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6057] <... mount resumed>) = 0 [ 235.714859][ T6057] [ 235.714859][ T6057] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.714859][ T6057] [pid 6057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6057] chdir("./file0") = 0 [pid 6057] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6057] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... umount2 resumed>) = 0 [pid 6055] <... mount resumed>) = 0 [pid 6055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6055] chdir("./file0") = 0 [pid 6055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6055] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 235.763870][ T6057] [ 235.763870][ T6057] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.763870][ T6057] [ 235.774386][ T6055] [ 235.774386][ T6055] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.774386][ T6055] [ 235.798766][ T6055] [ 235.798766][ T6055] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.798766][ T6055] [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./33/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./33") = 0 [pid 5851] mkdir("./34", 0777) = 0 [ 235.850647][ T6057] [ 235.850647][ T6057] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.850647][ T6057] [ 235.865136][ T6055] [ 235.865136][ T6055] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.865136][ T6055] [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6057] <... lsetxattr resumed>) = 0 [pid 6055] <... lsetxattr resumed>) = 0 [pid 6057] exit_group(0) = ? [pid 6057] +++ exited with 0 +++ [pid 6055] exit_group(0) = ? [pid 6055] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] newfstatat(3, "", [pid 5850] <... openat resumed>) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] newfstatat(3, "", [pid 5847] getdents64(3, [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] getdents64(3, [pid 5847] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] unlink("./33/binderfs" [pid 5851] <... openat resumed>) = 3 [pid 5847] <... unlink resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5847] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] unlink("./32/binderfs") = 0 [pid 5851] close(3 [ 235.896177][ T112] [ 235.896177][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.896177][ T112] [ 235.907322][ T113] [ 235.907322][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.907322][ T113] [ 235.962010][ T5847] [ 235.962010][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.962010][ T5847] [ 235.983963][ T5850] [ 235.983963][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.983963][ T5850] [ 236.000597][ T5850] [ 236.000597][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.000597][ T5850] [pid 5850] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [ 236.020404][ T5847] [ 236.020404][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.020404][ T5847] [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 5850] <... umount2 resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(4, [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6062 attached [pid 5850] newfstatat(AT_FDCWD, "./32/file0", [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6062 [pid 5847] close(4 [pid 6062] set_robust_list(0x555584a2d760, 24) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... close resumed>) = 0 [pid 5850] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", [pid 5847] rmdir("./33/file0" [pid 6062] chdir("./33" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6062] <... chdir resumed>) = 0 [pid 5847] getdents64(3, [pid 5850] rmdir("./32/file0" [pid 6062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6062] <... prctl resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5847] close(3 [pid 6062] setpgid(0, 0 [pid 5850] getdents64(3, [pid 6062] <... setpgid resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3 [pid 6062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... close resumed>) = 0 [pid 5847] rmdir("./33" [pid 5850] rmdir("./32") = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5850] mkdir("./33", 0777) = 0 [pid 5847] mkdir("./34", 0777 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6062] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6062] write(3, "1000", 4 [pid 5850] <... ioctl resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6062] <... write resumed>) = 4 [pid 5850] close(3 [pid 6062] close(3 [pid 5851] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6062] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6062] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... openat resumed>) = 3 [pid 6062] <... symlink resumed>) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6064 attached [pid 6062] write(1, "executing program\n", 18executing program [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6064 [pid 5847] <... ioctl resumed>) = 0 [pid 6062] <... write resumed>) = 18 [pid 5847] close(3 [pid 6062] memfd_create("syzkaller", 0 [pid 6064] set_robust_list(0x555584a2d760, 24 [pid 6062] <... memfd_create resumed>) = 3 [pid 6064] <... set_robust_list resumed>) = 0 [pid 6064] chdir("./34") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0executing program ) = 0 [pid 6062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6062] <... mmap resumed>) = 0x7feda9000000 [pid 6064] <... openat resumed>) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6064] write(1, "executing program\n", 18) = 18 [pid 6064] memfd_create("syzkaller", 0) = 3 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6060] <... write resumed>) = 16777216 [pid 6060] munmap(0x7feda9000000, 138412032) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6060] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6060] close(3) = 0 [pid 6060] close(4) = 0 [pid 6060] mkdir("./file0", 0777) = 0 [ 236.340533][ T6060] loop1: detected capacity change from 0 to 32768 [pid 6060] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 236.413275][ T6060] [ 236.413275][ T6060] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.413275][ T6060] [pid 6060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6066 attached [pid 6066] set_robust_list(0x555584a2d760, 24) = 0 [pid 6062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6060] chdir("./file0" [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6066 [pid 5847] <... close resumed>) = 0 [pid 6060] <... chdir resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6066] chdir("./33") = 0 ./strace-static-x86_64: Process 6067 attached [pid 6066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6066] <... prctl resumed>) = 0 executing program executing program [pid 6066] setpgid(0, 0 [pid 6060] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6067 [pid 6066] <... setpgid resumed>) = 0 [pid 6067] set_robust_list(0x555584a2d760, 24) = 0 [pid 6067] chdir("./34") = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6067] setpgid(0, 0) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6067] <... openat resumed>) = 3 [pid 6066] <... openat resumed>) = 3 [pid 6066] write(3, "1000", 4) = 4 [pid 6067] write(3, "1000", 4 [pid 6066] close(3 [pid 6067] <... write resumed>) = 4 [pid 6066] <... close resumed>) = 0 [pid 6067] close(3 [pid 6066] symlink("/dev/binderfs", "./binderfs" [pid 6067] <... close resumed>) = 0 [pid 6066] <... symlink resumed>) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs" [pid 6066] write(1, "executing program\n", 18 [pid 6067] <... symlink resumed>) = 0 [pid 6066] <... write resumed>) = 18 [pid 6067] write(1, "executing program\n", 18 [pid 6066] memfd_create("syzkaller", 0 [pid 6067] <... write resumed>) = 18 [pid 6066] <... memfd_create resumed>) = 3 [pid 6067] memfd_create("syzkaller", 0 [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6067] <... memfd_create resumed>) = 3 [pid 6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6061] <... write resumed>) = 16777216 [ 236.498689][ T6060] [ 236.498689][ T6060] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.498689][ T6060] [ 236.529534][ T6060] [ 236.529534][ T6060] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.529534][ T6060] [pid 6061] munmap(0x7feda9000000, 138412032 [pid 6060] <... lsetxattr resumed>) = 0 [pid 6060] exit_group(0) = ? [pid 6060] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6060, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6061] <... munmap resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 6061] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] newfstatat(3, "", [pid 6061] <... openat resumed>) = 4 [ 236.556406][ T113] [ 236.556406][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.556406][ T113] [pid 6061] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6061] <... ioctl resumed>) = 0 [pid 5848] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6061] close(3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6061] <... close resumed>) = 0 [pid 6061] close(4 [pid 5848] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6061] <... close resumed>) = 0 [pid 5848] unlink("./34/binderfs" [pid 6061] mkdir("./file0", 0777 [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6061] <... mkdir resumed>) = 0 [ 236.609874][ T6061] loop5: detected capacity change from 0 to 32768 [ 236.643906][ T5848] [ 236.643906][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.643906][ T5848] [pid 6061] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6061] chdir("./file0") = 0 [pid 6061] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 236.678783][ T6061] [ 236.678783][ T6061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.678783][ T6061] [ 236.700033][ T5848] [ 236.700033][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.700033][ T5848] [pid 6061] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./34/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./34") = 0 [pid 5848] mkdir("./35", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6061] <... lsetxattr resumed>) = 0 [pid 6061] exit_group(0) = ? [ 236.734545][ T6061] [ 236.734545][ T6061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.734545][ T6061] [ 236.773833][ T6061] [ 236.773833][ T6061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.773833][ T6061] [pid 6061] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./33/binderfs") = 0 [ 236.814646][ T112] [ 236.814646][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.814646][ T112] [ 236.853789][ T5852] [ 236.853789][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.853789][ T5852] [ 236.888981][ T5852] [ 236.888981][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.888981][ T5852] [pid 5852] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6062] <... write resumed>) = 16777216 [pid 5852] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./33/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./33" [pid 6062] munmap(0x7feda9000000, 138412032 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./34", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6062] <... munmap resumed>) = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6064] <... write resumed>) = 16777216 [pid 6062] ioctl(4, LOOP_SET_FD, 3 [pid 6064] munmap(0x7feda9000000, 138412032 [pid 6062] <... ioctl resumed>) = 0 [pid 6062] close(3) = 0 [pid 6062] close(4 [pid 6064] <... munmap resumed>) = 0 [pid 6062] <... close resumed>) = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6062] mkdir("./file0", 0777) = 0 [pid 6064] <... openat resumed>) = 4 [ 237.010653][ T6062] loop2: detected capacity change from 0 to 32768 [pid 6064] ioctl(4, LOOP_SET_FD, 3 [pid 6062] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6068 attached [pid 6068] set_robust_list(0x555584a2d760, 24) = 0 [pid 6068] chdir("./35") = 0 [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6068] setpgid(0, 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6068 [pid 6068] <... setpgid resumed>) = 0 [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6068] write(3, "1000", 4 [pid 6064] <... ioctl resumed>) = 0 [pid 6068] <... write resumed>) = 4 [pid 6068] close(3executing program ) = 0 [pid 6064] close(3 [pid 6068] symlink("/dev/binderfs", "./binderfs" [pid 6064] <... close resumed>) = 0 [pid 6068] <... symlink resumed>) = 0 [pid 6064] close(4 [pid 6068] write(1, "executing program\n", 18) = 18 [pid 6064] <... close resumed>) = 0 [pid 6064] mkdir("./file0", 0777 [pid 6068] memfd_create("syzkaller", 0 [pid 6064] <... mkdir resumed>) = 0 [pid 6064] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6068] <... memfd_create resumed>) = 3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6062] <... mount resumed>) = 0 [ 237.080403][ T6064] loop4: detected capacity change from 0 to 32768 [ 237.097112][ T6062] [ 237.097112][ T6062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.097112][ T6062] [pid 6062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6062] chdir("./file0") = 0 [pid 6062] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6062] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6064] <... mount resumed>) = 0 [pid 6064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 237.146929][ T6064] [ 237.146929][ T6064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.146929][ T6064] [ 237.172797][ T6062] [ 237.172797][ T6062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.172797][ T6062] [pid 6064] chdir("./file0") = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 237.202299][ T6062] [ 237.202299][ T6062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.202299][ T6062] [ 237.238676][ T113] [ 237.238676][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.238676][ T113] [ 237.238886][ T6064] [pid 6064] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6062] <... lsetxattr resumed>) = 0 [pid 6062] exit_group(0) = ? [pid 6062] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6062, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./33/binderfs") = 0 [ 237.238886][ T6064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.238886][ T6064] [ 237.285283][ T6064] [ 237.285283][ T6064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.285283][ T6064] [ 237.290380][ T5849] [pid 5849] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6064] <... lsetxattr resumed>) = 0 [pid 6064] exit_group(0 [pid 6067] <... write resumed>) = 16777216 [pid 6064] <... exit_group resumed>) = ? [pid 6064] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6064, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5852] <... close resumed>) = 0 [pid 6067] munmap(0x7feda9000000, 138412032 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6069 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6069 attached [pid 5851] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", [pid 6069] set_robust_list(0x555584a2d760, 24 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6069] <... set_robust_list resumed>) = 0 [pid 5851] getdents64(3, [pid 6069] chdir("./34" [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6069] <... chdir resumed>) = 0 [pid 5851] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./34/binderfs", [pid 6069] <... prctl resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6069] setpgid(0, 0 [pid 5851] unlink("./34/binderfs" [pid 6069] <... setpgid resumed>) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6069] <... openat resumed>) = 3 [pid 6069] write(3, "1000", 4) = 4 [pid 6066] <... write resumed>) = 16777216 [pid 6069] close(3) = 0 [ 237.290380][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.290380][ T5849] [ 237.307434][ T112] [ 237.307434][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.307434][ T112] [ 237.336193][ T5849] [ 237.336193][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.336193][ T5849] [pid 6069] symlink("/dev/binderfs", "./binderfs" [pid 5849] <... umount2 resumed>) = 0 executing program [pid 6069] <... symlink resumed>) = 0 [pid 6069] write(1, "executing program\n", 18 [pid 5849] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6069] <... write resumed>) = 18 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./33/file0", [pid 6069] memfd_create("syzkaller", 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6066] munmap(0x7feda9000000, 138412032 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 6069] <... memfd_create resumed>) = 3 [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6067] <... munmap resumed>) = 0 [pid 5849] rmdir("./33/file0") = 0 [pid 6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6069] <... mmap resumed>) = 0x7feda9000000 [pid 5849] close(3) = 0 [pid 5849] rmdir("./33") = 0 [pid 5849] mkdir("./34", 0777) = 0 [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6066] <... munmap resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 237.378411][ T5851] [ 237.378411][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.378411][ T5851] [ 237.406334][ T5851] [ 237.406334][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.406334][ T5851] [pid 6067] ioctl(4, LOOP_SET_FD, 3 [pid 6066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... openat resumed>) = 3 [pid 6066] <... openat resumed>) = 4 [pid 6066] ioctl(4, LOOP_SET_FD, 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6067] <... ioctl resumed>) = 0 [pid 6067] close(3) = 0 [pid 6067] close(4) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 6067] mkdir("./file0", 0777 [pid 5851] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6066] <... ioctl resumed>) = 0 [pid 6066] close(3 [pid 6067] <... mkdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./34/file0", [pid 6067] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6066] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6066] close(4) = 0 [pid 6066] mkdir("./file0", 0777) = 0 [pid 5851] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6066] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 237.436184][ T6067] loop0: detected capacity change from 0 to 32768 [ 237.437590][ T6066] loop3: detected capacity change from 0 to 32768 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./34/file0") = 0 [pid 5851] getdents64(3, [pid 6066] <... mount resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] close(3 [pid 6066] <... openat resumed>) = 3 [pid 5851] <... close resumed>) = 0 [pid 6066] chdir("./file0" [pid 5851] rmdir("./34" [pid 6066] <... chdir resumed>) = 0 [pid 6066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] <... rmdir resumed>) = 0 [pid 6066] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 237.502957][ T6066] [ 237.502957][ T6066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.502957][ T6066] [ 237.521497][ T6067] [ 237.521497][ T6067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.521497][ T6067] [ 237.547853][ T6066] [ 237.547853][ T6066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.547853][ T6066] [pid 5851] mkdir("./35", 0777 [pid 6067] <... mount resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 6067] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6067] chdir("./file0") = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] <... openat resumed>) = 3 [pid 6067] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 237.579145][ T6066] [ 237.579145][ T6066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.579145][ T6066] [ 237.593854][ T6067] [ 237.593854][ T6067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.593854][ T6067] [pid 5851] close(3 [pid 6066] <... lsetxattr resumed>) = 0 [pid 6066] exit_group(0) = ? [pid 6066] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6066, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./33/binderfs") = 0 [ 237.626452][ T113] [ 237.626452][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.626452][ T113] [ 237.637807][ T6067] [ 237.637807][ T6067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.637807][ T6067] [pid 5850] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6067] <... lsetxattr resumed>) = 0 [pid 6067] exit_group(0) = ? [pid 6067] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 237.700629][ T112] [ 237.700629][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.700629][ T112] [ 237.701725][ T5850] [ 237.701725][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.701725][ T5850] [pid 5847] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./34/binderfs") = 0 [pid 5847] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 237.754960][ T5850] [ 237.754960][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.754960][ T5850] [ 237.774137][ T5847] [ 237.774137][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.774137][ T5847] [ 237.800348][ T5847] [pid 6069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6070 attached [pid 6070] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6070 [pid 6070] <... set_robust_list resumed>) = 0 [pid 6070] chdir("./34") = 0 [pid 6070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6070] setpgid(0, 0) = 0 [pid 6070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6070] write(3, "1000", 4 [pid 5850] <... umount2 resumed>) = 0 [pid 6070] <... write resumed>) = 4 [pid 5850] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6070] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./33/file0", [pid 6070] <... close resumed>) = 0 [pid 6070] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6070] <... symlink resumed>) = 0 [pid 6070] write(1, "executing program\n", 18 [pid 5850] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6070] <... write resumed>) = 18 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6070] memfd_create("syzkaller", 0 [pid 5850] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6070] <... memfd_create resumed>) = 3 [pid 5850] <... openat resumed>) = 4 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 6070] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5847] <... umount2 resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... close resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./34/file0", [pid 5850] rmdir("./33/file0" [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5847] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(3, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] close(3) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5850] rmdir("./33") = 0 [pid 5847] newfstatat(4, "", [pid 5850] mkdir("./34", 0777 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 237.800348][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.800348][ T5847] [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] getdents64(4, [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./34/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./34" [pid 6068] <... write resumed>) = 16777216 [pid 5847] <... rmdir resumed>) = 0 [pid 6068] munmap(0x7feda9000000, 138412032 [pid 5847] mkdir("./35", 0777) = 0 [pid 5851] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6068] <... munmap resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3./strace-static-x86_64: Process 6072 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6072 [pid 6072] set_robust_list(0x555584a2d760, 24) = 0 [pid 6072] chdir("./35" [pid 6068] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6072] <... chdir resumed>) = 0 [pid 6068] <... openat resumed>) = 4 [pid 6072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6068] ioctl(4, LOOP_SET_FD, 3 [pid 6072] <... prctl resumed>) = 0 [pid 6072] setpgid(0, 0) = 0 [pid 6072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6072] write(3, "1000", 4) = 4 [pid 6072] close(3executing program ) = 0 [pid 6072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6072] write(1, "executing program\n", 18) = 18 [pid 6072] memfd_create("syzkaller", 0) = 3 [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6068] <... ioctl resumed>) = 0 [pid 6068] close(3) = 0 [pid 6068] close(4) = 0 [pid 6068] mkdir("./file0", 0777) = 0 [ 237.972130][ T6068] loop1: detected capacity change from 0 to 32768 [pid 6068] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6068] chdir("./file0") = 0 [pid 6068] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 238.071133][ T6068] [ 238.071133][ T6068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.071133][ T6068] [pid 6068] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 238.132178][ T6068] [ 238.132178][ T6068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.132178][ T6068] [ 238.170077][ T6068] [ 238.170077][ T6068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.170077][ T6068] [pid 6070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6068] <... lsetxattr resumed>) = 0 [pid 6068] exit_group(0) = ? [pid 6068] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6068, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5848] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 238.200484][ T113] [ 238.200484][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.200484][ T113] [pid 5848] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5847] <... close resumed>) = 0 [pid 6069] <... write resumed>) = 16777216 [pid 5850] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./35/binderfs" [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6073 attached [pid 6069] munmap(0x7feda9000000, 138412032 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6073 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6074 ./strace-static-x86_64: Process 6074 attached [pid 6073] set_robust_list(0x555584a2d760, 24 [pid 6074] set_robust_list(0x555584a2d760, 24 [pid 6073] <... set_robust_list resumed>) = 0 [pid 6074] <... set_robust_list resumed>) = 0 [pid 6073] chdir("./35") = 0 [pid 6074] chdir("./34" [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6074] <... chdir resumed>) = 0 [pid 6073] setpgid(0, 0 [pid 6074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6073] <... setpgid resumed>) = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6074] <... prctl resumed>) = 0 [pid 6073] close(3 [pid 6072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6069] <... munmap resumed>) = 0 [pid 6074] setpgid(0, 0 [pid 6073] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6073] symlink("/dev/binderfs", "./binderfs" [pid 5848] newfstatat(AT_FDCWD, "./35/file0", [pid 6074] <... setpgid resumed>) = 0 [pid 6073] <... symlink resumed>) = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6073] write(1, "executing program\n", 18) = 18 [pid 5848] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6074] <... openat resumed>) = 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [ 238.274357][ T5848] [ 238.274357][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.274357][ T5848] [ 238.300576][ T5848] [ 238.300576][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.300576][ T5848] [pid 6073] memfd_create("syzkaller", 0 [pid 6074] write(3, "1000", 4 [pid 6073] <... memfd_create resumed>) = 3 [pid 5848] <... openat resumed>) = 4 [pid 6074] <... write resumed>) = 4 [pid 6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] newfstatat(4, "", [pid 6074] close(3 [pid 6073] <... mmap resumed>) = 0x7feda9000000 [pid 6069] <... openat resumed>) = 4 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6074] <... close resumed>) = 0 [pid 6069] ioctl(4, LOOP_SET_FD, 3 [pid 5848] getdents64(4, executing program [pid 6074] symlink("/dev/binderfs", "./binderfs" [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6074] <... symlink resumed>) = 0 [pid 6074] write(1, "executing program\n", 18) = 18 [pid 5848] close(4) = 0 [pid 6074] memfd_create("syzkaller", 0 [pid 5848] rmdir("./35/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./35") = 0 [pid 5848] mkdir("./36", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6074] <... memfd_create resumed>) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6069] <... ioctl resumed>) = 0 [pid 6069] close(3) = 0 [pid 6069] close(4) = 0 [pid 6069] mkdir("./file0", 0777) = 0 [ 238.334135][ T6069] loop5: detected capacity change from 0 to 32768 [pid 6069] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6069] chdir("./file0") = 0 [pid 6069] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 238.402380][ T6069] [ 238.402380][ T6069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.402380][ T6069] [ 238.441461][ T6069] [ 238.441461][ T6069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.441461][ T6069] [pid 6069] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6069] exit_group(0) = ? [pid 6069] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6069, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5852] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./34/binderfs") = 0 [ 238.490173][ T6069] [ 238.490173][ T6069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.490173][ T6069] [ 238.517578][ T112] [ 238.517578][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.517578][ T112] [pid 5852] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 6070] <... write resumed>) = 16777216 [pid 5852] <... umount2 resumed>) = 0 [ 238.571504][ T5852] [ 238.571504][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.571504][ T5852] [ 238.610307][ T5852] [ 238.610307][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.610307][ T5852] [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6075 attached [pid 5852] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] set_robust_list(0x555584a2d760, 24) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6075 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6075] chdir("./36" [pid 5852] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6075] <... chdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6075] <... prctl resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 6075] setpgid(0, 0 [pid 5852] newfstatat(4, "", [pid 6075] <... setpgid resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6070] munmap(0x7feda9000000, 138412032 [pid 5852] getdents64(4, [pid 6075] <... openat resumed>) = 3 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6075] write(3, "1000", 4 [pid 5852] getdents64(4, [pid 6075] <... write resumed>) = 4 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6075] close(3 [pid 5852] close(4 [pid 6075] <... close resumed>) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... close resumed>) = 0 [pid 6073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6075] <... symlink resumed>) = 0 [pid 5852] rmdir("./34/file0") = 0 executing program [pid 6075] write(1, "executing program\n", 18 [pid 5852] getdents64(3, [pid 6075] <... write resumed>) = 18 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 6075] memfd_create("syzkaller", 0 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... close resumed>) = 0 [pid 6075] <... memfd_create resumed>) = 3 [pid 5852] rmdir("./34") = 0 [pid 5852] mkdir("./35", 0777 [pid 6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6070] <... munmap resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] <... openat resumed>) = 3 [pid 6070] <... openat resumed>) = 4 [pid 6070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6072] <... write resumed>) = 16777216 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 6070] close(3) = 0 [pid 6070] close(4) = 0 [pid 6070] mkdir("./file0", 0777) = 0 [pid 6070] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 238.732375][ T6070] loop2: detected capacity change from 0 to 32768 [pid 6072] munmap(0x7feda9000000, 138412032) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6072] ioctl(4, LOOP_SET_FD, 3 [pid 6070] <... mount resumed>) = 0 [pid 6070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6072] <... ioctl resumed>) = 0 [pid 6072] close(3) = 0 [pid 6072] close(4) = 0 [pid 6070] <... openat resumed>) = 3 [ 238.831967][ T6070] [ 238.831967][ T6070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.831967][ T6070] [ 238.832218][ T6072] loop4: detected capacity change from 0 to 32768 [pid 6072] mkdir("./file0", 0777) = 0 [pid 6072] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6070] chdir("./file0") = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6070] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6072] <... mount resumed>) = 0 [pid 6072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6072] chdir("./file0") = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 238.903233][ T6072] [ 238.903233][ T6072] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.903233][ T6072] [ 238.921756][ T6070] [ 238.921756][ T6070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.921756][ T6070] [ 238.926626][ T6072] [ 238.926626][ T6072] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.926626][ T6072] [ 238.947512][ T6070] [ 238.947512][ T6070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.947512][ T6070] [pid 6072] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6070] <... lsetxattr resumed>) = 0 [pid 6070] exit_group(0 [pid 6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6070] <... exit_group resumed>) = ? [pid 6072] <... lsetxattr resumed>) = 0 [pid 6070] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6070, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5849] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", [pid 6072] exit_group(0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 238.987643][ T6072] [ 238.987643][ T6072] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.987643][ T6072] [ 239.001644][ T113] [ 239.001644][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.001644][ T113] [ 239.026784][ T112] [ 239.026784][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.026784][ T112] [pid 6072] <... exit_group resumed>) = ? [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./34/binderfs") = 0 [pid 6072] +++ exited with 0 +++ [pid 5849] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6072, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./35/binderfs") = 0 [ 239.058349][ T5849] [ 239.058349][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.058349][ T5849] [ 239.070402][ T5851] [ 239.070402][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.070402][ T5851] [pid 5851] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 239.100293][ T5849] [ 239.100293][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.100293][ T5849] [ 239.100685][ T5851] [ 239.100685][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.100685][ T5851] [pid 5849] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... umount2 resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./34/file0", ./strace-static-x86_64: Process 6076 attached [pid 5851] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6076 [pid 5851] newfstatat(4, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6076] set_robust_list(0x555584a2d760, 24 [pid 5851] getdents64(4, [pid 6076] <... set_robust_list resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6076] chdir("./35" [pid 5851] getdents64(4, [pid 5849] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY executing program [pid 6076] <... chdir resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... openat resumed>) = 4 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] close(4) = 0 [pid 5849] newfstatat(4, "", [pid 6076] <... prctl resumed>) = 0 [pid 5851] rmdir("./35/file0" [pid 6076] setpgid(0, 0 [pid 5851] <... rmdir resumed>) = 0 [pid 6076] <... setpgid resumed>) = 0 [pid 5851] getdents64(3, [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6076] <... openat resumed>) = 3 [pid 5851] close(3 [pid 6076] write(3, "1000", 4 [pid 5851] <... close resumed>) = 0 [pid 6076] <... write resumed>) = 4 [pid 5851] rmdir("./35" [pid 6076] close(3 [pid 5851] <... rmdir resumed>) = 0 [pid 6076] <... close resumed>) = 0 [pid 6076] symlink("/dev/binderfs", "./binderfs" [pid 5851] mkdir("./36", 0777 [pid 6076] <... symlink resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 6076] write(1, "executing program\n", 18) = 18 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6076] memfd_create("syzkaller", 0 [pid 5851] <... openat resumed>) = 3 [pid 6076] <... memfd_create resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... ioctl resumed>) = 0 [pid 6076] <... mmap resumed>) = 0x7feda9000000 [pid 5851] close(3 [pid 6074] <... write resumed>) = 16777216 [pid 6073] <... write resumed>) = 16777216 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6074] munmap(0x7feda9000000, 138412032 [pid 6073] munmap(0x7feda9000000, 138412032 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./34/file0" [pid 6073] <... munmap resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6074] <... munmap resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6073] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] close(3 [pid 6074] <... openat resumed>) = 4 [pid 6073] <... openat resumed>) = 4 [pid 5849] <... close resumed>) = 0 [pid 6074] ioctl(4, LOOP_SET_FD, 3 [pid 6073] ioctl(4, LOOP_SET_FD, 3 [pid 5849] rmdir("./34") = 0 [pid 5849] mkdir("./35", 0777) = 0 [pid 6074] <... ioctl resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6074] close(3 [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 6074] <... close resumed>) = 0 [pid 6074] close(4) = 0 [pid 6074] mkdir("./file0", 0777) = 0 [pid 6074] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6073] <... ioctl resumed>) = 0 [pid 6073] close(3) = 0 [pid 6073] close(4) = 0 [pid 6073] mkdir("./file0", 0777) = 0 [ 239.272206][ T6074] loop3: detected capacity change from 0 to 32768 [ 239.287460][ T6073] loop0: detected capacity change from 0 to 32768 [ 239.342316][ T6074] [ 239.342316][ T6074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.342316][ T6074] [pid 6073] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6075] <... write resumed>) = 16777216 [pid 6074] <... mount resumed>) = 0 [pid 6074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6074] chdir("./file0") = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 239.400037][ T6073] [ 239.400037][ T6073] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.400037][ T6073] [ 239.420592][ T6074] [ 239.420592][ T6074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.420592][ T6074] [ 239.445758][ T6074] [pid 6074] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6075] munmap(0x7feda9000000, 138412032 [pid 6073] <... mount resumed>) = 0 [pid 6073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6073] chdir("./file0") = 0 [pid 6073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 239.445758][ T6074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.445758][ T6074] [ 239.462329][ T6073] [ 239.462329][ T6073] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.462329][ T6073] [pid 6073] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6074] <... lsetxattr resumed>) = 0 [pid 6074] exit_group(0) = ? [pid 6074] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6074, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6075] <... munmap resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 6073] <... lsetxattr resumed>) = 0 [pid 6076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6073] exit_group(0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... restart_syscall resumed>) = 0 [pid 6075] <... openat resumed>) = 4 [pid 6073] <... exit_group resumed>) = ? [ 239.497711][ T6073] [ 239.497711][ T6073] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.497711][ T6073] [ 239.509993][ T112] [ 239.509993][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.509993][ T112] [ 239.529527][ T113] [ 239.529527][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.529527][ T113] [pid 6075] ioctl(4, LOOP_SET_FD, 3 [pid 6073] +++ exited with 0 +++ [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6077 [pid 5850] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x555584a2d760, 24 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6077] <... set_robust_list resumed>) = 0 [pid 6077] chdir("./36" [pid 5850] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6077] <... chdir resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] newfstatat(3, "", [pid 6077] <... prctl resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 6077] setpgid(0, 0 [pid 5850] getdents64(3, [pid 5847] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6077] <... setpgid resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5847] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 6077] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6077] write(3, "1000", 4 [pid 5847] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6077] <... write resumed>) = 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6077] close(3 [pid 5847] newfstatat(AT_FDCWD, "./35/binderfs", [pid 6077] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6077] symlink("/dev/binderfs", "./binderfs" [pid 5847] unlink("./35/binderfs" [pid 6077] <... symlink resumed>) = 0 [pid 6075] <... ioctl resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 6077] write(1, "executing program\n", 18 [pid 6075] close(3 [pid 5847] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6077] <... write resumed>) = 18 [pid 6075] <... close resumed>) = 0 [pid 5850] unlink("./34/binderfs" [pid 6077] memfd_create("syzkaller", 0 [pid 6075] close(4 [pid 6077] <... memfd_create resumed>) = 3 [pid 5850] <... unlink resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6075] <... close resumed>) = 0 [pid 6077] <... mmap resumed>) = 0x7feda9000000 [ 239.549517][ T6075] loop1: detected capacity change from 0 to 32768 [ 239.580318][ T5847] [ 239.580318][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.580318][ T5847] [pid 6075] mkdir("./file0", 0777./strace-static-x86_64: Process 6078 attached ) = 0 [pid 6075] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6078] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6078 [pid 6078] <... set_robust_list resumed>) = 0 [pid 6078] chdir("./35" [pid 5850] <... umount2 resumed>) = 0 [pid 6078] <... chdir resumed>) = 0 [pid 5850] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6078] <... prctl resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./34/file0", [pid 6078] setpgid(0, 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6078] <... setpgid resumed>) = 0 [pid 5850] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 6078] <... openat resumed>) = 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6078] write(3, "1000", 4 [pid 5850] getdents64(4, [pid 6078] <... write resumed>) = 4 [pid 6078] close(3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6078] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs" [pid 5850] rmdir("./34/file0" [pid 6078] <... symlink resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 executing program [pid 6078] write(1, "executing program\n", 18 [pid 5850] getdents64(3, [pid 6078] <... write resumed>) = 18 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 239.600204][ T5850] [ 239.600204][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.600204][ T5850] [ 239.606807][ T6075] [ 239.606807][ T6075] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.606807][ T6075] [ 239.621895][ T5850] [ 239.621895][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.621895][ T5850] [ 239.626550][ T5847] [ 239.626550][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.626550][ T5847] [pid 5850] close(3) = 0 [pid 6078] memfd_create("syzkaller", 0 [pid 6075] <... mount resumed>) = 0 [pid 5850] rmdir("./34" [pid 5847] <... umount2 resumed>) = 0 [pid 6075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... rmdir resumed>) = 0 [pid 6075] <... openat resumed>) = 3 [pid 6075] chdir("./file0") = 0 [pid 6075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6078] <... memfd_create resumed>) = 3 [pid 5850] mkdir("./35", 0777 [pid 5847] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6075] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6078] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... mkdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./35/file0", [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5847] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... ioctl resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] close(3 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./35/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./35") = 0 [pid 5847] mkdir("./36", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 239.704575][ T6075] [ 239.704575][ T6075] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.704575][ T6075] [ 239.740281][ T6075] [ 239.740281][ T6075] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.740281][ T6075] [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6075] <... lsetxattr resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 6075] exit_group(0 [pid 5847] close(3 [pid 6075] <... exit_group resumed>) = ? [pid 6075] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6075, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./36/binderfs") = 0 [ 239.781446][ T112] [ 239.781446][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.781446][ T112] [pid 5848] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6076] <... write resumed>) = 16777216 [ 239.833646][ T5848] [ 239.833646][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.833646][ T5848] [ 239.860681][ T5848] [ 239.860681][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.860681][ T5848] [pid 6076] munmap(0x7feda9000000, 138412032 [pid 6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 6076] <... munmap resumed>) = 0 [pid 5848] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6076] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6076] close(3 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6076] <... close resumed>) = 0 [pid 5848] close(4 [pid 6076] close(4 [pid 5848] <... close resumed>) = 0 [pid 6076] <... close resumed>) = 0 [pid 6078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6076] mkdir("./file0", 0777 [pid 5850] <... close resumed>) = 0 [pid 5848] rmdir("./36/file0" [pid 6076] <... mkdir resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... rmdir resumed>) = 0 [pid 6076] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6079 [pid 5848] <... close resumed>) = 0 ./strace-static-x86_64: Process 6079 attached [pid 5848] rmdir("./36" [ 239.970269][ T6076] loop5: detected capacity change from 0 to 32768 [pid 6079] set_robust_list(0x555584a2d760, 24 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./37", 0777 [pid 6079] <... set_robust_list resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6079] chdir("./35" [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6079] <... chdir resumed>) = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6079] setpgid(0, 0) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6079] write(3, "1000", 4) = 4 [pid 6079] close(3) = 0 [pid 6079] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6079] write(1, "executing program\n", 18) = 18 [pid 6079] memfd_create("syzkaller", 0 [pid 5847] <... close resumed>) = 0 [pid 6079] <... memfd_create resumed>) = 3 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6080 attached , child_tidptr=0x555584a2d750) = 6080 [pid 6080] set_robust_list(0x555584a2d760, 24) = 0 [pid 6080] chdir("./36") = 0 [pid 6076] <... mount resumed>) = 0 [pid 6076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6076] chdir("./file0") = 0 [ 240.066596][ T6076] [ 240.066596][ T6076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.066596][ T6076] [pid 6076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6080] <... prctl resumed>) = 0 [pid 6076] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6080] setpgid(0, 0) = 0 [pid 6080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6080] write(3, "1000", 4) = 4 [pid 6080] close(3) = 0 [pid 6080] symlink("/dev/binderfs", "./binderfs") = 0 [ 240.116224][ T6076] [ 240.116224][ T6076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.116224][ T6076] [pid 6080] write(1, "executing program\n", 18executing program ) = 18 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6076] <... lsetxattr resumed>) = 0 [ 240.161654][ T6076] [ 240.161654][ T6076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.161654][ T6076] [pid 6076] exit_group(0) = ? [pid 6076] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./35/binderfs") = 0 [ 240.202821][ T112] [ 240.202821][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.202821][ T112] [pid 5852] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6081 attached , child_tidptr=0x555584a2d750) = 6081 [pid 6081] set_robust_list(0x555584a2d760, 24) = 0 [ 240.266163][ T5852] [ 240.266163][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.266163][ T5852] [ 240.301083][ T5852] [ 240.301083][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.301083][ T5852] [pid 6081] chdir("./37" [pid 5852] <... umount2 resumed>) = 0 [pid 6081] <... chdir resumed>) = 0 [pid 6081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6081] <... prctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6081] setpgid(0, 0 [pid 5852] newfstatat(AT_FDCWD, "./35/file0", [pid 6081] <... setpgid resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6081] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", [pid 6081] write(3, "1000", 4 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6081] <... write resumed>) = 4 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./35/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./35") = 0 [pid 5852] mkdir("./36", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6081] close(3) = 0 [pid 6081] symlink("/dev/binderfs", "./binderfs" [pid 6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6081] <... symlink resumed>) = 0 executing program [pid 6081] write(1, "executing program\n", 18) = 18 [pid 6081] memfd_create("syzkaller", 0 [pid 6077] <... write resumed>) = 16777216 [pid 6081] <... memfd_create resumed>) = 3 [pid 6077] munmap(0x7feda9000000, 138412032 [pid 6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6078] <... write resumed>) = 16777216 [pid 6078] munmap(0x7feda9000000, 138412032 [pid 6077] <... munmap resumed>) = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6077] ioctl(4, LOOP_SET_FD, 3 [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6078] <... munmap resumed>) = 0 [pid 6077] <... ioctl resumed>) = 0 [pid 6077] close(3) = 0 [pid 6077] close(4) = 0 [pid 6077] mkdir("./file0", 0777) = 0 [ 240.450472][ T6077] loop4: detected capacity change from 0 to 32768 [pid 6077] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6078] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6078] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6078] close(3) = 0 [pid 6078] close(4) = 0 [pid 6078] mkdir("./file0", 0777) = 0 [pid 6078] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6077] <... mount resumed>) = 0 [pid 6077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6077] chdir("./file0") = 0 [pid 6077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 240.518848][ T6078] loop2: detected capacity change from 0 to 32768 [ 240.531897][ T6077] [ 240.531897][ T6077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.531897][ T6077] [ 240.573285][ T6078] [ 240.573285][ T6078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.573285][ T6078] [ 240.573799][ T6077] [ 240.573799][ T6077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.573799][ T6077] [pid 6077] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6078] <... mount resumed>) = 0 [pid 6078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6078] chdir("./file0") = 0 [pid 6078] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 240.636332][ T6078] [ 240.636332][ T6078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.636332][ T6078] [ 240.670080][ T6078] [ 240.670080][ T6078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.670080][ T6078] [ 240.673148][ T6077] [pid 6078] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6078] exit_group(0) = ? [ 240.673148][ T6077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.673148][ T6077] [pid 6081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6078] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6078, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6077] <... lsetxattr resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 6077] exit_group(0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6077] <... exit_group resumed>) = ? [pid 6077] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./36/binderfs") = 0 [pid 5851] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 240.721317][ T113] [ 240.721317][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.721317][ T113] [ 240.746834][ T112] [ 240.746834][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.746834][ T112] [pid 5849] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./35/binderfs") = 0 [pid 5849] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6082 ./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x555584a2d760, 24) = 0 [pid 6082] chdir("./36") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6082] write(1, "executing program\n", 18) = 18 [pid 6082] memfd_create("syzkaller", 0) = 3 [pid 6082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 240.775496][ T5851] [ 240.775496][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.775496][ T5851] [ 240.788209][ T5851] [ 240.788209][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.788209][ T5851] [ 240.804363][ T5849] [ 240.804363][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.804363][ T5849] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./36/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./36") = 0 [pid 5851] mkdir("./37", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 240.840072][ T5849] [ 240.840072][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.840072][ T5849] [pid 5851] close(3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 6080] <... write resumed>) = 16777216 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./35/file0" [pid 6080] munmap(0x7feda9000000, 138412032 [pid 6079] <... write resumed>) = 16777216 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6079] munmap(0x7feda9000000, 138412032 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./35") = 0 [pid 5849] mkdir("./36", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 6080] <... munmap resumed>) = 0 [pid 5849] close(3 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6079] <... munmap resumed>) = 0 [pid 6080] <... openat resumed>) = 4 [pid 6079] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6080] close(3 [pid 6079] <... openat resumed>) = 4 [pid 6080] <... close resumed>) = 0 [pid 6079] ioctl(4, LOOP_SET_FD, 3 [pid 6080] close(4 [pid 6079] <... ioctl resumed>) = 0 [pid 6080] <... close resumed>) = 0 [pid 6079] close(3 [pid 6080] mkdir("./file0", 0777 [pid 6079] <... close resumed>) = 0 [pid 6080] <... mkdir resumed>) = 0 [pid 6079] close(4) = 0 [ 241.040247][ T6080] loop0: detected capacity change from 0 to 32768 [ 241.051091][ T6079] loop3: detected capacity change from 0 to 32768 [pid 6079] mkdir("./file0", 0777 [pid 6080] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6079] <... mkdir resumed>) = 0 [pid 6079] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6080] <... mount resumed>) = 0 [pid 6080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6080] chdir("./file0") = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 241.104356][ T6080] [ 241.104356][ T6080] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.104356][ T6080] [ 241.120640][ T6079] [ 241.120640][ T6079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.120640][ T6079] [pid 6080] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6079] <... mount resumed>) = 0 [pid 6079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6079] chdir("./file0" [pid 6082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6079] <... chdir resumed>) = 0 [pid 6079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 241.153409][ T6080] [ 241.153409][ T6080] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.153409][ T6080] [ 241.190038][ T6080] [ 241.190038][ T6080] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.190038][ T6080] [ 241.201929][ T6079] [pid 6079] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6083 attached , child_tidptr=0x555584a2d750) = 6083 [pid 6083] set_robust_list(0x555584a2d760, 24) = 0 [ 241.201929][ T6079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.201929][ T6079] [ 241.234157][ T6079] [ 241.234157][ T6079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.234157][ T6079] [ 241.247150][ T113] [pid 6083] chdir("./37" [pid 6080] <... lsetxattr resumed>) = 0 [pid 6080] exit_group(0) = ? [pid 6080] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6080, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./36/binderfs", [pid 6083] <... chdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6081] <... write resumed>) = 16777216 [pid 6079] <... lsetxattr resumed>) = 0 [pid 6083] <... prctl resumed>) = 0 [pid 6081] munmap(0x7feda9000000, 138412032 [pid 5847] unlink("./36/binderfs" [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6079] exit_group(0 [pid 5847] <... unlink resumed>) = 0 [pid 6079] <... exit_group resumed>) = ? [pid 5847] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6083] <... openat resumed>) = 3 [pid 6083] write(3, "1000", 4 [pid 6079] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 6083] <... write resumed>) = 4 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6083] close(3 [pid 5850] <... restart_syscall resumed>) = 0 [ 241.247150][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.247150][ T113] [ 241.271607][ T113] [ 241.271607][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.271607][ T113] [pid 6083] <... close resumed>) = 0 [pid 5850] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6081] <... munmap resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6083] write(1, "executing program\n", 18 [pid 5850] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6081] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6083] <... write resumed>) = 18 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 6083] memfd_create("syzkaller", 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6083] <... memfd_create resumed>) = 3 [pid 5850] getdents64(3, [pid 6081] <... openat resumed>) = 4 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6083] <... mmap resumed>) = 0x7feda9000000 [pid 6081] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] unlink("./35/binderfs" [pid 6081] <... ioctl resumed>) = 0 [pid 6081] close(3) = 0 [ 241.305376][ T5847] [ 241.305376][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.305376][ T5847] [ 241.324358][ T5847] [ 241.324358][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.324358][ T5847] [ 241.342151][ T6081] loop1: detected capacity change from 0 to 32768 [pid 6081] close(4) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... umount2 resumed>) = 0 [pid 5850] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6081] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 6084 attached [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6084 [pid 6081] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6084] set_robust_list(0x555584a2d760, 24) = 0 [pid 6084] chdir("./36") = 0 [pid 6084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6084] setpgid(0, 0) = 0 [pid 6084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6084] write(3, "1000", 4) = 4 [pid 6084] close(3) = 0 [pid 5847] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] write(1, "executing program\n", 18) = 18 [pid 5847] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] memfd_create("syzkaller", 0) = 3 [pid 5847] <... openat resumed>) = 4 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [ 241.363853][ T5850] [ 241.363853][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.363853][ T5850] [pid 5847] rmdir("./36/file0") = 0 [pid 6081] <... mount resumed>) = 0 [pid 5847] getdents64(3, [pid 6081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6081] <... openat resumed>) = 3 [pid 6081] chdir("./file0") = 0 [pid 6081] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] close(3 [pid 6081] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./36") = 0 [pid 5847] mkdir("./37", 0777) = 0 [ 241.405195][ T6081] [ 241.405195][ T6081] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.405195][ T6081] [ 241.416739][ T5850] [ 241.416739][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.416739][ T5850] [ 241.432550][ T6081] [ 241.432550][ T6081] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.432550][ T6081] [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6082] <... write resumed>) = 16777216 [pid 5847] <... openat resumed>) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [ 241.469234][ T6081] [ 241.469234][ T6081] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.469234][ T6081] [pid 6082] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = 0 [pid 6081] <... lsetxattr resumed>) = 0 [pid 6081] exit_group(0) = ? [pid 6081] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6081, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 6082] <... munmap resumed>) = 0 [pid 5850] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... restart_syscall resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6082] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6082] <... openat resumed>) = 4 [pid 6082] ioctl(4, LOOP_SET_FD, 3 [pid 5850] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 4 [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5848] getdents64(3, [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] getdents64(4, [pid 6082] <... ioctl resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... close resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5850] rmdir("./35/file0" [pid 6082] close(3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6082] <... close resumed>) = 0 [pid 6082] close(4) = 0 [pid 6082] mkdir("./file0", 0777 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] unlink("./37/binderfs" [pid 6082] <... mkdir resumed>) = 0 [pid 6082] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] getdents64(3, [pid 5848] <... unlink resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] close(3) = 0 [ 241.515682][ T112] [ 241.515682][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.515682][ T112] [ 241.540889][ T6082] loop5: detected capacity change from 0 to 32768 [pid 5850] rmdir("./35") = 0 [pid 5850] mkdir("./36", 0777) = 0 [pid 6082] <... mount resumed>) = 0 [pid 6082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6082] chdir("./file0") = 0 [pid 6082] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6082] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 241.585955][ T6082] [ 241.585955][ T6082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.585955][ T6082] [ 241.590035][ T5848] [ 241.590035][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.590035][ T5848] [ 241.616974][ T6082] [ 241.616974][ T6082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.616974][ T6082] [ 241.629181][ T5848] [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... ioctl resumed>) = 0 [ 241.629181][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.629181][ T5848] [ 241.645405][ T6082] [ 241.645405][ T6082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.645405][ T6082] [pid 5850] close(3 [pid 6082] <... lsetxattr resumed>) = 0 [pid 6082] exit_group(0) = ? [pid 6082] +++ exited with 0 +++ [pid 5848] <... umount2 resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5848] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... restart_syscall resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... openat resumed>) = 3 [ 241.690926][ T113] [ 241.690926][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.690926][ T113] [pid 5852] newfstatat(3, "", [pid 5848] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 5848] <... openat resumed>) = 4 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(4, [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 5852] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] close(4 [pid 5852] unlink("./36/binderfs" [pid 5848] <... close resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5848] rmdir("./37/file0") = 0 [pid 5852] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./37") = 0 [pid 5847] <... close resumed>) = 0 [pid 5848] mkdir("./38", 0777 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6085 [pid 5848] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6085 attached [pid 6085] set_robust_list(0x555584a2d760, 24) = 0 [pid 6085] chdir("./37") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 6085] <... prctl resumed>) = 0 [pid 5848] close(3 [pid 6085] setpgid(0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 241.780479][ T5852] [ 241.780479][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.780479][ T5852] [ 241.814497][ T5852] [ 241.814497][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.814497][ T5852] executing program [pid 5852] newfstatat(AT_FDCWD, "./36/file0", [pid 6085] <... setpgid resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6085] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./36/file0") = 0 [pid 6085] write(3, "1000", 4 [pid 5852] getdents64(3, [pid 6085] <... write resumed>) = 4 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6085] close(3 [pid 5852] close(3 [pid 6085] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs" [pid 5852] rmdir("./36" [pid 6085] <... symlink resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 6085] write(1, "executing program\n", 18 [pid 5852] mkdir("./37", 0777 [pid 6085] <... write resumed>) = 18 [pid 5852] <... mkdir resumed>) = 0 [pid 6085] memfd_create("syzkaller", 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6085] <... memfd_create resumed>) = 3 [pid 5852] <... openat resumed>) = 3 [pid 6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6085] <... mmap resumed>) = 0x7feda9000000 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6086 ./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x555584a2d760, 24) = 0 [pid 6086] chdir("./36") = 0 [pid 6086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6086] setpgid(0, 0) = 0 [pid 6086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6086] write(3, "1000", 4) = 4 [pid 6086] close(3) = 0 [pid 6086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6086] write(1, "executing program\n", 18 executing program [pid 6083] <... write resumed>) = 16777216 [pid 6086] <... write resumed>) = 18 [pid 6083] munmap(0x7feda9000000, 138412032 [pid 6086] memfd_create("syzkaller", 0 [pid 6083] <... munmap resumed>) = 0 [pid 6086] <... memfd_create resumed>) = 3 [pid 6083] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] <... close resumed>) = 0 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6083] <... openat resumed>) = 4 [pid 6086] <... mmap resumed>) = 0x7feda9000000 [pid 6083] ioctl(4, LOOP_SET_FD, 3 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6087 attached [pid 6087] set_robust_list(0x555584a2d760, 24) = 0 [pid 6087] chdir("./38" [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6087 [pid 6087] <... chdir resumed>) = 0 [pid 6087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 6087] setpgid(0, 0 [pid 6083] <... ioctl resumed>) = 0 [pid 6083] close(3 [pid 6087] <... setpgid resumed>) = 0 [pid 6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6087] write(3, "1000", 4) = 4 [pid 6087] close(3) = 0 [pid 6087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6087] write(1, "executing program\n", 18) = 18 [pid 6087] memfd_create("syzkaller", 0) = 3 [pid 6083] <... close resumed>) = 0 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6083] close(4 [pid 6087] <... mmap resumed>) = 0x7feda9000000 [pid 6083] <... close resumed>) = 0 [pid 6083] mkdir("./file0", 0777) = 0 [ 242.124217][ T6083] loop4: detected capacity change from 0 to 32768 [pid 6083] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6088 ./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x555584a2d760, 24) = 0 [pid 6088] chdir("./37") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6088] write(1, "executing program\n", 18) = 18 [pid 6088] memfd_create("syzkaller", 0 [pid 6083] <... mount resumed>) = 0 [pid 6088] <... memfd_create resumed>) = 3 [pid 6083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6083] <... openat resumed>) = 3 [pid 6083] chdir("./file0") = 0 [pid 6088] <... mmap resumed>) = 0x7feda9000000 [pid 6084] <... write resumed>) = 16777216 [pid 6083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 242.198620][ T6083] [ 242.198620][ T6083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.198620][ T6083] [pid 6083] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 242.260242][ T6083] [ 242.260242][ T6083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.260242][ T6083] [pid 6084] munmap(0x7feda9000000, 138412032) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6083] <... lsetxattr resumed>) = 0 [pid 6084] <... openat resumed>) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3 [ 242.301713][ T6083] [ 242.301713][ T6083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.301713][ T6083] [ 242.340476][ T113] [ 242.340476][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.340476][ T113] [pid 6083] exit_group(0) = ? [pid 6083] +++ exited with 0 +++ [pid 6084] <... ioctl resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 6084] close(3) = 0 [pid 6084] close(4) = 0 [pid 5851] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6084] mkdir("./file0", 0777 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./37/binderfs") = 0 [pid 5851] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 242.362946][ T6084] loop2: detected capacity change from 0 to 32768 [ 242.391176][ T6084] [ 242.391176][ T6084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.391176][ T6084] [ 242.401804][ T5851] [ 242.401804][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.401804][ T5851] [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6084] <... mount resumed>) = 0 [pid 6084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] <... umount2 resumed>) = 0 [pid 6084] <... openat resumed>) = 3 [pid 6084] chdir("./file0") = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 242.445210][ T5851] [ 242.445210][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.445210][ T5851] [pid 6084] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 6084] <... lsetxattr resumed>) = 0 [ 242.495110][ T6084] [ 242.495110][ T6084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.495110][ T6084] [ 242.531449][ T6084] [ 242.531449][ T6084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.531449][ T6084] [pid 5851] rmdir("./37/file0" [pid 6084] exit_group(0) = ? [pid 6084] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6084, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./36/binderfs") = 0 [pid 5849] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./37") = 0 [pid 5851] mkdir("./38", 0777) = 0 [ 242.566869][ T112] [ 242.566869][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.566869][ T112] [ 242.585975][ T5849] [ 242.585975][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.585975][ T5849] [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 6085] <... write resumed>) = 16777216 [pid 5851] close(3 [ 242.620595][ T5849] [ 242.620595][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.620595][ T5849] [pid 6085] munmap(0x7feda9000000, 138412032) = 0 [pid 6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6085] <... openat resumed>) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6085] ioctl(4, LOOP_SET_FD, 3 [pid 5849] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./36/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./36") = 0 [pid 5849] mkdir("./37", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6085] <... ioctl resumed>) = 0 [pid 6085] close(3) = 0 [pid 6085] close(4) = 0 [pid 6085] mkdir("./file0", 0777) = 0 [ 242.716105][ T6085] loop0: detected capacity change from 0 to 32768 [pid 6085] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6085] chdir("./file0") = 0 [pid 6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 242.805222][ T6085] [ 242.805222][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.805222][ T6085] [pid 6085] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6086] <... write resumed>) = 16777216 [pid 6086] munmap(0x7feda9000000, 138412032) = 0 [pid 6085] <... lsetxattr resumed>) = 0 [ 242.870932][ T6085] [ 242.870932][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.870932][ T6085] [ 242.894171][ T6085] [ 242.894171][ T6085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.894171][ T6085] [pid 6085] exit_group(0) = ? [pid 5851] <... close resumed>) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6085] +++ exited with 0 +++ [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6086] <... openat resumed>) = 4 [pid 6086] ioctl(4, LOOP_SET_FD, 3 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./37/binderfs") = 0 [pid 5847] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6089 attached [pid 6086] <... ioctl resumed>) = 0 [pid 6086] close(3 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6089 [pid 6089] set_robust_list(0x555584a2d760, 24 [pid 6086] <... close resumed>) = 0 [pid 6086] close(4) = 0 [pid 6089] <... set_robust_list resumed>) = 0 [pid 6089] chdir("./38") = 0 [pid 6089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6089] setpgid(0, 0) = 0 [pid 6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6089] write(3, "1000", 4) = 4 [pid 6089] close(3) = 0 [pid 6089] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6089] write(1, "executing program\n", 18) = 18 [ 242.938714][ T112] [ 242.938714][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.938714][ T112] [ 242.954342][ T6086] loop3: detected capacity change from 0 to 32768 [ 242.962025][ T5847] [ 242.962025][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.962025][ T5847] [pid 6089] memfd_create("syzkaller", 0 [pid 6086] mkdir("./file0", 0777 [pid 5849] <... close resumed>) = 0 [pid 6089] <... memfd_create resumed>) = 3 [pid 6087] <... write resumed>) = 16777216 [pid 6086] <... mkdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6090 attached [pid 6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6086] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6090] set_robust_list(0x555584a2d760, 24 [pid 6089] <... mmap resumed>) = 0x7feda9000000 [pid 6090] <... set_robust_list resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6090 [pid 6087] munmap(0x7feda9000000, 138412032 [pid 6090] chdir("./37") = 0 [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6086] <... mount resumed>) = 0 [pid 6090] setpgid(0, 0 [pid 6086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6090] <... setpgid resumed>) = 0 [pid 6086] chdir("./file0") = 0 [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6086] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6090] <... openat resumed>) = 3 [pid 6086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] <... umount2 resumed>) = 0 [pid 6090] write(3, "1000", 4 [pid 6086] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 243.000100][ T5847] [ 243.000100][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.000100][ T5847] [ 243.037479][ T6086] [ 243.037479][ T6086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.037479][ T6086] [pid 5847] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] <... write resumed>) = 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] close(3) = 0 [pid 6090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6087] <... munmap resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./37/file0", executing program [pid 6090] write(1, "executing program\n", 18) = 18 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6090] memfd_create("syzkaller", 0 [pid 5847] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6090] <... memfd_create resumed>) = 3 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", [pid 6090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6090] <... mmap resumed>) = 0x7feda9000000 [pid 5847] close(4) = 0 [pid 5847] rmdir("./37/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./37") = 0 [pid 5847] mkdir("./38", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 243.057132][ T6086] [ 243.057132][ T6086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.057132][ T6086] [pid 5847] close(3 [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 6088] <... write resumed>) = 16777216 [ 243.100878][ T6086] [ 243.100878][ T6086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.100878][ T6086] [ 243.123744][ T6087] loop1: detected capacity change from 0 to 32768 [ 243.140997][ T113] [ 243.140997][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.140997][ T113] [pid 6088] munmap(0x7feda9000000, 138412032 [pid 6087] <... ioctl resumed>) = 0 [pid 6086] <... lsetxattr resumed>) = 0 [pid 6087] close(3) = 0 [pid 6087] close(4) = 0 [pid 6087] mkdir("./file0", 0777) = 0 [pid 6086] exit_group(0 [pid 6087] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6086] <... exit_group resumed>) = ? [pid 6086] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6086, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6088] <... munmap resumed>) = 0 [pid 6087] <... mount resumed>) = 0 [pid 5850] getdents64(3, [pid 6088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6088] <... openat resumed>) = 4 [pid 6087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6088] ioctl(4, LOOP_SET_FD, 3 [pid 6087] <... openat resumed>) = 3 [pid 6087] chdir("./file0" [pid 5850] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6087] <... chdir resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./36/binderfs", [pid 6087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6087] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 243.181418][ T6087] [ 243.181418][ T6087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.181418][ T6087] [ 243.218477][ T6088] loop5: detected capacity change from 0 to 32768 [pid 6087] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] unlink("./36/binderfs" [pid 6088] <... ioctl resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] mkdir("./file0", 0777) = 0 [pid 6088] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 243.231341][ T6087] [ 243.231341][ T6087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.231341][ T6087] [ 243.270220][ T6087] [ 243.270220][ T6087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.270220][ T6087] [pid 5850] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6087] <... lsetxattr resumed>) = 0 [pid 6087] exit_group(0) = ? [pid 6087] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6087, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 243.270405][ T5850] [ 243.270405][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.270405][ T5850] [ 243.292341][ T113] [ 243.292341][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.292341][ T113] [ 243.318317][ T6088] [ 243.318317][ T6088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.318317][ T6088] [pid 5848] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./38/binderfs") = 0 [pid 5848] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... mount resumed>) = 0 [pid 6088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6088] chdir("./file0") = 0 [pid 6088] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 243.340223][ T5850] [ 243.340223][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.340223][ T5850] [ 243.371831][ T6088] [ 243.371831][ T6088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.371831][ T6088] [ 243.383821][ T5848] [pid 6088] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5847] <... close resumed>) = 0 [ 243.383821][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.383821][ T5848] [ 243.400335][ T5848] [ 243.400335][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.400335][ T5848] [ 243.405007][ T6088] [ 243.405007][ T6088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.405007][ T6088] [ 243.435756][ T112] [pid 5850] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6088] <... lsetxattr resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6088] exit_group(0 [pid 5850] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6088] <... exit_group resumed>) = ? [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6091 attached [pid 6090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6088] +++ exited with 0 +++ [pid 5850] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] newfstatat(AT_FDCWD, "./38/file0", [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6091 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6088, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6091] set_robust_list(0x555584a2d760, 24 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... openat resumed>) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] newfstatat(4, "", [pid 5852] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6091] <... set_robust_list resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6091] chdir("./38" [pid 5852] newfstatat(AT_FDCWD, "./37/binderfs", [pid 6091] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] unlink("./37/binderfs" [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6091] <... prctl resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 6091] setpgid(0, 0 [pid 5852] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6091] <... setpgid resumed>) = 0 [pid 6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] getdents64(4, [pid 6091] <... openat resumed>) = 3 [pid 5850] close(4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6091] write(3, "1000", 4) = 4 [pid 6091] close(3) = 0 [pid 6091] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6091] write(1, "executing program\n", 18) = 18 [pid 6091] memfd_create("syzkaller", 0 [pid 5848] getdents64(4, [pid 5850] <... close resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4 [pid 5850] rmdir("./36/file0" [pid 5848] <... close resumed>) = 0 [pid 6091] <... memfd_create resumed>) = 3 [pid 5848] rmdir("./38/file0" [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 243.435756][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.435756][ T112] [ 243.477095][ T5852] [ 243.477095][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.477095][ T5852] [pid 5848] getdents64(3, [pid 5850] close(3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] close(3 [pid 5850] rmdir("./36" [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./38" [pid 5850] <... rmdir resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5850] mkdir("./37", 0777 [pid 5848] mkdir("./39", 0777) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5848] <... openat resumed>) = 3 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 243.510957][ T5852] [ 243.510957][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.510957][ T5852] [pid 5848] close(3 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6089] <... write resumed>) = 16777216 [pid 5852] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", [pid 6089] munmap(0x7feda9000000, 138412032 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./37/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6089] <... munmap resumed>) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./37") = 0 [pid 5852] mkdir("./38", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6089] <... openat resumed>) = 4 [pid 6089] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6092 attached ) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6092 executing program [pid 6092] set_robust_list(0x555584a2d760, 24) = 0 [pid 6092] chdir("./37") = 0 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6092] setpgid(0, 0) = 0 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6092] write(3, "1000", 4) = 4 [pid 6092] close(3) = 0 [pid 6092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6092] write(1, "executing program\n", 18) = 18 [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6089] close(3) = 0 [pid 6089] close(4 [pid 6092] memfd_create("syzkaller", 0 [pid 6089] <... close resumed>) = 0 [pid 6092] <... memfd_create resumed>) = 3 [pid 6089] mkdir("./file0", 0777 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6089] <... mkdir resumed>) = 0 [pid 6092] <... mmap resumed>) = 0x7feda9000000 [ 243.783193][ T6089] loop4: detected capacity change from 0 to 32768 [pid 6089] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6089] chdir("./file0") = 0 [pid 6089] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 243.834151][ T6089] [ 243.834151][ T6089] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.834151][ T6089] [ 243.874076][ T6089] [ 243.874076][ T6089] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.874076][ T6089] [pid 6089] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5848] <... close resumed>) = 0 [pid 6089] exit_group(0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6093 attached [pid 6089] <... exit_group resumed>) = ? [pid 6093] set_robust_list(0x555584a2d760, 24 [pid 6089] +++ exited with 0 +++ [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6093 [pid 6093] <... set_robust_list resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6089, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 6093] chdir("./39" [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6093] <... chdir resumed>) = 0 [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6093] setpgid(0, 0 [pid 6090] <... write resumed>) = 16777216 [pid 5852] <... close resumed>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6093] <... setpgid resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6093] <... openat resumed>) = 3 [pid 6090] munmap(0x7feda9000000, 138412032 [pid 5851] <... openat resumed>) = 3 [pid 6093] write(3, "1000", 4 [ 243.911142][ T6089] [ 243.911142][ T6089] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.911142][ T6089] [ 243.938248][ T113] [ 243.938248][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.938248][ T113] [pid 5851] newfstatat(3, "", executing program [pid 6093] <... write resumed>) = 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6093] close(3 [pid 5851] getdents64(3, [pid 6093] <... close resumed>) = 0 [pid 6093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6093] write(1, "executing program\n", 18 [pid 5851] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6093] <... write resumed>) = 18 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6094 attached [pid 6093] memfd_create("syzkaller", 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6094 [pid 5851] newfstatat(AT_FDCWD, "./38/binderfs", [pid 6093] <... memfd_create resumed>) = 3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6094] set_robust_list(0x555584a2d760, 24 [pid 5851] unlink("./38/binderfs" [pid 6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... unlink resumed>) = 0 [pid 6094] <... set_robust_list resumed>) = 0 [pid 5851] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6094] chdir("./38") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6094] write(3, "1000", 4) = 4 [pid 6094] close(3) = 0 [pid 6094] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6094] write(1, "executing program\n", 18) = 18 [pid 6094] memfd_create("syzkaller", 0) = 3 [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6090] <... munmap resumed>) = 0 [pid 6090] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 244.010666][ T5851] [ 244.010666][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.010666][ T5851] [ 244.042765][ T5851] [ 244.042765][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.042765][ T5851] [pid 6090] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] close(3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6090] <... close resumed>) = 0 [pid 6090] close(4 [pid 5851] newfstatat(AT_FDCWD, "./38/file0", [pid 6090] <... close resumed>) = 0 [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6090] mkdir("./file0", 0777 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6090] <... mkdir resumed>) = 0 [pid 5851] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6090] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 244.076749][ T6090] loop2: detected capacity change from 0 to 32768 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./38/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./38") = 0 [pid 5851] mkdir("./39", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6090] <... mount resumed>) = 0 [ 244.146304][ T6090] [ 244.146304][ T6090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.146304][ T6090] [pid 6090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6090] chdir("./file0") = 0 [pid 6090] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 244.220413][ T6090] [ 244.220413][ T6090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.220413][ T6090] [ 244.255767][ T6090] [ 244.255767][ T6090] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.255767][ T6090] [pid 6090] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6090] <... lsetxattr resumed>) = 0 [pid 6090] exit_group(0 [pid 6094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6090] <... exit_group resumed>) = ? [pid 6090] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 244.296938][ T113] [ 244.296938][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.296938][ T113] [pid 5849] unlink("./37/binderfs") = 0 [pid 5849] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6091] <... write resumed>) = 16777216 [pid 5851] <... close resumed>) = 0 [pid 6091] munmap(0x7feda9000000, 138412032 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6095 ./strace-static-x86_64: Process 6095 attached [ 244.377505][ T5849] [ 244.377505][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.377505][ T5849] [pid 6095] set_robust_list(0x555584a2d760, 24) = 0 [pid 6095] chdir("./39") = 0 [pid 6091] <... munmap resumed>) = 0 [pid 6095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6095] <... prctl resumed>) = 0 [pid 6095] setpgid(0, 0) = 0 [pid 6091] <... openat resumed>) = 4 [pid 6095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6091] ioctl(4, LOOP_SET_FD, 3 [pid 6095] <... openat resumed>) = 3 [pid 6095] write(3, "1000", 4) = 4 [pid 6095] close(3) = 0 [pid 6095] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6091] <... ioctl resumed>) = 0 [pid 6095] write(1, "executing program\n", 18 [pid 6091] close(3 [pid 6095] <... write resumed>) = 18 [pid 6091] <... close resumed>) = 0 [pid 6091] close(4 [pid 6095] memfd_create("syzkaller", 0 [pid 6091] <... close resumed>) = 0 [pid 6091] mkdir("./file0", 0777 [pid 6095] <... memfd_create resumed>) = 3 [pid 6091] <... mkdir resumed>) = 0 [pid 6092] <... write resumed>) = 16777216 [pid 6091] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 244.430538][ T5849] [ 244.430538][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.430538][ T5849] [ 244.453950][ T6091] loop0: detected capacity change from 0 to 32768 [pid 5849] close(4) = 0 [pid 5849] rmdir("./37/file0" [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6092] munmap(0x7feda9000000, 138412032 [pid 5849] <... rmdir resumed>) = 0 [pid 6095] <... mmap resumed>) = 0x7feda9000000 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./37") = 0 [pid 5849] mkdir("./38", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6092] <... munmap resumed>) = 0 [pid 6091] <... mount resumed>) = 0 [pid 6091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6092] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6091] <... openat resumed>) = 3 [pid 6091] chdir("./file0") = 0 [pid 6092] <... openat resumed>) = 4 [pid 6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6092] ioctl(4, LOOP_SET_FD, 3 [ 244.540091][ T6091] [ 244.540091][ T6091] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.540091][ T6091] [pid 6091] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6092] <... ioctl resumed>) = 0 [pid 6092] close(3) = 0 [pid 6092] close(4) = 0 [pid 6091] <... lsetxattr resumed>) = 0 [ 244.593287][ T6092] loop3: detected capacity change from 0 to 32768 [ 244.600229][ T6091] [ 244.600229][ T6091] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.600229][ T6091] [ 244.630186][ T6091] [ 244.630186][ T6091] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.630186][ T6091] [pid 6091] exit_group(0) = ? [pid 6092] mkdir("./file0", 0777 [pid 6091] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6091, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 6092] <... mkdir resumed>) = 0 [pid 6092] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./38/binderfs") = 0 [pid 5847] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6092] <... mount resumed>) = 0 [pid 6092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6092] chdir("./file0") = 0 [ 244.671227][ T112] [ 244.671227][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.671227][ T112] [ 244.706256][ T6092] [ 244.706256][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.706256][ T6092] [pid 6092] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 244.747565][ T5847] [ 244.747565][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.747565][ T5847] [ 244.771049][ T6092] [ 244.771049][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.771049][ T6092] [ 244.790253][ T5847] [pid 6092] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6094] <... write resumed>) = 16777216 [pid 6094] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5847] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 244.790253][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.790253][ T5847] [ 244.808473][ T6092] [ 244.808473][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.808473][ T6092] [pid 5847] newfstatat(4, "", [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6092] <... lsetxattr resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6094] <... munmap resumed>) = 0 [pid 6093] <... write resumed>) = 16777216 [pid 6092] exit_group(0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] getdents64(4, [pid 6092] <... exit_group resumed>) = ? [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6096 attached [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6096 [pid 5847] getdents64(4, [pid 6092] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6092, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6096] set_robust_list(0x555584a2d760, 24 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6093] munmap(0x7feda9000000, 138412032 [pid 6096] <... set_robust_list resumed>) = 0 [pid 6096] chdir("./38" [pid 5847] close(4 [pid 6096] <... chdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./38/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./38") = 0 [pid 5847] mkdir("./39", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... restart_syscall resumed>) = 0 [pid 6096] <... prctl resumed>) = 0 [pid 6096] setpgid(0, 0) = 0 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6096] <... openat resumed>) = 3 [pid 6093] <... munmap resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6096] write(3, "1000", 4) = 4 [pid 5850] <... openat resumed>) = 3 [pid 6096] close(3 [pid 5850] newfstatat(3, "", [pid 6096] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6096] symlink("/dev/binderfs", "./binderfs" [pid 5850] getdents64(3, executing program [pid 6096] <... symlink resumed>) = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6096] write(1, "executing program\n", 18 [pid 5850] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6096] <... write resumed>) = 18 [ 244.842481][ T113] [ 244.842481][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.842481][ T113] [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6096] memfd_create("syzkaller", 0 [pid 6094] <... openat resumed>) = 4 [pid 5850] newfstatat(AT_FDCWD, "./37/binderfs", [pid 6094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./37/binderfs") = 0 [pid 5850] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6093] <... openat resumed>) = 4 [pid 6096] <... memfd_create resumed>) = 3 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6093] ioctl(4, LOOP_SET_FD, 3 [pid 6096] <... mmap resumed>) = 0x7feda9000000 [pid 6094] close(3) = 0 [pid 6094] close(4) = 0 [pid 6094] mkdir("./file0", 0777) = 0 [ 244.912351][ T6094] loop5: detected capacity change from 0 to 32768 [ 244.925077][ T5850] [ 244.925077][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.925077][ T5850] [ 244.938479][ T5850] [ 244.938479][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.938479][ T5850] [ 244.940445][ T6093] loop1: detected capacity change from 0 to 32768 [pid 6094] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6093] <... ioctl resumed>) = 0 [pid 6093] close(3) = 0 [pid 6093] close(4) = 0 [pid 6093] mkdir("./file0", 0777) = 0 [pid 6093] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6094] <... mount resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 6094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6094] chdir("./file0") = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6094] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [ 244.971313][ T6094] [ 244.971313][ T6094] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 244.971313][ T6094] [ 245.010932][ T6094] [ 245.010932][ T6094] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.010932][ T6094] [pid 5850] rmdir("./37/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./37") = 0 [pid 5850] mkdir("./38", 0777 [pid 6094] <... lsetxattr resumed>) = 0 [pid 6093] <... mount resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6094] exit_group(0 [pid 5850] <... openat resumed>) = 3 [pid 6094] <... exit_group resumed>) = ? [pid 6093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6093] <... openat resumed>) = 3 [pid 6094] +++ exited with 0 +++ [pid 6093] chdir("./file0" [pid 5850] <... ioctl resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6094, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5850] close(3 [pid 5852] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 6093] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 245.052709][ T6093] [ 245.052709][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.052709][ T6093] [ 245.064146][ T6094] [ 245.064146][ T6094] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.064146][ T6094] [ 245.085706][ T112] [ 245.085706][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.085706][ T112] [pid 5852] getdents64(3, [pid 6093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6093] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./38/binderfs") = 0 [ 245.114406][ T6093] [ 245.114406][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.114406][ T6093] [ 245.148494][ T6093] [ 245.148494][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.148494][ T6093] [ 245.160394][ T5852] [pid 5852] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6093] <... lsetxattr resumed>) = 0 [pid 6093] exit_group(0) = ? [pid 6093] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [ 245.160394][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.160394][ T5852] [ 245.190760][ T113] [ 245.190760][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.190760][ T113] [ 245.208664][ T5852] [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... close resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6097 attached [pid 5848] unlink("./39/binderfs" [pid 6097] set_robust_list(0x555584a2d760, 24 [pid 5848] <... unlink resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6097 [pid 6097] <... set_robust_list resumed>) = 0 [pid 5848] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] chdir("./39") = 0 [ 245.208664][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.208664][ T5852] [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6095] <... write resumed>) = 16777216 [pid 6097] write(3, "1000", 4 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... umount2 resumed>) = 0 [pid 6097] <... write resumed>) = 4 executing program [pid 6095] munmap(0x7feda9000000, 138412032 [pid 5852] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] close(3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6097] <... close resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./38/file0", [pid 6097] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6097] <... symlink resumed>) = 0 [pid 5852] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] write(1, "executing program\n", 18 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6097] <... write resumed>) = 18 [pid 5852] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", [pid 6097] memfd_create("syzkaller", 0 [pid 5848] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] <... memfd_create resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6097] <... mmap resumed>) = 0x7feda9000000 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] newfstatat(AT_FDCWD, "./39/file0", [pid 5852] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6095] <... munmap resumed>) = 0 [pid 5848] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./38/file0" [ 245.254973][ T5848] [ 245.254973][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.254973][ T5848] [ 245.270236][ T5848] [ 245.270236][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.270236][ T5848] [pid 5848] getdents64(4, [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(4, [pid 5852] close(3) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] rmdir("./38" [pid 5848] close(4) = 0 [pid 5848] rmdir("./39/file0" [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5852] mkdir("./39", 0777 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./39" [pid 5852] <... mkdir resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] mkdir("./40", 0777 [pid 6095] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] <... mkdir resumed>) = 0 [pid 6095] <... openat resumed>) = 4 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6095] ioctl(4, LOOP_SET_FD, 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5852] <... openat resumed>) = 3 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6095] <... ioctl resumed>) = 0 [pid 6095] close(3) = 0 [pid 6095] close(4) = 0 [pid 6095] mkdir("./file0", 0777) = 0 [pid 6095] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6098 attached , child_tidptr=0x555584a2d750) = 6098 [pid 6098] set_robust_list(0x555584a2d760, 24) = 0 [pid 6098] chdir("./38") = 0 [ 245.348093][ T6095] loop4: detected capacity change from 0 to 32768 [ 245.384455][ T6095] [ 245.384455][ T6095] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.384455][ T6095] [pid 6098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6098] setpgid(0, 0) = 0 [pid 6098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6095] <... mount resumed>) = 0 [pid 6095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6098] write(3, "1000", 4 [pid 6095] <... openat resumed>) = 3 [pid 6098] <... write resumed>) = 4 [pid 6095] chdir("./file0" [pid 6098] close(3 [pid 6095] <... chdir resumed>) = 0 [pid 6098] <... close resumed>) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6098] symlink("/dev/binderfs", "./binderfs" [pid 6095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6098] <... symlink resumed>) = 0 [pid 6095] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0executing program [pid 6098] write(1, "executing program\n", 18) = 18 [pid 6098] memfd_create("syzkaller", 0) = 3 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 245.446963][ T6095] [ 245.446963][ T6095] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.446963][ T6095] [pid 6095] <... lsetxattr resumed>) = 0 [pid 6095] exit_group(0) = ? [pid 6095] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6095, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [ 245.506086][ T6095] [ 245.506086][ T6095] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.506086][ T6095] [ 245.540898][ T113] [ 245.540898][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.540898][ T113] [pid 5851] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./39/binderfs") = 0 [pid 5851] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6100 attached ./strace-static-x86_64: Process 6099 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6100 [pid 6100] set_robust_list(0x555584a2d760, 24 [pid 6099] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6099 [pid 6100] <... set_robust_list resumed>) = 0 [pid 6099] <... set_robust_list resumed>) = 0 [pid 6100] chdir("./39" [pid 6099] chdir("./40" [pid 6100] <... chdir resumed>) = 0 [pid 6099] <... chdir resumed>) = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6100] <... prctl resumed>) = 0 [pid 6099] <... prctl resumed>) = 0 [pid 6100] setpgid(0, 0 [pid 6099] setpgid(0, 0 [pid 6100] <... setpgid resumed>) = 0 [pid 6099] <... setpgid resumed>) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6100] <... openat resumed>) = 3 [pid 6099] <... openat resumed>) = 3 [pid 6100] write(3, "1000", 4 [pid 6099] write(3, "1000", 4 [pid 6100] <... write resumed>) = 4 [pid 6099] <... write resumed>) = 4 [pid 6100] close(3 [pid 6099] close(3 [pid 6100] <... close resumed>) = 0 [pid 6099] <... close resumed>) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs" [pid 6099] symlink("/dev/binderfs", "./binderfs" [pid 6100] <... symlink resumed>) = 0 [pid 6099] <... symlink resumed>) = 0 executing program [pid 6100] write(1, "executing program\n", 18 [pid 6099] write(1, "executing program\n", 18executing program [pid 6100] <... write resumed>) = 18 [pid 6099] <... write resumed>) = 18 [pid 6100] memfd_create("syzkaller", 0 [pid 6099] memfd_create("syzkaller", 0 [pid 6100] <... memfd_create resumed>) = 3 [pid 6099] <... memfd_create resumed>) = 3 [ 245.641289][ T5851] [ 245.641289][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.641289][ T5851] [ 245.673262][ T5851] [ 245.673262][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.673262][ T5851] [pid 6100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6100] <... mmap resumed>) = 0x7feda9000000 [pid 6099] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./39/file0") = 0 [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./39") = 0 [pid 5851] mkdir("./40", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6096] <... write resumed>) = 16777216 [pid 6096] munmap(0x7feda9000000, 138412032) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6096] mkdir("./file0", 0777) = 0 [ 245.863212][ T6096] loop2: detected capacity change from 0 to 32768 [pid 6096] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6096] chdir("./file0") = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 245.913175][ T6096] [ 245.913175][ T6096] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.913175][ T6096] [ 245.945655][ T6096] [ 245.945655][ T6096] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.945655][ T6096] [pid 6096] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6096] exit_group(0) = ? [pid 6096] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6096, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./38/binderfs", [pid 6100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./38/binderfs") = 0 [pid 5849] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 245.990075][ T6096] [ 245.990075][ T6096] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.990075][ T6096] [ 246.026163][ T113] [ 246.026163][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.026163][ T113] [pid 6099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6101 ./strace-static-x86_64: Process 6101 attached [pid 6101] set_robust_list(0x555584a2d760, 24) = 0 [pid 6101] chdir("./40") = 0 [pid 6101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6101] setpgid(0, 0) = 0 [pid 6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6101] write(3, "1000", 4) = 4 [pid 6101] close(3) = 0 [pid 6101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6101] write(1, "executing program\n", 18executing program ) = 18 [pid 6101] memfd_create("syzkaller", 0) = 3 [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6097] <... write resumed>) = 16777216 [pid 5849] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [ 246.062832][ T5849] [ 246.062832][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.062832][ T5849] [ 246.088128][ T5849] [ 246.088128][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.088128][ T5849] [pid 5849] rmdir("./38/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./38") = 0 [pid 5849] mkdir("./39", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6102 attached , child_tidptr=0x555584a2d750) = 6102 [pid 6102] set_robust_list(0x555584a2d760, 24) = 0 [pid 6102] chdir("./39") = 0 [pid 6102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6097] munmap(0x7feda9000000, 138412032 [pid 6102] <... prctl resumed>) = 0 [pid 6102] setpgid(0, 0) = 0 [pid 6102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6102] write(3, "1000", 4) = 4 [pid 6102] close(3) = 0 executing program [pid 6102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6102] write(1, "executing program\n", 18) = 18 [pid 6102] memfd_create("syzkaller", 0) = 3 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6097] <... munmap resumed>) = 0 [pid 6097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6097] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6097] close(3) = 0 [pid 6097] close(4) = 0 [pid 6097] mkdir("./file0", 0777) = 0 [pid 6097] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6098] <... write resumed>) = 16777216 [ 246.251471][ T6097] loop0: detected capacity change from 0 to 32768 [pid 6098] munmap(0x7feda9000000, 138412032) = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6098] ioctl(4, LOOP_SET_FD, 3 [pid 6097] <... mount resumed>) = 0 [pid 6097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6098] <... ioctl resumed>) = 0 [pid 6097] <... openat resumed>) = 3 [ 246.355229][ T6097] [ 246.355229][ T6097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.355229][ T6097] [ 246.392083][ T6098] loop3: detected capacity change from 0 to 32768 [pid 6097] chdir("./file0" [pid 6098] close(3 [pid 6097] <... chdir resumed>) = 0 [pid 6097] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6098] <... close resumed>) = 0 [pid 6098] close(4 [pid 6097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6098] <... close resumed>) = 0 [pid 6098] mkdir("./file0", 0777 [pid 6097] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6098] <... mkdir resumed>) = 0 [ 246.443695][ T6097] [ 246.443695][ T6097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.443695][ T6097] [ 246.465429][ T6098] [ 246.465429][ T6098] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.465429][ T6098] [ 246.487455][ T6097] [pid 6098] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6098] <... mount resumed>) = 0 [pid 6098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6098] chdir("./file0") = 0 [pid 6098] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 246.487455][ T6097] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.487455][ T6097] [pid 6098] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6097] <... lsetxattr resumed>) = 0 [ 246.518711][ T6098] [ 246.518711][ T6098] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.518711][ T6098] [ 246.549732][ T112] [ 246.549732][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.549732][ T112] [ 246.560162][ T6098] [ 246.560162][ T6098] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6097] exit_group(0) = ? [pid 6097] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=17 /* 0.17 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 246.560162][ T6098] [pid 5847] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./39/binderfs", [pid 6098] <... lsetxattr resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6098] exit_group(0) = ? [pid 6098] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6098, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5847] unlink("./39/binderfs") = 0 [pid 5847] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", [pid 6100] <... write resumed>) = 16777216 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6100] munmap(0x7feda9000000, 138412032 [pid 6099] <... write resumed>) = 16777216 [pid 5850] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 246.608195][ T113] [ 246.608195][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.608195][ T113] [ 246.631518][ T5847] [ 246.631518][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.631518][ T5847] [ 246.653834][ T5850] [pid 5850] unlink("./38/binderfs" [pid 6099] munmap(0x7feda9000000, 138412032 [pid 5850] <... unlink resumed>) = 0 [pid 5850] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6099] <... munmap resumed>) = 0 [pid 6100] <... munmap resumed>) = 0 [pid 6099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] <... umount2 resumed>) = 0 [pid 6099] <... openat resumed>) = 4 [ 246.653834][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.653834][ T5850] [ 246.670029][ T5847] [ 246.670029][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.670029][ T5847] [ 246.680232][ T5850] [ 246.680232][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.680232][ T5850] [pid 6099] ioctl(4, LOOP_SET_FD, 3 [pid 6100] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6100] <... openat resumed>) = 4 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6100] ioctl(4, LOOP_SET_FD, 3 [pid 5850] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 6099] <... ioctl resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6099] close(3 [pid 5847] getdents64(4, [pid 6099] <... close resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6099] close(4 [pid 5847] getdents64(4, [pid 6099] <... close resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6099] mkdir("./file0", 0777 [pid 5847] close(4) = 0 [pid 5847] rmdir("./39/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6099] <... mkdir resumed>) = 0 [pid 5850] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] close(3 [pid 6099] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./39") = 0 [pid 5847] mkdir("./40", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5850] newfstatat(4, "", [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./38/file0" [pid 6100] <... ioctl resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, [pid 6100] close(3 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6100] <... close resumed>) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./38" [pid 6100] close(4) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6100] mkdir("./file0", 0777 [pid 5850] mkdir("./39", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6100] <... mkdir resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6100] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... ioctl resumed>) = 0 [ 246.712920][ T6099] loop1: detected capacity change from 0 to 32768 [ 246.721375][ T6100] loop5: detected capacity change from 0 to 32768 [ 246.749399][ T6099] [ 246.749399][ T6099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.749399][ T6099] [pid 5850] close(3 [pid 6099] <... mount resumed>) = 0 [pid 6099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6099] chdir("./file0") = 0 [pid 6099] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 246.812493][ T6100] [ 246.812493][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.812493][ T6100] [ 246.819202][ T6099] [ 246.819202][ T6099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.819202][ T6099] [pid 6099] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6100] <... mount resumed>) = 0 [pid 6100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6100] chdir("./file0") = 0 [pid 6100] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 246.880649][ T6099] [ 246.880649][ T6099] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.880649][ T6099] [ 246.895791][ T6100] [ 246.895791][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.895791][ T6100] [pid 6100] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6099] <... lsetxattr resumed>) = 0 [pid 6099] exit_group(0) = ? [pid 6099] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6099, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=35 /* 0.35 s */} --- [ 246.929138][ T6100] [ 246.929138][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.929138][ T6100] [ 246.940422][ T112] [ 246.940422][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.940422][ T112] [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6100] <... lsetxattr resumed>) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", [pid 6100] exit_group(0) = ? [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6100] +++ exited with 0 +++ [pid 5848] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6100, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./40/binderfs") = 0 [pid 5848] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./39/binderfs") = 0 [ 246.972368][ T113] [ 246.972368][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.972368][ T113] [ 246.995630][ T5848] [ 246.995630][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.995630][ T5848] [ 247.020428][ T5852] [pid 5852] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6101] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 6101] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6103 [pid 5852] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", ./strace-static-x86_64: Process 6103 attached [pid 6101] <... munmap resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 247.020428][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.020428][ T5852] [ 247.040247][ T5852] [ 247.040247][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.040247][ T5852] [ 247.060162][ T5848] [ 247.060162][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.060162][ T5848] [pid 6101] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6103] set_robust_list(0x555584a2d760, 24 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] newfstatat(AT_FDCWD, "./40/file0", [pid 6103] <... set_robust_list resumed>) = 0 [pid 5852] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6103] chdir("./40" [pid 6101] <... openat resumed>) = 4 [pid 5852] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6103] <... chdir resumed>) = 0 [pid 6101] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... close resumed>) = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6102] <... write resumed>) = 16777216 [pid 5852] rmdir("./39/file0" [pid 5848] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6101] <... ioctl resumed>) = 0 [pid 6103] <... prctl resumed>) = 0 [pid 6102] munmap(0x7feda9000000, 138412032 [pid 5852] <... rmdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 6103] setpgid(0, 0 [pid 6101] close(3 [pid 5852] getdents64(3, [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] newfstatat(4, "", [pid 6103] <... setpgid resumed>) = 0 [pid 6101] <... close resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6104 attached [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6101] close(4 [pid 5852] close(3 [pid 5848] getdents64(4, [pid 6104] set_robust_list(0x555584a2d760, 24 [pid 6103] <... openat resumed>) = 3 [pid 6102] <... munmap resumed>) = 0 [pid 6101] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6104] <... set_robust_list resumed>) = 0 [pid 6103] write(3, "1000", 4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6103] <... write resumed>) = 4 [pid 6104] chdir("./39" [pid 6101] mkdir("./file0", 0777 [pid 5848] getdents64(4, [pid 5852] rmdir("./39" [pid 6103] close(3 [pid 6102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6103] <... close resumed>) = 0 [pid 6102] <... openat resumed>) = 4 [pid 6101] <... mkdir resumed>) = 0 [pid 6103] symlink("/dev/binderfs", "./binderfs" [ 247.112389][ T6101] loop4: detected capacity change from 0 to 32768 [pid 6102] ioctl(4, LOOP_SET_FD, 3executing program [pid 6104] <... chdir resumed>) = 0 [pid 6103] <... symlink resumed>) = 0 [pid 6101] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] write(1, "executing program\n", 18 [pid 5852] mkdir("./40", 0777 [pid 5848] close(4 [pid 6103] <... write resumed>) = 18 [pid 6103] memfd_create("syzkaller", 0) = 3 [pid 6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6102] <... ioctl resumed>) = 0 [pid 6102] close(3 [pid 5848] <... close resumed>) = 0 [pid 6104] setpgid(0, 0 [pid 5848] rmdir("./40/file0" [pid 6102] <... close resumed>) = 0 [pid 6102] close(4 [pid 6104] <... setpgid resumed>) = 0 [pid 6102] <... close resumed>) = 0 [pid 6101] <... mount resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6104 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 6104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 6102] mkdir("./file0", 0777) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 6104] <... openat resumed>) = 3 [pid 6102] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5848] rmdir("./40" [pid 6104] write(3, "1000", 4 [pid 6101] <... openat resumed>) = 3 [ 247.154019][ T6102] loop2: detected capacity change from 0 to 32768 [ 247.154868][ T6101] [ 247.154868][ T6101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.154868][ T6101] [ 247.187875][ T6102] [ 247.187875][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.187875][ T6102] [pid 6104] <... write resumed>) = 4 [pid 5852] <... ioctl resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5852] close(3 [pid 5848] mkdir("./41", 0777 [pid 6104] close(3 [pid 6101] chdir("./file0" [pid 5848] <... mkdir resumed>) = 0 [pid 6104] <... close resumed>) = 0 [pid 6101] <... chdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6104] symlink("/dev/binderfs", "./binderfs" [pid 6101] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] <... openat resumed>) = 3 [pid 6104] <... symlink resumed>) = 0 [pid 6101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6104] write(1, "executing program\n", 18 [pid 6101] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0executing program [pid 6104] <... write resumed>) = 18 [pid 5848] <... ioctl resumed>) = 0 [pid 6104] memfd_create("syzkaller", 0 [pid 6102] <... mount resumed>) = 0 [pid 5848] close(3 [pid 6102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6102] chdir("./file0" [pid 6104] <... memfd_create resumed>) = 3 [pid 6102] <... chdir resumed>) = 0 [ 247.215738][ T6101] [ 247.215738][ T6101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.215738][ T6101] [pid 6104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6104] <... mmap resumed>) = 0x7feda9000000 [pid 6102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 247.259460][ T6102] [ 247.259460][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.259460][ T6102] [ 247.268524][ T6101] [ 247.268524][ T6101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.268524][ T6101] [pid 6102] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6101] <... lsetxattr resumed>) = 0 [pid 6101] exit_group(0) = ? [pid 6101] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./40/binderfs") = 0 [ 247.322276][ T112] [ 247.322276][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.322276][ T112] [ 247.333772][ T6102] [ 247.333772][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.333772][ T6102] [pid 5851] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6102] <... lsetxattr resumed>) = 0 [pid 6102] exit_group(0) = ? [pid 6102] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6102, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./39/binderfs") = 0 [ 247.380449][ T112] [ 247.380449][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.380449][ T112] [ 247.394350][ T5851] [ 247.394350][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.394350][ T5851] [ 247.415997][ T5851] [ 247.415997][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.415997][ T5851] [pid 5849] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./40/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./40") = 0 [pid 5851] mkdir("./41", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 247.440886][ T5849] [ 247.440886][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.440886][ T5849] [pid 5851] close(3 [pid 6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6105 attached [ 247.498259][ T5849] [ 247.498259][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.498259][ T5849] , child_tidptr=0x555584a2d750) = 6105 [pid 6105] set_robust_list(0x555584a2d760, 24) = 0 [pid 6105] chdir("./41") = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6105] setpgid(0, 0) = 0 [pid 6104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6105] <... openat resumed>) = 3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6105] write(3, "1000", 4) = 4 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6106 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6105] close(3 [pid 5849] newfstatat(AT_FDCWD, "./39/file0", ./strace-static-x86_64: Process 6106 attached [pid 6105] <... close resumed>) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs" [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6106] set_robust_list(0x555584a2d760, 24 [pid 5849] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6106] <... set_robust_list resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] chdir("./40" [pid 6105] <... symlink resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6106] <... chdir resumed>) = 0 executing program [pid 6105] write(1, "executing program\n", 18 [pid 5849] <... openat resumed>) = 4 [pid 6105] <... write resumed>) = 18 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6105] memfd_create("syzkaller", 0 [pid 5849] rmdir("./39/file0") = 0 [pid 6106] <... prctl resumed>) = 0 [pid 5849] getdents64(3, [pid 6105] <... memfd_create resumed>) = 3 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6106] setpgid(0, 0 [pid 6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6106] <... setpgid resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 6105] <... mmap resumed>) = 0x7feda9000000 [pid 5849] rmdir("./39" [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./40", 0777 [pid 6106] <... openat resumed>) = 3 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6106] write(3, "1000", 4 [pid 5849] <... openat resumed>) = 3 [pid 6106] <... write resumed>) = 4 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6106] close(3 [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 6106] <... close resumed>) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6106] write(1, "executing program\n", 18executing program ) = 18 [pid 6106] memfd_create("syzkaller", 0) = 3 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6107 attached , child_tidptr=0x555584a2d750) = 6107 [pid 6107] set_robust_list(0x555584a2d760, 24) = 0 [pid 6107] chdir("./41") = 0 [pid 6107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 6107] <... prctl resumed>) = 0 [pid 6103] <... write resumed>) = 16777216 [pid 6107] setpgid(0, 0 [pid 6103] munmap(0x7feda9000000, 138412032 [pid 6107] <... setpgid resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6108 [pid 6107] write(3, "1000", 4./strace-static-x86_64: Process 6108 attached [pid 6108] set_robust_list(0x555584a2d760, 24) = 0 [pid 6108] chdir("./40") = 0 [pid 6108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6108] setpgid(0, 0) = 0 [pid 6108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6107] <... write resumed>) = 4 [pid 6104] <... write resumed>) = 16777216 [pid 6103] <... munmap resumed>) = 0 [pid 6107] close(3) = 0 [pid 6108] <... openat resumed>) = 3 [pid 6107] symlink("/dev/binderfs", "./binderfs" [pid 6104] munmap(0x7feda9000000, 138412032 [pid 6108] write(3, "1000", 4) = 4 [pid 6108] close(3) = 0 [pid 6108] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6108] write(1, "executing program\n", 18) = 18 [pid 6108] memfd_create("syzkaller", 0) = 3 [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6107] <... symlink resumed>) = 0 executing program [pid 6107] write(1, "executing program\n", 18) = 18 [pid 6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6107] memfd_create("syzkaller", 0 [pid 6103] <... openat resumed>) = 4 [pid 6103] ioctl(4, LOOP_SET_FD, 3 [pid 6107] <... memfd_create resumed>) = 3 [pid 6104] <... munmap resumed>) = 0 [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6103] <... ioctl resumed>) = 0 [pid 6107] <... mmap resumed>) = 0x7feda9000000 [pid 6103] close(3 [pid 6104] <... openat resumed>) = 4 [pid 6104] ioctl(4, LOOP_SET_FD, 3 [pid 6103] <... close resumed>) = 0 [pid 6104] <... ioctl resumed>) = 0 [pid 6103] close(4) = 0 [pid 6103] mkdir("./file0", 0777) = 0 [pid 6103] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6104] close(3) = 0 [pid 6104] close(4) = 0 [pid 6104] mkdir("./file0", 0777) = 0 [ 247.982504][ T6103] loop0: detected capacity change from 0 to 32768 [ 248.012713][ T6104] loop3: detected capacity change from 0 to 32768 [pid 6104] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [ 248.057146][ T6104] [ 248.057146][ T6104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.057146][ T6104] [ 248.060593][ T6103] [ 248.060593][ T6103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.060593][ T6103] [pid 6104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] chdir("./file0") = 0 [pid 6103] <... mount resumed>) = 0 [pid 6103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6104] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6103] chdir("./file0") = 0 [pid 6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6103] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 248.145390][ T6103] [ 248.145390][ T6103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.145390][ T6103] [ 248.157695][ T6104] [ 248.157695][ T6104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.157695][ T6104] [pid 6104] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 248.190136][ T6104] [ 248.190136][ T6104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.190136][ T6104] [ 248.190234][ T6103] [ 248.190234][ T6103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.190234][ T6103] [pid 6104] exit_group(0) = ? [pid 6104] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6104, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6103] <... lsetxattr resumed>) = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6103] exit_group(0) = ? [pid 6103] +++ exited with 0 +++ [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 248.241186][ T113] [ 248.241186][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.241186][ T113] [ 248.270224][ T112] [ 248.270224][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.270224][ T112] [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... restart_syscall resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5847] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] unlink("./39/binderfs" [pid 5847] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... unlink resumed>) = 0 [pid 5847] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./40/binderfs" [pid 6108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 248.296284][ T5850] [ 248.296284][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.296284][ T5850] [ 248.323343][ T5847] [ 248.323343][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.323343][ T5847] [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6105] <... write resumed>) = 16777216 [pid 6105] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./39/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 248.345460][ T5850] [ 248.345460][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.345460][ T5850] [ 248.360063][ T5847] [ 248.360063][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.360063][ T5847] [pid 5850] close(3) = 0 [pid 5850] rmdir("./39") = 0 [pid 5850] mkdir("./40", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5847] <... umount2 resumed>) = 0 [pid 6105] <... munmap resumed>) = 0 [pid 5847] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6105] <... openat resumed>) = 4 [pid 5847] newfstatat(AT_FDCWD, "./40/file0", [pid 6105] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6105] close(3 [pid 5847] newfstatat(4, "", [pid 6106] <... write resumed>) = 16777216 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 6105] <... close resumed>) = 0 [pid 6105] close(4) = 0 [pid 6105] mkdir("./file0", 0777) = 0 [pid 6105] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6106] munmap(0x7feda9000000, 138412032 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./40/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./40") = 0 [pid 5847] mkdir("./41", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6106] <... munmap resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [ 248.453256][ T6105] loop1: detected capacity change from 0 to 32768 [ 248.490882][ T6105] [ 248.490882][ T6105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.490882][ T6105] [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6105] <... mount resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 6106] <... openat resumed>) = 4 [pid 6105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6106] ioctl(4, LOOP_SET_FD, 3 [pid 6105] <... openat resumed>) = 3 [pid 6106] <... ioctl resumed>) = 0 [pid 6105] chdir("./file0") = 0 [pid 6105] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6105] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6106] close(3) = 0 [pid 6106] close(4) = 0 [ 248.551111][ T6106] loop5: detected capacity change from 0 to 32768 [ 248.559085][ T6105] [ 248.559085][ T6105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.559085][ T6105] [pid 6106] mkdir("./file0", 0777) = 0 [ 248.593420][ T6106] [ 248.593420][ T6106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.593420][ T6106] [ 248.614987][ T6105] [ 248.614987][ T6105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.614987][ T6105] [pid 6106] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6105] <... lsetxattr resumed>) = 0 [pid 6106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6106] chdir("./file0") = 0 [pid 6106] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6106] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6105] exit_group(0) = ? [pid 6105] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [ 248.654589][ T113] [ 248.654589][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.654589][ T113] [ 248.676803][ T6106] [ 248.676803][ T6106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.676803][ T6106] [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./41/binderfs" [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6109 ./strace-static-x86_64: Process 6109 attached [pid 6109] set_robust_list(0x555584a2d760, 24) = 0 [pid 6109] chdir("./40") = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4) = 4 [pid 6109] close(3) = 0 [pid 6109] symlink("/dev/binderfs", "./binderfs" [pid 6106] <... lsetxattr resumed>) = 0 [ 248.710226][ T6106] [ 248.710226][ T6106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.710226][ T6106] [pid 6109] <... symlink resumed>) = 0 [pid 6106] exit_group(0 [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6109] write(1, "executing program\n", 18 [pid 6106] <... exit_group resumed>) = ? executing program [pid 6109] <... write resumed>) = 18 [pid 6106] +++ exited with 0 +++ [pid 6109] memfd_create("syzkaller", 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6106, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6109] <... memfd_create resumed>) = 3 [pid 6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6107] <... write resumed>) = 16777216 [pid 5852] <... restart_syscall resumed>) = 0 [ 248.761003][ T113] [ 248.761003][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.761003][ T113] [ 248.789530][ T5848] [ 248.789530][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.789530][ T5848] [pid 6107] munmap(0x7feda9000000, 138412032 [pid 6108] <... write resumed>) = 16777216 [pid 6107] <... munmap resumed>) = 0 [pid 5852] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6107] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./40/binderfs") = 0 [pid 5852] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6108] munmap(0x7feda9000000, 138412032 [pid 6107] <... openat resumed>) = 4 [pid 6107] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./41/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./41") = 0 [pid 5848] mkdir("./42", 0777 [pid 6107] <... ioctl resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 6107] close(3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6107] <... close resumed>) = 0 [pid 6107] close(4 [pid 5848] <... openat resumed>) = 3 [pid 6107] <... close resumed>) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6108] <... munmap resumed>) = 0 [pid 6107] mkdir("./file0", 0777) = 0 [ 248.820111][ T5848] [ 248.820111][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.820111][ T5848] [ 248.847409][ T5852] [ 248.847409][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.847409][ T5852] [ 248.863459][ T6107] loop4: detected capacity change from 0 to 32768 [pid 6108] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6107] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6108] <... openat resumed>) = 4 [pid 6108] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6110 [pid 5852] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6110 attached [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 6110] set_robust_list(0x555584a2d760, 24 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6110] <... set_robust_list resumed>) = 0 [pid 5852] getdents64(4, [pid 6110] chdir("./41" [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 6110] <... chdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] rmdir("./40/file0") = 0 [pid 6110] <... prctl resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6110] setpgid(0, 0 [pid 5852] close(3) = 0 [pid 6110] <... setpgid resumed>) = 0 [pid 6108] <... ioctl resumed>) = 0 [pid 5852] rmdir("./40" [pid 6108] close(3) = 0 [pid 6108] close(4 [pid 6110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6108] <... close resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 6108] mkdir("./file0", 0777 [pid 6110] <... openat resumed>) = 3 [pid 6108] <... mkdir resumed>) = 0 [pid 5852] mkdir("./41", 0777 [pid 6110] write(3, "1000", 4 [pid 5852] <... mkdir resumed>) = 0 [pid 6110] <... write resumed>) = 4 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6110] close(3 [pid 5852] <... openat resumed>) = 3 [pid 6110] <... close resumed>) = 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6110] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... ioctl resumed>) = 0 [pid 6108] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6107] <... mount resumed>) = 0 [pid 6110] <... symlink resumed>) = 0 [pid 6107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORYexecuting program [pid 5852] close(3 [pid 6110] write(1, "executing program\n", 18 [pid 6107] <... openat resumed>) = 3 [ 248.900388][ T5852] [ 248.900388][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.900388][ T5852] [ 248.918137][ T6108] loop2: detected capacity change from 0 to 32768 [ 248.932917][ T6107] [ 248.932917][ T6107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.932917][ T6107] [pid 6110] <... write resumed>) = 18 [pid 6107] chdir("./file0" [pid 6110] memfd_create("syzkaller", 0 [pid 6107] <... chdir resumed>) = 0 [pid 6110] <... memfd_create resumed>) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6107] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6110] <... mmap resumed>) = 0x7feda9000000 [pid 6107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 248.988921][ T6108] [ 248.988921][ T6108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.988921][ T6108] [ 249.011421][ T6107] [ 249.011421][ T6107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.011421][ T6107] [pid 6107] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6108] <... mount resumed>) = 0 [pid 6108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6108] chdir("./file0") = 0 [pid 6108] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 249.052874][ T6107] [ 249.052874][ T6107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.052874][ T6107] [ 249.087946][ T6108] [ 249.087946][ T6108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.087946][ T6108] [pid 6108] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6107] <... lsetxattr resumed>) = 0 [pid 6107] exit_group(0) = ? [pid 6107] +++ exited with 0 +++ [pid 6108] <... lsetxattr resumed>) = 0 [ 249.107509][ T113] [ 249.107509][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.107509][ T113] [ 249.111343][ T6108] [ 249.111343][ T6108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.111343][ T6108] [pid 6108] exit_group(0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6107, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 6108] <... exit_group resumed>) = ? [pid 6108] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6108, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./41/binderfs") = 0 [pid 5851] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./40/binderfs") = 0 [ 249.152129][ T112] [ 249.152129][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.152129][ T112] [ 249.190474][ T5851] [ 249.190474][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.190474][ T5851] [pid 5849] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5851] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./40/file0", [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5849] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(4, "", [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] getdents64(4, [pid 5849] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6111 attached [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6111] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] getdents64(4, [pid 5849] newfstatat(4, "", [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6111 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] close(4 [pid 5849] getdents64(4, [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./41/file0" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6111] chdir("./42" [pid 5851] <... rmdir resumed>) = 0 [pid 6111] <... chdir resumed>) = 0 [pid 5849] getdents64(4, [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [ 249.210783][ T5849] [ 249.210783][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.210783][ T5849] [ 249.222088][ T5851] [ 249.222088][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.222088][ T5851] [ 249.240742][ T5849] [ 249.240742][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.240742][ T5849] [pid 6111] <... prctl resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 6111] setpgid(0, 0 [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 6111] <... setpgid resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] rmdir("./40/file0" [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] rmdir("./41" [pid 6111] <... openat resumed>) = 3 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6111] write(3, "1000", 4) = 4 [pid 5851] mkdir("./42", 0777 [pid 6111] close(3 [pid 5851] <... mkdir resumed>) = 0 [pid 6111] <... close resumed>) = 0 [pid 5849] getdents64(3, [pid 6111] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6111] write(1, "executing program\n", 18 [pid 5851] <... openat resumed>) = 3 [pid 5849] close(3 [pid 6111] <... write resumed>) = 18 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] <... close resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5849] rmdir("./40" [pid 6111] memfd_create("syzkaller", 0 [pid 5851] close(3 [pid 5849] <... rmdir resumed>) = 0 [pid 6111] <... memfd_create resumed>) = 3 [pid 5849] mkdir("./41", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... close resumed>) = 0 [pid 6111] <... mmap resumed>) = 0x7feda9000000 [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6112 attached , child_tidptr=0x555584a2d750) = 6112 [pid 6112] set_robust_list(0x555584a2d760, 24) = 0 [pid 6112] chdir("./41") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6112] write(1, "executing program\n", 18executing program ) = 18 [pid 6112] memfd_create("syzkaller", 0) = 3 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6109] <... write resumed>) = 16777216 [pid 6109] munmap(0x7feda9000000, 138412032) = 0 [pid 6109] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6109] <... openat resumed>) = 4 [pid 6109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6109] close(3 [pid 5849] <... close resumed>) = 0 [pid 6109] <... close resumed>) = 0 [pid 6109] close(4 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6109] <... close resumed>) = 0 ./strace-static-x86_64: Process 6113 attached [pid 6109] mkdir("./file0", 0777 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6113 [pid 6113] set_robust_list(0x555584a2d760, 24 [pid 6109] <... mkdir resumed>) = 0 [pid 6113] <... set_robust_list resumed>) = 0 [pid 6109] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6113] chdir("./41") = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 249.582775][ T6109] loop3: detected capacity change from 0 to 32768 [pid 6113] write(3, "1000", 4) = 4 [pid 6113] close(3) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6113] write(1, "executing program\n", 18executing program ) = 18 [pid 5851] <... close resumed>) = 0 [pid 6109] <... mount resumed>) = 0 [pid 6109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] memfd_create("syzkaller", 0 [pid 6109] chdir("./file0" [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6113] <... memfd_create resumed>) = 3 [pid 6109] <... chdir resumed>) = 0 [pid 6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6109] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6114 attached [pid 6113] <... mmap resumed>) = 0x7feda9000000 [pid 6109] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6114 [ 249.658591][ T6109] [ 249.658591][ T6109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.658591][ T6109] [ 249.690274][ T6109] [ 249.690274][ T6109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.690274][ T6109] [pid 6114] set_robust_list(0x555584a2d760, 24) = 0 [pid 6114] chdir("./42") = 0 [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6114] setpgid(0, 0) = 0 [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6109] <... lsetxattr resumed>) = 0 [pid 6114] <... openat resumed>) = 3 [pid 6114] write(3, "1000", 4 [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 249.711639][ T6109] [ 249.711639][ T6109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.711639][ T6109] [ 249.747013][ T113] [ 249.747013][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.747013][ T113] [pid 6109] exit_group(0 [pid 6114] <... write resumed>) = 4 [pid 6109] <... exit_group resumed>) = ? [pid 6114] close(3) = 0 [pid 6114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6109] +++ exited with 0 +++ [pid 6114] write(1, "executing program\n", 18executing program ) = 18 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 6114] memfd_create("syzkaller", 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6114] <... memfd_create resumed>) = 3 [pid 5850] <... restart_syscall resumed>) = 0 [pid 6114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6114] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6110] <... write resumed>) = 16777216 [pid 5850] unlink("./40/binderfs") = 0 [pid 6110] munmap(0x7feda9000000, 138412032 [pid 5850] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6110] <... munmap resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6110] close(3) = 0 [pid 6110] close(4) = 0 [pid 6110] mkdir("./file0", 0777) = 0 [ 249.883509][ T5850] [ 249.883509][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.883509][ T5850] [ 249.907313][ T6110] loop0: detected capacity change from 0 to 32768 [ 249.914176][ T5850] [ 249.914176][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.914176][ T5850] [pid 6110] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6110] <... mount resumed>) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./40/file0" [pid 6110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./40") = 0 [pid 6110] <... openat resumed>) = 3 [pid 6110] chdir("./file0" [pid 5850] mkdir("./41", 0777 [pid 6110] <... chdir resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6110] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 249.949572][ T6110] [ 249.949572][ T6110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.949572][ T6110] [ 249.980567][ T6110] [ 249.980567][ T6110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.980567][ T6110] [pid 5850] close(3 [pid 6111] <... write resumed>) = 16777216 [ 250.039094][ T6110] [ 250.039094][ T6110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.039094][ T6110] [pid 6111] munmap(0x7feda9000000, 138412032 [pid 6110] <... lsetxattr resumed>) = 0 [pid 6111] <... munmap resumed>) = 0 [pid 6110] exit_group(0) = ? [pid 6110] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6110, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 6111] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6111] ioctl(4, LOOP_SET_FD, 3 [pid 5847] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./41/binderfs") = 0 [ 250.083479][ T112] [ 250.083479][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.083479][ T112] [pid 5847] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6111] <... ioctl resumed>) = 0 [pid 6111] close(3) = 0 [pid 6111] close(4) = 0 [ 250.140211][ T6111] loop1: detected capacity change from 0 to 32768 [ 250.151754][ T5847] [ 250.151754][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.151754][ T5847] [pid 6111] mkdir("./file0", 0777) = 0 [pid 6111] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = 0 [pid 6111] <... mount resumed>) = 0 [pid 6111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6111] <... openat resumed>) = 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 6111] chdir("./file0" [pid 5847] rmdir("./41/file0" [pid 6111] <... chdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6111] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] getdents64(3, [pid 6111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 250.192883][ T5847] [ 250.192883][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.192883][ T5847] [ 250.215659][ T6111] [ 250.215659][ T6111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.215659][ T6111] [pid 6111] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./41") = 0 [pid 5847] mkdir("./42", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6112] <... write resumed>) = 16777216 [ 250.263765][ T6111] [ 250.263765][ T6111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.263765][ T6111] [pid 6112] munmap(0x7feda9000000, 138412032 [pid 6111] <... lsetxattr resumed>) = 0 [pid 6111] exit_group(0) = ? [pid 6112] <... munmap resumed>) = 0 [pid 6111] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5848] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6112] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6112] <... openat resumed>) = 4 [ 250.305949][ T6111] [ 250.305949][ T6111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.305949][ T6111] [ 250.344329][ T113] [ 250.344329][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.344329][ T113] [pid 6112] ioctl(4, LOOP_SET_FD, 3 [pid 5848] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] getdents64(3, [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6112] <... ioctl resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6115 attached ) = -1 EINVAL (Invalid argument) [pid 6112] close(3 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6115 [pid 5848] newfstatat(AT_FDCWD, "./42/binderfs", [pid 6112] <... close resumed>) = 0 [pid 6112] close(4) = 0 [pid 6112] mkdir("./file0", 0777) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6112] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] unlink("./42/binderfs") = 0 [pid 6115] set_robust_list(0x555584a2d760, 24 [pid 5848] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6115] <... set_robust_list resumed>) = 0 [pid 6115] chdir("./41") = 0 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] setpgid(0, 0) = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6115] write(3, "1000", 4) = 4 [pid 6115] close(3) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs") = 0 [ 250.379115][ T6112] loop5: detected capacity change from 0 to 32768 [pid 6115] write(1, "executing program\n", 18executing program ) = 18 [pid 6115] memfd_create("syzkaller", 0) = 3 [pid 6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6112] <... mount resumed>) = 0 [ 250.433126][ T6112] [ 250.433126][ T6112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.433126][ T6112] [ 250.448702][ T5848] [ 250.448702][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.448702][ T5848] [pid 6112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6112] chdir("./file0") = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6112] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6113] <... write resumed>) = 16777216 [ 250.482865][ T5848] [ 250.482865][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.482865][ T5848] [ 250.483812][ T6112] [ 250.483812][ T6112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.483812][ T6112] [pid 6113] munmap(0x7feda9000000, 138412032) = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5848] <... umount2 resumed>) = 0 [pid 6113] ioctl(4, LOOP_SET_FD, 3 [pid 6112] <... lsetxattr resumed>) = 0 [pid 6112] exit_group(0) = ? [pid 6112] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5852] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(3, "", [pid 5848] newfstatat(AT_FDCWD, "./42/file0", [pid 5847] <... close resumed>) = 0 [pid 6113] <... ioctl resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] getdents64(3, [pid 5848] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6113] close(3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6113] <... close resumed>) = 0 [pid 6113] close(4 [pid 5852] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... openat resumed>) = 4 [pid 6113] <... close resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 6113] mkdir("./file0", 0777 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6116 ./strace-static-x86_64: Process 6116 attached [pid 6113] <... mkdir resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5848] getdents64(4, [pid 6113] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6116] set_robust_list(0x555584a2d760, 24 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./42/file0") = 0 [ 250.550463][ T6112] [ 250.550463][ T6112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.550463][ T6112] [ 250.569595][ T6113] loop2: detected capacity change from 0 to 32768 [ 250.576706][ T113] [ 250.576706][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.576706][ T113] [pid 5848] getdents64(3, [pid 6116] <... set_robust_list resumed>) = 0 [pid 6114] <... write resumed>) = 16777216 [pid 5852] unlink("./41/binderfs" [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./42" [pid 6116] chdir("./42" [pid 6114] munmap(0x7feda9000000, 138412032 [pid 5852] <... unlink resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 6116] <... chdir resumed>) = 0 [pid 6116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] mkdir("./43", 0777 [pid 6116] <... prctl resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 6116] setpgid(0, 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6116] <... setpgid resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 6116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6116] <... openat resumed>) = 3 [pid 5848] <... ioctl resumed>) = 0 [pid 6116] write(3, "1000", 4 [pid 6113] <... mount resumed>) = 0 [pid 6113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6113] chdir("./file0") = 0 [pid 6113] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 250.621367][ T6113] [ 250.621367][ T6113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.621367][ T6113] [ 250.644785][ T5852] [ 250.644785][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.644785][ T5852] [ 250.653265][ T6113] [ 250.653265][ T6113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.653265][ T6113] [ 250.667843][ T5852] [pid 6113] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6116] <... write resumed>) = 4 [pid 5848] close(3 [pid 6116] close(3) = 0 [pid 6116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6116] write(1, "executing program\n", 18 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6116] <... write resumed>) = 18 [pid 5852] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./41/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./41" [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 250.667843][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.667843][ T5852] [pid 6114] <... munmap resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./42", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6114] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 250.714720][ T6113] [ 250.714720][ T6113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.714720][ T6113] [pid 6114] ioctl(4, LOOP_SET_FD, 3 [pid 6113] <... lsetxattr resumed>) = 0 [pid 6113] exit_group(0) = ? [pid 6113] +++ exited with 0 +++ [pid 6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6114] <... ioctl resumed>) = 0 [pid 6114] close(3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 6114] <... close resumed>) = 0 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6114] close(4 [pid 5849] <... restart_syscall resumed>) = 0 [ 250.763992][ T6114] loop4: detected capacity change from 0 to 32768 [ 250.772030][ T112] [ 250.772030][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.772030][ T112] [pid 6114] <... close resumed>) = 0 [pid 5849] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6114] mkdir("./file0", 0777 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6114] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6114] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./41/binderfs") = 0 [ 250.856872][ T5849] [ 250.856872][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.856872][ T5849] [ 250.869275][ T5849] [ 250.869275][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.869275][ T5849] [pid 5849] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6114] <... mount resumed>) = 0 [pid 6114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6114] chdir("./file0") = 0 [pid 6114] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... umount2 resumed>) = 0 [pid 6114] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6114] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./41/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./41") = 0 [ 250.921492][ T6114] [ 250.921492][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.921492][ T6114] [ 250.952230][ T6114] [ 250.952230][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.952230][ T6114] [pid 5849] mkdir("./42", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 250.973017][ T6114] [ 250.973017][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.973017][ T6114] [pid 5849] close(3 [pid 6114] <... lsetxattr resumed>) = 0 [pid 6114] exit_group(0) = ? [pid 6114] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=26 /* 0.26 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6117 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./42/binderfs") = 0 [ 251.032903][ T112] [ 251.032903][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.032903][ T112] [pid 5851] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6117 attached [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6117] set_robust_list(0x555584a2d760, 24) = 0 [pid 6117] chdir("./43") = 0 [pid 6117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... close resumed>) = 0 [pid 6117] <... prctl resumed>) = 0 [pid 6117] setpgid(0, 0) = 0 [pid 6117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6117] write(3, "1000", 4) = 4 [pid 6117] close(3) = 0 [pid 6117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 6117] write(1, "executing program\n", 18./strace-static-x86_64: Process 6118 attached ) = 18 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6118 [pid 6117] memfd_create("syzkaller", 0 [pid 6118] set_robust_list(0x555584a2d760, 24 [pid 6117] <... memfd_create resumed>) = 3 [pid 6118] <... set_robust_list resumed>) = 0 [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6118] chdir("./42" [pid 6117] <... mmap resumed>) = 0x7feda9000000 [pid 6118] <... chdir resumed>) = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 251.080377][ T5851] [ 251.080377][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.080377][ T5851] [ 251.114973][ T5851] [ 251.114973][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.114973][ T5851] [pid 6118] setpgid(0, 0 [pid 5851] <... umount2 resumed>) = 0 [pid 6118] <... setpgid resumed>) = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6118] <... openat resumed>) = 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6118] write(3, "1000", 4 [pid 5851] newfstatat(AT_FDCWD, "./42/file0", [pid 6118] <... write resumed>) = 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6118] close(3 [pid 5851] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6118] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6118] symlink("/dev/binderfs", "./binderfs" [pid 5851] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6118] <... symlink resumed>) = 0 [pid 5851] newfstatat(4, "", executing program [pid 6118] write(1, "executing program\n", 18 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6118] <... write resumed>) = 18 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6118] memfd_create("syzkaller", 0 [pid 5851] getdents64(4, [pid 6118] <... memfd_create resumed>) = 3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] close(4 [pid 6118] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./42/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./42") = 0 [pid 5851] mkdir("./43", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6115] <... write resumed>) = 16777216 [pid 6115] munmap(0x7feda9000000, 138412032 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x555584a2d760, 24 [pid 6115] <... munmap resumed>) = 0 [pid 6119] <... set_robust_list resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6119 [pid 6119] chdir("./42") = 0 [pid 6119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6119] setpgid(0, 0) = 0 [pid 6115] <... openat resumed>) = 4 [pid 6115] ioctl(4, LOOP_SET_FD, 3 [pid 6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6119] write(3, "1000", 4) = 4 [pid 6119] close(3) = 0 [pid 6119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6119] write(1, "executing program\n", 18 [pid 6115] <... ioctl resumed>) = 0 [pid 6115] close(3) = 0 [pid 6115] close(4executing program ) = 0 [pid 6119] <... write resumed>) = 18 [pid 6115] mkdir("./file0", 0777 [pid 6119] memfd_create("syzkaller", 0 [pid 6115] <... mkdir resumed>) = 0 [pid 6115] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6119] <... memfd_create resumed>) = 3 [ 251.327371][ T6115] loop3: detected capacity change from 0 to 32768 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6115] <... mount resumed>) = 0 [pid 6115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6115] <... openat resumed>) = 3 [ 251.391697][ T6115] [ 251.391697][ T6115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.391697][ T6115] [pid 6115] chdir("./file0") = 0 [pid 6115] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6115] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 251.439279][ T6115] [ 251.439279][ T6115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.439279][ T6115] [ 251.472764][ T6115] [ 251.472764][ T6115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.472764][ T6115] [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6115] <... lsetxattr resumed>) = 0 [pid 6115] exit_group(0) = ? [pid 6115] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./41/binderfs" [pid 5851] <... close resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6120 attached [pid 6120] set_robust_list(0x555584a2d760, 24) = 0 [pid 6120] chdir("./43") = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6120 [pid 6120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 251.499425][ T112] [ 251.499425][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.499425][ T112] [pid 6120] setpgid(0, 0) = 0 [pid 6120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6120] write(3, "1000", 4) = 4 [pid 6120] close(3) = 0 [pid 6120] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6120] write(1, "executing program\n", 18) = 18 [pid 6120] memfd_create("syzkaller", 0) = 3 [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6116] <... write resumed>) = 16777216 [ 251.542037][ T5850] [ 251.542037][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.542037][ T5850] [ 251.576084][ T5850] [ 251.576084][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.576084][ T5850] [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6116] munmap(0x7feda9000000, 138412032 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./41/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./41") = 0 [pid 5850] mkdir("./42", 0777 [pid 6116] <... munmap resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6116] close(3) = 0 [pid 6116] close(4) = 0 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6116] mkdir("./file0", 0777) = 0 [ 251.713987][ T6116] loop0: detected capacity change from 0 to 32768 [pid 6116] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6117] <... write resumed>) = 16777216 [pid 6116] chdir("./file0") = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 251.840331][ T6116] [ 251.840331][ T6116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.840331][ T6116] [pid 6116] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6117] munmap(0x7feda9000000, 138412032 [pid 6118] <... write resumed>) = 16777216 [pid 6117] <... munmap resumed>) = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 251.892273][ T6116] [ 251.892273][ T6116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.892273][ T6116] [ 251.910627][ T6116] [ 251.910627][ T6116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.910627][ T6116] [pid 6117] ioctl(4, LOOP_SET_FD, 3 [pid 6118] munmap(0x7feda9000000, 138412032 [pid 6117] <... ioctl resumed>) = 0 [pid 6116] <... lsetxattr resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6118] <... munmap resumed>) = 0 [pid 6117] close(3 [pid 6116] exit_group(0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6117] <... close resumed>) = 0 [pid 6116] <... exit_group resumed>) = ? [pid 6117] close(4 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6121 [pid 6116] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6116, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 6117] <... close resumed>) = 0 [pid 5847] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6121 attached [pid 6117] mkdir("./file0", 0777 [pid 6118] <... openat resumed>) = 4 [pid 6117] <... mkdir resumed>) = 0 [pid 6118] ioctl(4, LOOP_SET_FD, 3 [pid 6121] set_robust_list(0x555584a2d760, 24 [ 251.949394][ T6117] loop1: detected capacity change from 0 to 32768 [ 251.982698][ T113] [ 251.982698][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.982698][ T113] [pid 6117] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./42/binderfs") = 0 [pid 5847] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6121] <... set_robust_list resumed>) = 0 [pid 6117] <... mount resumed>) = 0 [pid 6121] chdir("./42" [pid 6117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6121] <... chdir resumed>) = 0 [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6117] <... openat resumed>) = 3 [pid 6121] <... prctl resumed>) = 0 [pid 6117] chdir("./file0" [pid 6121] setpgid(0, 0 [pid 6117] <... chdir resumed>) = 0 [pid 6121] <... setpgid resumed>) = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6118] <... ioctl resumed>) = 0 [pid 6117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] mkdir("./file0", 0777) = 0 [pid 6118] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 252.021641][ T6118] loop5: detected capacity change from 0 to 32768 [ 252.033705][ T6117] [ 252.033705][ T6117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.033705][ T6117] [ 252.034038][ T5847] [ 252.034038][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.034038][ T5847] [pid 6117] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6121] <... openat resumed>) = 3 [pid 6121] write(3, "1000", 4) = 4 [ 252.079627][ T6117] [ 252.079627][ T6117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.079627][ T6117] [ 252.094034][ T6118] [ 252.094034][ T6118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.094034][ T6118] [ 252.110753][ T6117] [ 252.110753][ T6117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.110753][ T6117] [ 252.111137][ T5847] [ 252.111137][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6117] <... lsetxattr resumed>) = 0 [pid 6121] write(1, "executing program\n", 18executing program ) = 18 [pid 6118] <... mount resumed>) = 0 [pid 6117] exit_group(0 [pid 6118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6118] chdir("./file0") = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6118] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6121] memfd_create("syzkaller", 0 [pid 6117] <... exit_group resumed>) = ? [pid 6117] +++ exited with 0 +++ [ 252.111137][ T5847] [ 252.148198][ T113] [ 252.148198][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.148198][ T113] [ 252.153192][ T6118] [ 252.153192][ T6118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.153192][ T6118] [pid 6121] <... memfd_create resumed>) = 3 [pid 6119] <... write resumed>) = 16777216 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6117, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", [pid 6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./43/binderfs" [pid 5847] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6121] <... mmap resumed>) = 0x7feda9000000 [pid 6119] munmap(0x7feda9000000, 138412032 [pid 5848] <... unlink resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./42/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./42") = 0 [pid 5847] mkdir("./43", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6119] <... munmap resumed>) = 0 [ 252.195938][ T6118] [ 252.195938][ T6118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.195938][ T6118] [pid 6119] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3 [pid 6118] <... lsetxattr resumed>) = 0 [pid 6118] exit_group(0) = ? [pid 6118] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6118, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6119] <... ioctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6119] close(3 [pid 5852] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6119] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./42/binderfs") = 0 [pid 5852] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 252.262758][ T5848] [ 252.262758][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.262758][ T5848] [ 252.275590][ T113] [ 252.275590][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.275590][ T113] [ 252.287339][ T6119] loop2: detected capacity change from 0 to 32768 [pid 6119] close(4) = 0 [pid 6119] mkdir("./file0", 0777) = 0 [ 252.311867][ T5848] [ 252.311867][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.311867][ T5848] [ 252.350694][ T5852] [ 252.350694][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.350694][ T5852] [pid 6119] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5848] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./42/file0" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./43/file0", [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6119] <... mount resumed>) = 0 [pid 5852] getdents64(3, [pid 5848] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] close(3 [pid 5848] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./42" [pid 6119] <... openat resumed>) = 3 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./43", 0777 [pid 6119] chdir("./file0" [pid 5852] <... mkdir resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 252.373359][ T5852] [ 252.373359][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.373359][ T5852] [ 252.402220][ T6119] [ 252.402220][ T6119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.402220][ T6119] [pid 6120] <... write resumed>) = 16777216 [pid 6119] <... chdir resumed>) = 0 [pid 5852] close(3 [pid 5848] newfstatat(4, "", [pid 6119] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6119] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] getdents64(4, [pid 6120] munmap(0x7feda9000000, 138412032 [pid 6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 252.446789][ T6119] [ 252.446789][ T6119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.446789][ T6119] [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6120] <... munmap resumed>) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./43/file0" [pid 6120] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6119] <... lsetxattr resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 6119] exit_group(0 [pid 5848] <... close resumed>) = 0 [pid 6119] <... exit_group resumed>) = ? [pid 5848] rmdir("./43") = 0 [pid 6119] +++ exited with 0 +++ [pid 5848] mkdir("./44", 0777 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6119, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... mkdir resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [ 252.490094][ T6119] [ 252.490094][ T6119] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.490094][ T6119] [ 252.508994][ T6120] loop4: detected capacity change from 0 to 32768 [ 252.517696][ T112] [ 252.517696][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.517696][ T112] [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6120] <... ioctl resumed>) = 0 [pid 5849] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... ioctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] close(3 [pid 5849] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6120] close(3) = 0 [pid 6120] close(4) = 0 [pid 6120] mkdir("./file0", 0777) = 0 [pid 6120] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./42/binderfs", [pid 6120] <... mount resumed>) = 0 [pid 6120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6120] chdir("./file0") = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6120] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] unlink("./42/binderfs") = 0 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6122 ./strace-static-x86_64: Process 6122 attached [pid 6122] set_robust_list(0x555584a2d760, 24) = 0 [pid 6122] chdir("./43") = 0 [pid 6122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6122] setpgid(0, 0) = 0 [ 252.573202][ T6120] [ 252.573202][ T6120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.573202][ T6120] [ 252.609844][ T6120] [ 252.609844][ T6120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.609844][ T6120] [pid 6122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6122] write(3, "1000", 4) = 4 [pid 6122] close(3) = 0 [pid 6122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6122] write(1, "executing program\n", 18) = 18 [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 252.641313][ T5849] [ 252.641313][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.641313][ T5849] [ 252.645579][ T6120] [ 252.645579][ T6120] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.645579][ T6120] [pid 6120] <... lsetxattr resumed>) = 0 [pid 6120] exit_group(0) = ? [pid 6120] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6120, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=36 /* 0.36 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./43/binderfs") = 0 [ 252.690209][ T5849] [ 252.690209][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.690209][ T5849] [ 252.717795][ T113] [ 252.717795][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.717795][ T113] [pid 5851] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [ 252.751721][ T5851] [ 252.751721][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.751721][ T5851] [ 252.768455][ T5851] [ 252.768455][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.768455][ T5851] [pid 5852] <... close resumed>) = 0 [pid 5849] rmdir("./42/file0" [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5851] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] newfstatat(AT_FDCWD, "./43/file0", [pid 5849] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... close resumed>) = 0 [pid 5851] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] rmdir("./42" [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", [pid 5849] <... rmdir resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] mkdir("./43", 0777 [pid 5851] getdents64(4, [pid 5849] <... mkdir resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6123 ./strace-static-x86_64: Process 6123 attached [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6123] set_robust_list(0x555584a2d760, 24 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 6123] <... set_robust_list resumed>) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6123] chdir("./43" [pid 5851] close(4) = 0 [pid 5851] rmdir("./43/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./43") = 0 [pid 5851] mkdir("./44", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6123] <... chdir resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6123] setpgid(0, 0) = 0 [pid 5848] <... close resumed>) = 0 [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6124 ./strace-static-x86_64: Process 6124 attached [pid 6123] write(3, "1000", 4) = 4 [pid 6123] close(3) = 0 [pid 6124] set_robust_list(0x555584a2d760, 24 [pid 6123] symlink("/dev/binderfs", "./binderfs" [pid 6124] <... set_robust_list resumed>) = 0 [pid 6124] chdir("./44" [pid 6123] <... symlink resumed>) = 0 [pid 6124] <... chdir resumed>) = 0 executing program [pid 6123] write(1, "executing program\n", 18 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6123] <... write resumed>) = 18 [pid 6124] <... prctl resumed>) = 0 [pid 6124] setpgid(0, 0) = 0 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6123] memfd_create("syzkaller", 0 [pid 6124] <... openat resumed>) = 3 [pid 6123] <... memfd_create resumed>) = 3 [pid 6124] write(3, "1000", 4 [pid 6123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6124] <... write resumed>) = 4 [pid 6124] close(3 [pid 6123] <... mmap resumed>) = 0x7feda9000000 executing program [pid 6124] <... close resumed>) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6124] write(1, "executing program\n", 18) = 18 [pid 6124] memfd_create("syzkaller", 0) = 3 [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6121] <... write resumed>) = 16777216 [pid 6121] munmap(0x7feda9000000, 138412032) = 0 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6121] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6121] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6121] close(3) = 0 [pid 6121] close(4) = 0 [ 253.030925][ T6121] loop3: detected capacity change from 0 to 32768 [pid 6121] mkdir("./file0", 0777) = 0 [pid 6121] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6125 ./strace-static-x86_64: Process 6125 attached [pid 6125] set_robust_list(0x555584a2d760, 24) = 0 [pid 6125] chdir("./43") = 0 [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6125] setpgid(0, 0) = 0 [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6125] write(3, "1000", 4) = 4 [pid 6125] close(3) = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6125] write(1, "executing program\n", 18executing program ) = 18 [pid 6125] memfd_create("syzkaller", 0) = 3 [ 253.132740][ T6121] [ 253.132740][ T6121] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.132740][ T6121] [pid 6121] <... mount resumed>) = 0 [pid 6121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6121] chdir("./file0") = 0 [pid 6121] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6121] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 253.173004][ T6121] [ 253.173004][ T6121] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.173004][ T6121] [pid 5851] <... close resumed>) = 0 [pid 6121] <... lsetxattr resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x555584a2d750) = 6126 ./strace-static-x86_64: Process 6126 attached [pid 6121] exit_group(0) = ? [pid 6126] set_robust_list(0x555584a2d760, 24 [pid 6121] +++ exited with 0 +++ [pid 6126] <... set_robust_list resumed>) = 0 [pid 6126] chdir("./44") = 0 [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6126] setpgid(0, 0) = 0 [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6126] write(3, "1000", 4) = 4 [pid 6126] close(3) = 0 [pid 6126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6126] write(1, "executing program\n", 18) = 18 [pid 6126] memfd_create("syzkaller", 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 6126] <... memfd_create resumed>) = 3 [pid 5850] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 253.213801][ T6121] [ 253.213801][ T6121] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.213801][ T6121] [ 253.236074][ T113] [ 253.236074][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.236074][ T113] [pid 6124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./42/binderfs") = 0 [pid 5850] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5850] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 253.353806][ T5850] [ 253.353806][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.353806][ T5850] [ 253.390534][ T5850] [ 253.390534][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.390534][ T5850] [pid 5850] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6122] <... write resumed>) = 16777216 [pid 5850] <... openat resumed>) = 4 [pid 6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6122] munmap(0x7feda9000000, 138412032 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./42/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./42") = 0 [pid 5850] mkdir("./43", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6122] <... munmap resumed>) = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6122] close(3) = 0 [pid 6122] close(4) = 0 [ 253.542136][ T6122] loop0: detected capacity change from 0 to 32768 [pid 6122] mkdir("./file0", 0777) = 0 [pid 6122] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6123] <... write resumed>) = 16777216 [pid 6123] munmap(0x7feda9000000, 138412032) = 0 [pid 6123] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6122] <... mount resumed>) = 0 [pid 6122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6122] chdir("./file0") = 0 [pid 6122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 253.614249][ T6122] [ 253.614249][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.614249][ T6122] [pid 6122] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6123] <... openat resumed>) = 4 [pid 6123] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6123] close(3) = 0 [pid 6123] close(4) = 0 [pid 6123] mkdir("./file0", 0777) = 0 [pid 6122] <... lsetxattr resumed>) = 0 [ 253.674828][ T6122] [ 253.674828][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.674828][ T6122] [ 253.687496][ T6123] loop5: detected capacity change from 0 to 32768 [ 253.700061][ T6122] [ 253.700061][ T6122] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.700061][ T6122] [pid 6122] exit_group(0 [pid 6123] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6122] <... exit_group resumed>) = ? [pid 6122] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6122, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./43/binderfs") = 0 [ 253.742970][ T113] [ 253.742970][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.742970][ T113] [ 253.781949][ T6123] [ 253.781949][ T6123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.781949][ T6123] [pid 5847] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6124] <... write resumed>) = 16777216 [pid 6124] munmap(0x7feda9000000, 138412032 [pid 6123] <... mount resumed>) = 0 [pid 6123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6123] chdir("./file0") = 0 [pid 6123] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 253.793536][ T5847] [ 253.793536][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.793536][ T5847] [ 253.824014][ T5847] [ 253.824014][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.824014][ T5847] [pid 6123] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6124] <... munmap resumed>) = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6124] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x555584a2d760, 24) = 0 [pid 6127] chdir("./43") = 0 [pid 6124] <... ioctl resumed>) = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6124] close(3) = 0 [pid 6127] <... prctl resumed>) = 0 [pid 6127] setpgid(0, 0 [pid 6124] close(4 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6127 [pid 6124] <... close resumed>) = 0 [pid 6124] mkdir("./file0", 0777) = 0 [pid 6127] <... setpgid resumed>) = 0 [pid 6124] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 253.861009][ T6123] [ 253.861009][ T6123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.861009][ T6123] [ 253.872425][ T6124] loop1: detected capacity change from 0 to 32768 [ 253.882663][ T6123] [ 253.882663][ T6123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.882663][ T6123] [ 253.905528][ T112] [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6123] <... lsetxattr resumed>) = 0 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs" [pid 6123] exit_group(0) = ? executing program [pid 6127] <... symlink resumed>) = 0 [pid 6123] +++ exited with 0 +++ [pid 6127] write(1, "executing program\n", 18 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 6127] <... write resumed>) = 18 [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5847] <... umount2 resumed>) = 0 [pid 6127] memfd_create("syzkaller", 0) = 3 [pid 5847] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./43/file0", [pid 6127] <... mmap resumed>) = 0x7feda9000000 [pid 5852] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] <... openat resumed>) = 3 [pid 5847] newfstatat(4, "", [pid 5852] newfstatat(3, "", [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./43/file0" [pid 6125] <... write resumed>) = 16777216 [pid 6124] <... mount resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5852] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6124] chdir("./file0") = 0 [pid 6124] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 253.905528][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.905528][ T112] [ 253.907020][ T6124] [ 253.907020][ T6124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.907020][ T6124] [pid 6124] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6125] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] getdents64(3, [pid 5852] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./43/binderfs" [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5847] close(3) = 0 [pid 5852] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] rmdir("./43") = 0 [ 253.972335][ T6124] [ 253.972335][ T6124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.972335][ T6124] [ 253.992087][ T6124] [ 253.992087][ T6124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.992087][ T6124] [ 254.010370][ T5852] [ 254.010370][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.010370][ T5852] [pid 6126] <... write resumed>) = 16777216 [pid 6125] <... munmap resumed>) = 0 [pid 6124] <... lsetxattr resumed>) = 0 [pid 5847] mkdir("./44", 0777 [pid 6126] munmap(0x7feda9000000, 138412032 [pid 6125] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6124] exit_group(0 [pid 6125] <... openat resumed>) = 4 [pid 6124] <... exit_group resumed>) = ? [pid 6125] ioctl(4, LOOP_SET_FD, 3 [pid 6124] +++ exited with 0 +++ [pid 5847] <... mkdir resumed>) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6124, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=36 /* 0.36 s */} --- [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6125] <... ioctl resumed>) = 0 [pid 5848] newfstatat(3, "", [pid 5847] <... openat resumed>) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5848] getdents64(3, [pid 5847] close(3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./44/binderfs") = 0 [ 254.022669][ T113] [ 254.022669][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.022669][ T113] [ 254.042777][ T6125] loop2: detected capacity change from 0 to 32768 [ 254.062075][ T5852] [ 254.062075][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.062075][ T5852] [pid 5848] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] close(3) = 0 [pid 6125] close(4) = 0 [pid 6125] mkdir("./file0", 0777) = 0 [pid 6125] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6126] <... munmap resumed>) = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 254.077461][ T5848] [ 254.077461][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.077461][ T5848] [ 254.091094][ T6126] loop4: detected capacity change from 0 to 32768 [ 254.098656][ T5848] [ 254.098656][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.098656][ T5848] [ 254.123200][ T6125] [pid 6126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6126] close(3) = 0 [pid 6126] close(4) = 0 [pid 6126] mkdir("./file0", 0777) = 0 [pid 6126] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] <... mount resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6125] <... openat resumed>) = 3 [pid 5852] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] chdir("./file0" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = 0 [pid 6125] <... chdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6125] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] newfstatat(4, "", [pid 5848] newfstatat(AT_FDCWD, "./44/file0", [pid 6125] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 254.123200][ T6125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.123200][ T6125] [ 254.162251][ T6126] [ 254.162251][ T6126] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.162251][ T6126] [pid 5852] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] close(4) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5852] rmdir("./43/file0" [pid 5848] newfstatat(4, "", [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 5848] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] close(3 [pid 5848] getdents64(4, [pid 5852] <... close resumed>) = 0 [pid 6126] <... mount resumed>) = 0 [pid 5852] rmdir("./43" [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6126] chdir("./file0" [pid 5852] <... rmdir resumed>) = 0 [pid 5848] close(4 [pid 6126] <... chdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6126] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] mkdir("./44", 0777 [pid 5848] rmdir("./44/file0" [pid 6126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6126] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [ 254.187633][ T6125] [ 254.187633][ T6125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.187633][ T6125] [ 254.219627][ T6126] [ 254.219627][ T6126] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.219627][ T6126] [ 254.231410][ T6125] [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5848] close(3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] <... close resumed>) = 0 [pid 5852] close(3 [pid 5848] rmdir("./44") = 0 [ 254.231410][ T6125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.231410][ T6125] [pid 5848] mkdir("./45", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6125] <... lsetxattr resumed>) = 0 [pid 6125] exit_group(0) = ? [pid 6125] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6125, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... restart_syscall resumed>) = 0 [pid 6126] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6126] exit_group(0 [pid 5849] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6126] <... exit_group resumed>) = ? [pid 5849] newfstatat(AT_FDCWD, "./43/binderfs", [pid 6126] +++ exited with 0 +++ [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5849] unlink("./43/binderfs" [pid 5848] <... ioctl resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5849] <... unlink resumed>) = 0 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5849] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... restart_syscall resumed>) = 0 [pid 5848] close(3 [pid 5851] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./44/binderfs") = 0 [ 254.260470][ T6126] [ 254.260470][ T6126] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.260470][ T6126] [ 254.282811][ T112] [ 254.282811][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.282811][ T112] [ 254.293944][ T113] [ 254.293944][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.293944][ T113] [ 254.340957][ T5849] [ 254.340957][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.340957][ T5849] [ 254.351649][ T5851] [ 254.351649][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.351649][ T5851] [pid 5851] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [ 254.384628][ T5849] [ 254.384628][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.384628][ T5849] [ 254.396311][ T5851] [ 254.396311][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.396311][ T5851] [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6128 attached [pid 5851] <... umount2 resumed>) = 0 [pid 5849] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6128] set_robust_list(0x555584a2d760, 24 [pid 5851] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] close(4 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6128 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./44/file0", [pid 5849] rmdir("./43/file0" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6128] <... set_robust_list resumed>) = 0 [pid 5851] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 6128] chdir("./44" [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6128] <... chdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] close(3 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... openat resumed>) = 4 [pid 5849] <... close resumed>) = 0 [pid 6128] <... prctl resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 5849] rmdir("./43" [pid 6128] setpgid(0, 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6128] <... setpgid resumed>) = 0 [pid 5851] getdents64(4, [pid 5849] mkdir("./44", 0777 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... mkdir resumed>) = 0 [pid 6128] <... openat resumed>) = 3 [pid 5851] getdents64(4, [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6128] write(3, "1000", 4 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6128] <... write resumed>) = 4 [pid 5851] close(4 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6128] close(3 [pid 5851] <... close resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 5851] rmdir("./44/file0" [pid 6128] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... rmdir resumed>) = 0 [pid 5849] close(3 [pid 6128] <... symlink resumed>) = 0 [pid 5851] getdents64(3, [pid 6128] write(1, "executing program\n", 18 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 executing program [pid 6128] <... write resumed>) = 18 [pid 5851] close(3) = 0 [pid 6128] memfd_create("syzkaller", 0 [pid 5851] rmdir("./44" [pid 6128] <... memfd_create resumed>) = 3 [pid 5851] <... rmdir resumed>) = 0 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] mkdir("./45", 0777 [pid 6128] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... close resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6129 ./strace-static-x86_64: Process 6129 attached [pid 6129] set_robust_list(0x555584a2d760, 24) = 0 [pid 6129] chdir("./44") = 0 [pid 6129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6129] setpgid(0, 0) = 0 [pid 6129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6129] write(3, "1000", 4 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6130 attached [pid 6129] <... write resumed>) = 4 [pid 6129] close(3) = 0 [pid 6129] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6129] write(1, "executing program\n", 18 [pid 6130] set_robust_list(0x555584a2d760, 24 [pid 6129] <... write resumed>) = 18 [pid 6129] memfd_create("syzkaller", 0 [pid 6130] <... set_robust_list resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6130 [pid 6130] chdir("./45") = 0 [pid 6129] <... memfd_create resumed>) = 3 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6130] <... prctl resumed>) = 0 [pid 6130] setpgid(0, 0 [pid 6129] <... mmap resumed>) = 0x7feda9000000 [pid 6130] <... setpgid resumed>) = 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6130] write(1, "executing program\n", 18) = 18 [pid 6130] memfd_create("syzkaller", 0) = 3 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6131 attached , child_tidptr=0x555584a2d750) = 6131 [pid 6131] set_robust_list(0x555584a2d760, 24) = 0 [pid 6131] chdir("./45") = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0) = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6131] write(3, "1000", 4) = 4 [pid 6131] close(3) = 0 [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6131] write(1, "executing program\n", 18executing program ) = 18 [pid 6131] memfd_create("syzkaller", 0) = 3 [pid 6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6132 attached [pid 6132] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6132 [pid 6132] <... set_robust_list resumed>) = 0 [pid 6132] chdir("./44") = 0 [pid 6127] <... write resumed>) = 16777216 [pid 6132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6132] setpgid(0, 0) = 0 [pid 6132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6132] write(3, "1000", 4) = 4 [pid 6132] close(3) = 0 [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6132] write(1, "executing program\n", 18executing program ) = 18 [pid 6132] memfd_create("syzkaller", 0) = 3 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6127] munmap(0x7feda9000000, 138412032 [pid 6132] <... mmap resumed>) = 0x7feda9000000 [pid 6127] <... munmap resumed>) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6127] close(3) = 0 [pid 6127] close(4) = 0 [pid 6127] mkdir("./file0", 0777) = 0 [pid 6127] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 254.897124][ T6127] loop3: detected capacity change from 0 to 32768 [ 254.932276][ T6127] [ 254.932276][ T6127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.932276][ T6127] [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6127] <... mount resumed>) = 0 [pid 6127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6127] chdir("./file0") = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6127] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 254.984244][ T6127] [ 254.984244][ T6127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.984244][ T6127] [pid 6130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6127] <... lsetxattr resumed>) = 0 [pid 6127] exit_group(0) = ? [pid 6127] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5850] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", [pid 6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 255.039993][ T6127] [ 255.039993][ T6127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.039993][ T6127] [ 255.072469][ T113] [ 255.072469][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.072469][ T113] [pid 5850] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./43/binderfs") = 0 [ 255.140548][ T5850] [ 255.140548][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.140548][ T5850] [ 255.160248][ T5850] [ 255.160248][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.160248][ T5850] [pid 5850] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 255.198653][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.205143][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [pid 5850] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6128] <... write resumed>) = 16777216 [pid 5850] getdents64(4, [pid 6128] munmap(0x7feda9000000, 138412032 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./43/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6128] <... munmap resumed>) = 0 [pid 6129] <... write resumed>) = 16777216 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] close(3) = 0 [pid 5850] rmdir("./43") = 0 [pid 6129] munmap(0x7feda9000000, 138412032 [pid 5850] mkdir("./44", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6128] <... openat resumed>) = 4 [pid 6128] ioctl(4, LOOP_SET_FD, 3 [pid 6129] <... munmap resumed>) = 0 [pid 6128] <... ioctl resumed>) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6128] close(3) = 0 [pid 6128] close(4 [pid 6129] <... openat resumed>) = 4 [pid 6128] <... close resumed>) = 0 [pid 6129] ioctl(4, LOOP_SET_FD, 3 [pid 6128] mkdir("./file0", 0777) = 0 [ 255.393922][ T6128] loop0: detected capacity change from 0 to 32768 [pid 6128] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6130] <... write resumed>) = 16777216 [pid 6129] <... ioctl resumed>) = 0 [pid 6129] close(3) = 0 [pid 6129] close(4) = 0 [pid 6130] munmap(0x7feda9000000, 138412032 [ 255.454603][ T6129] loop5: detected capacity change from 0 to 32768 [ 255.464290][ T6128] [ 255.464290][ T6128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.464290][ T6128] [pid 6129] mkdir("./file0", 0777) = 0 [pid 6128] <... mount resumed>) = 0 [pid 6128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6128] chdir("./file0") = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6128] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6129] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6130] <... munmap resumed>) = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 255.514185][ T6128] [ 255.514185][ T6128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.514185][ T6128] [ 255.535829][ T6128] [ 255.535829][ T6128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.535829][ T6128] [ 255.547305][ T6129] [ 255.547305][ T6129] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.547305][ T6129] [pid 6130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6129] <... mount resumed>) = 0 [pid 6129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6129] chdir("./file0") = 0 [pid 6131] <... write resumed>) = 16777216 [pid 6130] close(3 [pid 6129] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6128] <... lsetxattr resumed>) = 0 [pid 6129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6129] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6128] exit_group(0) = ? [pid 6128] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6130] <... close resumed>) = 0 [pid 6131] munmap(0x7feda9000000, 138412032 [pid 6130] close(4) = 0 [pid 5847] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6130] mkdir("./file0", 0777) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 255.581103][ T6130] loop1: detected capacity change from 0 to 32768 [ 255.590701][ T112] [ 255.590701][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.590701][ T112] [ 255.610896][ T6129] [ 255.610896][ T6129] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.610896][ T6129] [pid 5847] newfstatat(3, "", [pid 6130] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./44/binderfs") = 0 [pid 5847] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6131] <... munmap resumed>) = 0 [pid 6132] <... write resumed>) = 16777216 [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6129] <... lsetxattr resumed>) = 0 [pid 6132] munmap(0x7feda9000000, 138412032 [pid 6131] <... openat resumed>) = 4 [ 255.639283][ T5847] [ 255.639283][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.639283][ T5847] [ 255.646932][ T6129] [ 255.646932][ T6129] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.646932][ T6129] [ 255.674983][ T113] [ 255.674983][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.674983][ T113] [pid 6129] exit_group(0 [pid 6131] ioctl(4, LOOP_SET_FD, 3 [pid 6129] <... exit_group resumed>) = ? [pid 6129] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6129, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5852] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./44/binderfs") = 0 [pid 5852] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6132] <... munmap resumed>) = 0 [pid 6131] <... ioctl resumed>) = 0 [pid 6132] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6131] close(3) = 0 [pid 6132] <... openat resumed>) = 4 [ 255.676180][ T6131] loop4: detected capacity change from 0 to 32768 [ 255.698611][ T5847] [ 255.698611][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.698611][ T5847] [ 255.719830][ T5852] [ 255.719830][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.719830][ T5852] [ 255.730812][ T6130] [ 255.730812][ T6130] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6131] close(4 [pid 6132] ioctl(4, LOOP_SET_FD, 3 [pid 6131] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6131] mkdir("./file0", 0777 [pid 5850] <... close resumed>) = 0 [pid 5847] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6131] <... mkdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6131] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] newfstatat(AT_FDCWD, "./44/file0", [pid 6132] <... ioctl resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, ./strace-static-x86_64: Process 6133 attached [pid 6132] close(3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6133] set_robust_list(0x555584a2d760, 24 [pid 6132] <... close resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6133 [pid 5847] getdents64(4, [pid 6133] <... set_robust_list resumed>) = 0 [pid 6132] close(4 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6133] chdir("./44" [pid 6132] <... close resumed>) = 0 [pid 5847] close(4 [pid 6133] <... chdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] rmdir("./44/file0" [pid 6133] <... prctl resumed>) = 0 [ 255.730812][ T6130] [ 255.741420][ T5852] [ 255.741420][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.741420][ T5852] [ 255.742212][ T6132] loop2: detected capacity change from 0 to 32768 [pid 6132] mkdir("./file0", 0777 [pid 6130] <... mount resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6133] setpgid(0, 0 [pid 6132] <... mkdir resumed>) = 0 [pid 5847] getdents64(3, [pid 6133] <... setpgid resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] close(3) = 0 [pid 5847] rmdir("./44" [pid 6133] <... openat resumed>) = 3 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./45", 0777) = 0 [pid 6132] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... umount2 resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6133] write(3, "1000", 4 [pid 6130] <... openat resumed>) = 3 [pid 5852] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6133] <... write resumed>) = 4 [pid 6130] chdir("./file0" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 3 [pid 6133] close(3 [pid 6130] <... chdir resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./44/file0", [pid 6133] <... close resumed>) = 0 [pid 6130] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6133] symlink("/dev/binderfs", "./binderfs" [pid 5852] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6133] <... symlink resumed>) = 0 [pid 6131] <... mount resumed>) = 0 [pid 6130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... ioctl resumed>) = 0 [pid 6133] write(1, "executing program\n", 18 [pid 5847] close(3 [pid 6133] <... write resumed>) = 18 [pid 6133] memfd_create("syzkaller", 0) = 3 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6130] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6131] <... openat resumed>) = 3 [pid 5852] newfstatat(4, "", [pid 6131] chdir("./file0" [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6131] <... chdir resumed>) = 0 [pid 5852] getdents64(4, [pid 6131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 255.785063][ T6131] [ 255.785063][ T6131] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.785063][ T6131] [ 255.807510][ T6132] [ 255.807510][ T6132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.807510][ T6132] [ 255.819422][ T6130] [ 255.819422][ T6130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.819422][ T6130] [pid 6132] <... mount resumed>) = 0 [pid 6131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] getdents64(4, [pid 6132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6131] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6130] <... lsetxattr resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 6132] <... openat resumed>) = 3 [pid 6132] chdir("./file0" [pid 5852] rmdir("./44/file0" [pid 6130] exit_group(0 [pid 5852] <... rmdir resumed>) = 0 [pid 6132] <... chdir resumed>) = 0 [pid 6130] <... exit_group resumed>) = ? [ 255.844368][ T6130] [ 255.844368][ T6130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.844368][ T6130] [ 255.856738][ T112] [ 255.856738][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.856738][ T112] [ 255.871306][ T6131] [ 255.871306][ T6131] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.871306][ T6131] [ 255.887507][ T6131] [pid 6132] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6130] +++ exited with 0 +++ [pid 5852] getdents64(3, [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./45/binderfs") = 0 [pid 5848] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6132] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] close(3) = 0 [pid 5852] rmdir("./44" [pid 6132] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./45", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6131] <... lsetxattr resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [ 255.887507][ T6131] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.887507][ T6131] [ 255.900387][ T6132] [ 255.900387][ T6132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.900387][ T6132] [ 255.912351][ T5848] [ 255.912351][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.912351][ T5848] [ 255.920571][ T6132] [ 255.920571][ T6132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.920571][ T6132] [ 255.941556][ T113] [pid 6132] <... lsetxattr resumed>) = 0 [pid 6131] exit_group(0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6132] exit_group(0 [pid 6131] <... exit_group resumed>) = ? [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 6131] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./45/binderfs") = 0 [pid 5851] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6132] <... exit_group resumed>) = ? [pid 6132] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6132, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5849] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./44/binderfs") = 0 [ 255.941556][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.941556][ T113] [ 255.952958][ T112] [ 255.952958][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.952958][ T112] [ 255.982527][ T5848] [ 255.982527][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.982527][ T5848] [ 256.012224][ T5851] [ 256.012224][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.012224][ T5851] [ 256.029095][ T5849] [ 256.029095][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.029095][ T5849] [ 256.052742][ T5851] [ 256.052742][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5849] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./45/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./45") = 0 [pid 5848] mkdir("./46", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 256.052742][ T5851] [ 256.076000][ T5849] [ 256.076000][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.076000][ T5849] [pid 5848] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./45/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./45") = 0 [pid 5851] mkdir("./46", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./44/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./44") = 0 [pid 5849] mkdir("./45", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5847] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6134 ./strace-static-x86_64: Process 6134 attached [pid 6134] set_robust_list(0x555584a2d760, 24) = 0 [pid 6134] chdir("./45") = 0 [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6134] setpgid(0, 0) = 0 [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6134] write(3, "1000", 4) = 4 [pid 6134] close(3) = 0 [pid 6134] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6134] write(1, "executing program\n", 18) = 18 [pid 6134] memfd_create("syzkaller", 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6135 attached [pid 6134] <... memfd_create resumed>) = 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6135 [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6135] set_robust_list(0x555584a2d760, 24) = 0 [pid 6135] chdir("./45") = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6135] write(3, "1000", 4) = 4 [pid 6135] close(3) = 0 [pid 6135] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6135] write(1, "executing program\n", 18) = 18 [pid 6135] memfd_create("syzkaller", 0) = 3 [pid 6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6136 attached , child_tidptr=0x555584a2d750) = 6136 [pid 6136] set_robust_list(0x555584a2d760, 24) = 0 [pid 6136] chdir("./46") = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 executing program [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6136] write(3, "1000", 4) = 4 [pid 6136] close(3) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6136] write(1, "executing program\n", 18) = 18 [pid 6136] memfd_create("syzkaller", 0) = 3 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6137 ./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x555584a2d760, 24 [pid 5849] <... close resumed>) = 0 [pid 6137] <... set_robust_list resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6137] chdir("./46") = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6138 ./strace-static-x86_64: Process 6138 attached [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6138] set_robust_list(0x555584a2d760, 24 [pid 6137] <... prctl resumed>) = 0 [pid 6137] setpgid(0, 0 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6137] <... setpgid resumed>) = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6138] chdir("./45" [pid 6137] <... openat resumed>) = 3 [pid 6138] <... chdir resumed>) = 0 [pid 6137] write(3, "1000", 4 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6137] <... write resumed>) = 4 [pid 6138] <... prctl resumed>) = 0 [pid 6137] close(3 [pid 6138] setpgid(0, 0 [pid 6137] <... close resumed>) = 0 [pid 6138] <... setpgid resumed>) = 0 [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6137] symlink("/dev/binderfs", "./binderfs" [pid 6138] write(3, "1000", 4 [pid 6137] <... symlink resumed>) = 0 [pid 6138] <... write resumed>) = 4 [pid 6138] close(3) = 0 [pid 6138] symlink("/dev/binderfs", "./binderfs" [pid 6137] write(1, "executing program\n", 18 [pid 6138] <... symlink resumed>) = 0 executing program [pid 6137] <... write resumed>) = 18 [pid 6138] write(1, "executing program\n", 18executing program ) = 18 [pid 6138] memfd_create("syzkaller", 0 [pid 6137] memfd_create("syzkaller", 0 [pid 6138] <... memfd_create resumed>) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6137] <... memfd_create resumed>) = 3 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6138] <... mmap resumed>) = 0x7feda9000000 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6133] <... write resumed>) = 16777216 [pid 6133] munmap(0x7feda9000000, 138412032) = 0 [pid 6133] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6133] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6133] close(3) = 0 [pid 6133] close(4) = 0 [pid 6133] mkdir("./file0", 0777) = 0 [ 256.610829][ T6133] loop3: detected capacity change from 0 to 32768 [pid 6133] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6133] <... mount resumed>) = 0 [ 256.652316][ T6133] [ 256.652316][ T6133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.652316][ T6133] [pid 6133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6133] chdir("./file0") = 0 [pid 6133] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 256.703338][ T6133] [ 256.703338][ T6133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.703338][ T6133] [pid 6133] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6133] <... lsetxattr resumed>) = 0 [pid 6133] exit_group(0) = ? [pid 6133] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./44/binderfs") = 0 [ 256.750059][ T6133] [ 256.750059][ T6133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.750059][ T6133] [ 256.784644][ T112] [ 256.784644][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.784644][ T112] [pid 5850] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./44/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./44") = 0 [ 256.830380][ T5850] [ 256.830380][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.830380][ T5850] [ 256.853825][ T5850] [ 256.853825][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.853825][ T5850] [pid 5850] mkdir("./45", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6134] <... write resumed>) = 16777216 [pid 6134] munmap(0x7feda9000000, 138412032) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] close(4) = 0 [pid 6134] mkdir("./file0", 0777) = 0 [ 257.091364][ T6134] loop0: detected capacity change from 0 to 32768 [pid 6134] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6134] chdir("./file0") = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 257.154573][ T6134] [ 257.154573][ T6134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.154573][ T6134] [ 257.200589][ T6134] [ 257.200589][ T6134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.200589][ T6134] [ 257.240474][ T6134] [ 257.240474][ T6134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.240474][ T6134] [pid 6134] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6135] <... write resumed>) = 16777216 [pid 5850] <... close resumed>) = 0 [pid 6135] munmap(0x7feda9000000, 138412032 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6139 attached [pid 6138] <... write resumed>) = 16777216 [pid 6137] <... write resumed>) = 16777216 [pid 6136] <... write resumed>) = 16777216 [pid 6134] <... lsetxattr resumed>) = 0 [pid 6139] set_robust_list(0x555584a2d760, 24) = 0 [pid 6138] munmap(0x7feda9000000, 138412032 [pid 6137] munmap(0x7feda9000000, 138412032 [pid 6136] munmap(0x7feda9000000, 138412032 [pid 6134] exit_group(0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6139 [pid 6139] chdir("./45" [pid 6134] <... exit_group resumed>) = ? [pid 6139] <... chdir resumed>) = 0 [pid 6134] +++ exited with 0 +++ [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6134, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 6139] <... prctl resumed>) = 0 [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6139] setpgid(0, 0) = 0 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6139] write(3, "1000", 4) = 4 [pid 6139] close(3) = 0 [pid 6139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6135] <... munmap resumed>) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 6135] openat(AT_FDCWD, "/dev/loop5", O_RDWRexecuting program [pid 5847] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6139] write(1, "executing program\n", 18 [pid 6135] <... openat resumed>) = 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] <... write resumed>) = 18 [pid 5847] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] memfd_create("syzkaller", 0 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [pid 6139] <... memfd_create resumed>) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] getdents64(3, [pid 6139] <... mmap resumed>) = 0x7feda9000000 [pid 6138] <... munmap resumed>) = 0 [pid 6135] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6137] <... munmap resumed>) = 0 [pid 5847] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./45/binderfs") = 0 [ 257.270899][ T113] [ 257.270899][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.270899][ T113] [ 257.310781][ T6135] loop5: detected capacity change from 0 to 32768 [ 257.317758][ T5847] [pid 5847] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6138] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6136] <... munmap resumed>) = 0 [pid 6135] <... ioctl resumed>) = 0 [pid 6137] <... openat resumed>) = 4 [pid 6135] close(3 [pid 6136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6138] <... openat resumed>) = 4 [pid 6137] ioctl(4, LOOP_SET_FD, 3 [pid 6135] <... close resumed>) = 0 [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 6135] close(4 [pid 6136] <... openat resumed>) = 4 [pid 6136] ioctl(4, LOOP_SET_FD, 3 [pid 6137] <... ioctl resumed>) = 0 [pid 6135] <... close resumed>) = 0 [pid 6137] close(3 [pid 6135] mkdir("./file0", 0777) = 0 [pid 6137] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] close(4 [pid 6135] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 257.317758][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.317758][ T5847] [ 257.335838][ T5847] [ 257.335838][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.335838][ T5847] [ 257.347275][ T6137] loop4: detected capacity change from 0 to 32768 [ 257.349562][ T6136] loop1: detected capacity change from 0 to 32768 [ 257.354388][ T6138] loop2: detected capacity change from 0 to 32768 [pid 6138] <... ioctl resumed>) = 0 [pid 6137] <... close resumed>) = 0 [pid 5847] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./45/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 6137] mkdir("./file0", 0777 [pid 5847] rmdir("./45" [pid 6138] close(3 [pid 6137] <... mkdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6138] <... close resumed>) = 0 [pid 6137] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] mkdir("./46", 0777) = 0 [pid 6138] close(4) = 0 [pid 6136] <... ioctl resumed>) = 0 [pid 6138] mkdir("./file0", 0777 [pid 6136] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6136] close(4 [pid 5847] <... openat resumed>) = 3 [pid 6136] <... close resumed>) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6136] mkdir("./file0", 0777 [pid 5847] <... ioctl resumed>) = 0 [pid 6136] <... mkdir resumed>) = 0 [pid 5847] close(3 [pid 6138] <... mkdir resumed>) = 0 [pid 6138] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 257.387213][ T6135] [ 257.387213][ T6135] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.387213][ T6135] [ 257.404734][ T6137] [ 257.404734][ T6137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.404734][ T6137] [ 257.431326][ T6136] [pid 6136] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6137] <... mount resumed>) = 0 [pid 6137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6135] <... mount resumed>) = 0 [pid 6137] <... openat resumed>) = 3 [pid 6135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] chdir("./file0" [pid 6135] chdir("./file0" [pid 6137] <... chdir resumed>) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6136] <... mount resumed>) = 0 [pid 6135] <... chdir resumed>) = 0 [pid 6136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6136] chdir("./file0") = 0 [pid 6136] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6136] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6135] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6138] <... mount resumed>) = 0 [pid 6137] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 257.431326][ T6136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.431326][ T6136] [ 257.442693][ T6138] [ 257.442693][ T6138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.442693][ T6138] [ 257.475107][ T6136] [ 257.475107][ T6136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.475107][ T6136] [pid 6135] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6138] <... openat resumed>) = 3 [pid 6138] chdir("./file0") = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 257.500791][ T6137] [ 257.500791][ T6137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.500791][ T6137] [ 257.512018][ T6135] [ 257.512018][ T6135] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.512018][ T6135] [ 257.512606][ T6136] [ 257.512606][ T6136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.512606][ T6136] [ 257.540027][ T6135] [ 257.540027][ T6135] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.540027][ T6135] [pid 6138] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6136] <... lsetxattr resumed>) = 0 [pid 6136] exit_group(0) = ? [pid 6136] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=35 /* 0.35 s */} --- [pid 6135] <... lsetxattr resumed>) = 0 [ 257.550791][ T6137] [ 257.550791][ T6137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.550791][ T6137] [ 257.561726][ T6138] [ 257.561726][ T6138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.561726][ T6138] [ 257.577010][ T6138] [ 257.577010][ T6138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.577010][ T6138] [ 257.588176][ T112] [ 257.588176][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.588176][ T112] [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6138] <... lsetxattr resumed>) = 0 [pid 6137] <... lsetxattr resumed>) = 0 [pid 6135] exit_group(0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 6135] <... exit_group resumed>) = ? [pid 6138] exit_group(0 [pid 6137] exit_group(0 [pid 6135] +++ exited with 0 +++ [pid 5848] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6137] <... exit_group resumed>) = ? [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5848] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6138] <... exit_group resumed>) = ? [pid 5852] <... restart_syscall resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./46/binderfs" [pid 5852] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6137] +++ exited with 0 +++ [pid 5852] getdents64(3, [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./46/binderfs" [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... unlink resumed>) = 0 [pid 5852] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6138] +++ exited with 0 +++ [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./45/binderfs") = 0 [pid 5849] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [ 257.607661][ T113] [ 257.607661][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.607661][ T113] [ 257.640848][ T112] [ 257.640848][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.640848][ T112] [pid 5852] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 257.665981][ T5848] [ 257.665981][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.665981][ T5848] [ 257.680095][ T5852] [ 257.680095][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.680095][ T5852] [ 257.680324][ T113] [ 257.680324][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.680324][ T113] [ 257.697513][ T5852] [ 257.697513][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.697513][ T5852] [ 257.713816][ T5851] [pid 5849] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./45/binderfs") = 0 [ 257.713816][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.713816][ T5851] [ 257.724596][ T5848] [ 257.724596][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.724596][ T5848] [ 257.729534][ T5851] [ 257.729534][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.729534][ T5851] [ 257.760953][ T5849] [pid 5849] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6140 attached ) = -1 EINVAL (Invalid argument) [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6140 [pid 6140] set_robust_list(0x555584a2d760, 24 [pid 5852] newfstatat(AT_FDCWD, "./45/file0", [pid 5848] newfstatat(AT_FDCWD, "./46/file0", [pid 6140] <... set_robust_list resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6140] chdir("./46" [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6140] <... chdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6140] <... prctl resumed>) = 0 [pid 6140] setpgid(0, 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 4 [pid 6140] <... setpgid resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6140] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 4 [pid 5848] getdents64(4, [pid 6140] write(3, "1000", 4) = 4 [pid 5852] newfstatat(4, "", [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6140] close(3 [pid 5848] getdents64(4, [pid 6140] <... close resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 6140] symlink("/dev/binderfs", "./binderfs" [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6140] <... symlink resumed>) = 0 [pid 5852] getdents64(4, [pid 5851] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(4 [pid 6140] write(1, "executing program\n", 18executing program [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6140] <... write resumed>) = 18 [pid 5852] getdents64(4, [pid 5851] newfstatat(AT_FDCWD, "./46/file0", [pid 5848] rmdir("./46/file0" [pid 6140] memfd_create("syzkaller", 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6140] <... memfd_create resumed>) = 3 [pid 5852] close(4 [pid 5851] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... rmdir resumed>) = 0 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(3, [pid 6140] <... mmap resumed>) = 0x7feda9000000 [pid 5852] rmdir("./45/file0" [pid 5851] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... rmdir resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [ 257.760953][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.760953][ T5849] [ 257.773297][ T5849] [ 257.773297][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 257.773297][ T5849] [pid 5849] newfstatat(AT_FDCWD, "./45/file0", [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] getdents64(3, [pid 5851] newfstatat(4, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] close(3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./46" [pid 5852] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] getdents64(4, [pid 5852] rmdir("./45" [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... rmdir resumed>) = 0 [pid 5851] getdents64(4, [pid 5852] mkdir("./46", 0777 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./46/file0" [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] <... rmdir resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 5852] close(3 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./46" [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./47", 0777 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] mkdir("./47", 0777) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5849] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", [pid 5848] <... mkdir resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5849] getdents64(4, [pid 5848] <... ioctl resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./45/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./45") = 0 [pid 5849] mkdir("./46", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6139] <... write resumed>) = 16777216 [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6139] munmap(0x7feda9000000, 138412032) = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] <... close resumed>) = 0 [pid 6139] close(3) = 0 [pid 6139] close(4) = 0 [pid 6139] mkdir("./file0", 0777) = 0 [pid 6139] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6141 ./strace-static-x86_64: Process 6141 attached [pid 6141] set_robust_list(0x555584a2d760, 24 [pid 5852] <... close resumed>) = 0 [pid 6141] <... set_robust_list resumed>) = 0 [pid 6141] chdir("./47") = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6142 [pid 6141] <... prctl resumed>) = 0 [pid 6141] setpgid(0, 0) = 0 [ 258.135256][ T6139] loop3: detected capacity change from 0 to 32768 [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6141] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6142 attached [pid 6141] close(3 [pid 6142] set_robust_list(0x555584a2d760, 24 [pid 6141] <... close resumed>) = 0 [pid 6142] <... set_robust_list resumed>) = 0 [pid 6142] chdir("./46" [pid 6141] symlink("/dev/binderfs", "./binderfs" [pid 6142] <... chdir resumed>) = 0 [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6141] <... symlink resumed>) = 0 [pid 6142] setpgid(0, 0executing program [pid 6141] write(1, "executing program\n", 18) = 18 [pid 6142] <... setpgid resumed>) = 0 [pid 6141] memfd_create("syzkaller", 0 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6141] <... memfd_create resumed>) = 3 [pid 6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6142] write(3, "1000", 4executing program [pid 6141] <... mmap resumed>) = 0x7feda9000000 [pid 6142] <... write resumed>) = 4 [pid 6142] close(3) = 0 [pid 6142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6142] write(1, "executing program\n", 18) = 18 [pid 6142] memfd_create("syzkaller", 0) = 3 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 258.179768][ T6139] [ 258.179768][ T6139] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.179768][ T6139] [pid 6139] <... mount resumed>) = 0 [pid 6139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6139] chdir("./file0") = 0 [pid 6139] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6139] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... close resumed>) = 0 [pid 6139] <... lsetxattr resumed>) = 0 [ 258.222917][ T6139] [ 258.222917][ T6139] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.222917][ T6139] [ 258.260077][ T6139] [ 258.260077][ T6139] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.260077][ T6139] [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6139] exit_group(0) = ? [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6143 ./strace-static-x86_64: Process 6143 attached [pid 6143] set_robust_list(0x555584a2d760, 24) = 0 [pid 6143] chdir("./46" [pid 5848] <... close resumed>) = 0 [pid 6143] <... chdir resumed>) = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0 [pid 6139] +++ exited with 0 +++ [pid 6143] <... setpgid resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6144 attached [pid 6143] <... openat resumed>) = 3 [pid 6143] write(3, "1000", 4) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] write(1, "executing program\n", 18 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6144 [pid 6144] set_robust_list(0x555584a2d760, 24) = 0 [pid 6143] <... write resumed>) = 18 [pid 6143] memfd_create("syzkaller", 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 6144] chdir("./47" [pid 5850] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6143] <... memfd_create resumed>) = 3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6144] <... chdir resumed>) = 0 [pid 6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 6144] setpgid(0, 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6144] <... setpgid resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./45/binderfs", [pid 6144] <... openat resumed>) = 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./45/binderfs") = 0 [pid 6144] write(3, "1000", 4 [pid 6143] <... mmap resumed>) = 0x7feda9000000 [pid 5850] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] <... write resumed>) = 4 [ 258.292702][ T112] [ 258.292702][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.292702][ T112] [pid 6144] close(3) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6144] write(1, "executing program\n", 18) = 18 [pid 6144] memfd_create("syzkaller", 0) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 258.360568][ T5850] [ 258.360568][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.360568][ T5850] [ 258.381042][ T5850] [ 258.381042][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.381042][ T5850] [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./45/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./45") = 0 [pid 5850] mkdir("./46", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6140] <... write resumed>) = 16777216 [pid 6140] munmap(0x7feda9000000, 138412032 [pid 6143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6140] <... munmap resumed>) = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6140] close(3) = 0 [pid 6140] close(4) = 0 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6140] mkdir("./file0", 0777) = 0 [ 258.663412][ T6140] loop0: detected capacity change from 0 to 32768 [pid 6140] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6145 attached , child_tidptr=0x555584a2d750) = 6145 [pid 6145] set_robust_list(0x555584a2d760, 24) = 0 [pid 6145] chdir("./46") = 0 [pid 6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6145] setpgid(0, 0) = 0 [pid 6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6145] write(3, "1000", 4) = 4 [pid 6145] close(3) = 0 [pid 6145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6145] write(1, "executing program\n", 18executing program ) = 18 [pid 6145] memfd_create("syzkaller", 0) = 3 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6140] <... mount resumed>) = 0 [pid 6140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 258.804452][ T6140] [ 258.804452][ T6140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.804452][ T6140] [pid 6140] chdir("./file0") = 0 [pid 6140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 258.860534][ T6140] [ 258.860534][ T6140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.860534][ T6140] [ 258.900228][ T6140] [ 258.900228][ T6140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.900228][ T6140] [pid 6140] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6140] exit_group(0) = ? [pid 6140] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6140, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6142] <... write resumed>) = 16777216 [pid 5847] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./46/binderfs") = 0 [pid 5847] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 258.931785][ T113] [ 258.931785][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.931785][ T113] [pid 6142] munmap(0x7feda9000000, 138412032 [pid 6141] <... write resumed>) = 16777216 [pid 6141] munmap(0x7feda9000000, 138412032 [pid 6142] <... munmap resumed>) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6141] <... munmap resumed>) = 0 [ 258.999870][ T5847] [ 258.999870][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.999870][ T5847] [ 259.032212][ T5847] [ 259.032212][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.032212][ T5847] [pid 6142] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6141] ioctl(4, LOOP_SET_FD, 3 [pid 6142] close(3) = 0 [pid 6142] close(4) = 0 [pid 6142] mkdir("./file0", 0777) = 0 [pid 6142] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6141] <... ioctl resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6141] close(3 [pid 5847] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6141] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] close(4 [pid 5847] newfstatat(AT_FDCWD, "./46/file0", [pid 6141] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6141] mkdir("./file0", 0777 [pid 5847] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6141] <... mkdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6143] <... write resumed>) = 16777216 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./46/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 259.051297][ T6142] loop5: detected capacity change from 0 to 32768 [ 259.059339][ T6141] loop4: detected capacity change from 0 to 32768 [pid 6143] munmap(0x7feda9000000, 138412032 [pid 5847] close(3) = 0 [pid 5847] rmdir("./46") = 0 [pid 5847] mkdir("./47", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 259.107449][ T6142] [ 259.107449][ T6142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.107449][ T6142] [ 259.107500][ T6141] [ 259.107500][ T6141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.107500][ T6141] [pid 5847] close(3 [pid 6142] <... mount resumed>) = 0 [pid 6142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6142] chdir("./file0") = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6142] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6143] <... munmap resumed>) = 0 [pid 6144] <... write resumed>) = 16777216 [pid 6143] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6143] ioctl(4, LOOP_SET_FD, 3 [pid 6141] <... mount resumed>) = 0 [pid 6141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 259.171532][ T6142] [ 259.171532][ T6142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.171532][ T6142] [ 259.201499][ T6143] loop2: detected capacity change from 0 to 32768 [ 259.204148][ T6141] [ 259.204148][ T6141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.204148][ T6141] [pid 6141] chdir("./file0") = 0 [pid 6141] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6141] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6144] munmap(0x7feda9000000, 138412032 [pid 6143] <... ioctl resumed>) = 0 [pid 6143] close(3) = 0 [pid 6143] close(4) = 0 [pid 6143] mkdir("./file0", 0777 [pid 6144] <... munmap resumed>) = 0 [pid 6143] <... mkdir resumed>) = 0 [ 259.219677][ T6142] [ 259.219677][ T6142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.219677][ T6142] [ 259.247962][ T6141] [ 259.247962][ T6141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.247962][ T6141] [pid 6143] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6141] <... lsetxattr resumed>) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6142] <... lsetxattr resumed>) = 0 [pid 6144] <... openat resumed>) = 4 [pid 6142] exit_group(0 [pid 6144] ioctl(4, LOOP_SET_FD, 3 [pid 6142] <... exit_group resumed>) = ? [pid 6142] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 6141] exit_group(0 [pid 5852] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6141] <... exit_group resumed>) = ? [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] +++ exited with 0 +++ [pid 5852] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./46/binderfs") = 0 [ 259.277160][ T112] [ 259.277160][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.277160][ T112] [ 259.291732][ T113] [ 259.291732][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.291732][ T113] [ 259.293220][ T6144] loop1: detected capacity change from 0 to 32768 [ 259.322668][ T6143] [pid 5852] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] <... ioctl resumed>) = 0 [pid 6144] close(3 [pid 5851] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6144] close(4 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", [pid 6144] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6144] mkdir("./file0", 0777 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6144] <... mkdir resumed>) = 0 [pid 5851] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6144] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6143] <... mount resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] newfstatat(AT_FDCWD, "./47/binderfs", [pid 6143] <... openat resumed>) = 3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6143] chdir("./file0" [pid 5851] unlink("./47/binderfs") = 0 [ 259.322668][ T6143] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.322668][ T6143] [ 259.352825][ T5852] [ 259.352825][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.352825][ T5852] [ 259.372815][ T5852] [pid 6143] <... chdir resumed>) = 0 [pid 5851] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6143] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6143] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 259.372815][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.372815][ T5852] [ 259.385573][ T5851] [ 259.385573][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.385573][ T5851] [ 259.397409][ T6143] [ 259.397409][ T6143] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.397409][ T6143] [ 259.410064][ T6143] [ 259.410064][ T6143] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.410064][ T6143] [ 259.421173][ T5851] [pid 5852] close(4) = 0 [pid 5852] rmdir("./46/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./46") = 0 [pid 5852] mkdir("./47", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6143] <... lsetxattr resumed>) = 0 [pid 6144] <... mount resumed>) = 0 [pid 6144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6143] exit_group(0 [pid 6144] <... openat resumed>) = 3 [pid 6144] chdir("./file0" [pid 6143] <... exit_group resumed>) = ? [pid 6144] <... chdir resumed>) = 0 [pid 6143] +++ exited with 0 +++ [ 259.421173][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.421173][ T5851] [ 259.442326][ T6144] [ 259.442326][ T6144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.442326][ T6144] [ 259.465663][ T113] [ 259.465663][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.465663][ T113] [pid 5847] <... close resumed>) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] <... umount2 resumed>) = 0 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 6144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6144] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./47/file0", [pid 5849] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6146 attached ) = -1 EINVAL (Invalid argument) [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6146 [pid 5849] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] set_robust_list(0x555584a2d760, 24 [pid 5849] <... openat resumed>) = 3 [pid 6146] <... set_robust_list resumed>) = 0 [pid 5849] newfstatat(3, "", [pid 6146] chdir("./47" [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6146] <... chdir resumed>) = 0 [pid 5849] getdents64(3, [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6146] <... prctl resumed>) = 0 [pid 5849] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6146] setpgid(0, 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] <... setpgid resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./46/binderfs", [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./46/binderfs") = 0 [pid 6146] <... openat resumed>) = 3 [pid 5849] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6146] write(3, "1000", 4) = 4 [pid 6146] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6146] <... close resumed>) = 0 [pid 5851] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6146] symlink("/dev/binderfs", "./binderfs" [pid 5851] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6146] <... symlink resumed>) = 0 [pid 6146] write(1, "executing program\n", 18) = 18 [pid 6146] memfd_create("syzkaller", 0) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 259.504222][ T6144] [ 259.504222][ T6144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.504222][ T6144] [ 259.525784][ T5849] [ 259.525784][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.525784][ T5849] [ 259.544621][ T6144] [ 259.544621][ T6144] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./47/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./47") = 0 [pid 5851] mkdir("./48", 0777 [pid 6144] <... lsetxattr resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 6144] exit_group(0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6144] <... exit_group resumed>) = ? [pid 5851] <... openat resumed>) = 3 [pid 6144] +++ exited with 0 +++ [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] <... ioctl resumed>) = 0 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [ 259.544621][ T6144] [ 259.560407][ T5849] [ 259.560407][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.560407][ T5849] [ 259.586120][ T112] [ 259.586120][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.586120][ T112] [pid 5851] close(3 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... openat resumed>) = 4 [pid 5848] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5849] getdents64(4, [pid 5848] newfstatat(3, "", [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5848] getdents64(3, [pid 5849] <... close resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] rmdir("./46/file0" [pid 5848] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./47/binderfs") = 0 [pid 5848] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./46") = 0 [pid 5849] mkdir("./47", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6145] <... write resumed>) = 16777216 [ 259.670600][ T5848] [ 259.670600][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.670600][ T5848] [pid 6145] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6147 attached , child_tidptr=0x555584a2d750) = 6147 [pid 6147] set_robust_list(0x555584a2d760, 24) = 0 [pid 6147] chdir("./47") = 0 [pid 6147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6147] setpgid(0, 0) = 0 [pid 6147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6147] write(3, "1000", 4 [pid 6145] <... munmap resumed>) = 0 [pid 6147] <... write resumed>) = 4 [pid 6147] close(3) = 0 [pid 6147] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6147] write(1, "executing program\n", 18) = 18 [pid 6147] memfd_create("syzkaller", 0) = 3 [ 259.726983][ T5848] [ 259.726983][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.726983][ T5848] [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6145] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6145] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6145] close(3) = 0 [pid 6145] close(4) = 0 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6145] mkdir("./file0", 0777 [pid 5848] <... umount2 resumed>) = 0 [pid 6145] <... mkdir resumed>) = 0 [pid 5848] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6145] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 259.791541][ T6145] loop3: detected capacity change from 0 to 32768 [pid 5848] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6145] <... mount resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] <... openat resumed>) = 4 [pid 6145] <... openat resumed>) = 3 [pid 5848] newfstatat(4, "", [pid 6145] chdir("./file0") = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] getdents64(4, [pid 6145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... close resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 259.839139][ T6145] [ 259.839139][ T6145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.839139][ T6145] [pid 6145] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] getdents64(4, [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6148 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6148 [pid 6148] set_robust_list(0x555584a2d760, 24 [pid 5848] close(4 [pid 6148] <... set_robust_list resumed>) = 0 [pid 6145] <... lsetxattr resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6148] chdir("./48" [pid 5848] rmdir("./47/file0" [pid 6148] <... chdir resumed>) = 0 [pid 6145] exit_group(0 [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6145] <... exit_group resumed>) = ? [pid 5848] <... rmdir resumed>) = 0 [pid 6148] <... prctl resumed>) = 0 [pid 6145] +++ exited with 0 +++ [pid 6148] setpgid(0, 0 [pid 5849] <... close resumed>) = 0 [pid 5848] getdents64(3, [pid 6148] <... setpgid resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6145, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} --- [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] rmdir("./47" [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./48", 0777 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] <... mkdir resumed>) = 0 [pid 5850] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 3 [pid 5850] newfstatat(AT_FDCWD, "./46/binderfs", [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5850] unlink("./46/binderfs" [pid 5848] close(3./strace-static-x86_64: Process 6149 attached [pid 6148] <... openat resumed>) = 3 [pid 5850] <... unlink resumed>) = 0 [pid 6149] set_robust_list(0x555584a2d760, 24 [pid 6148] write(3, "1000", 4 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6149 [pid 6148] <... write resumed>) = 4 [pid 6148] close(3 [pid 6149] <... set_robust_list resumed>) = 0 [pid 6148] <... close resumed>) = 0 [pid 6149] chdir("./47" [pid 6148] symlink("/dev/binderfs", "./binderfs" [pid 6149] <... chdir resumed>) = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6148] <... symlink resumed>) = 0 [ 259.890985][ T6145] [ 259.890985][ T6145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.890985][ T6145] [ 259.902012][ T6145] [ 259.902012][ T6145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.902012][ T6145] [ 259.915741][ T112] [ 259.915741][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.915741][ T112] [pid 5850] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6149] <... prctl resumed>) = 0 [pid 6148] write(1, "executing program\n", 18 [pid 6149] setpgid(0, 0 [pid 6148] <... write resumed>) = 18 [pid 6149] <... setpgid resumed>) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] write(3, "1000", 4 [pid 6148] memfd_create("syzkaller", 0 [pid 6149] <... write resumed>) = 4 [pid 6148] <... memfd_create resumed>) = 3 [pid 6149] close(3) = 0 [pid 6149] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6149] write(1, "executing program\n", 18) = 18 [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 259.969816][ T5850] [ 259.969816][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.969816][ T5850] [ 260.030614][ T5850] [ 260.030614][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.030614][ T5850] [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./46/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./46") = 0 [pid 5850] mkdir("./47", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 6150 attached [pid 6150] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6150 [pid 6150] <... set_robust_list resumed>) = 0 [pid 6150] chdir("./48" [pid 6146] <... write resumed>) = 16777216 [pid 6150] <... chdir resumed>) = 0 [pid 6146] munmap(0x7feda9000000, 138412032 [pid 6150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6150] setpgid(0, 0) = 0 [pid 6150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6150] write(3, "1000", 4) = 4 [pid 6150] close(3) = 0 [pid 6150] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6146] <... munmap resumed>) = 0 executing program [pid 6150] write(1, "executing program\n", 18) = 18 [pid 6150] memfd_create("syzkaller", 0 [pid 6148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6150] <... memfd_create resumed>) = 3 [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6146] close(3) = 0 [pid 6146] close(4) = 0 [pid 6146] mkdir("./file0", 0777) = 0 [ 260.351151][ T6146] loop0: detected capacity change from 0 to 32768 [pid 6146] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6146] chdir("./file0") = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 260.395852][ T6146] [ 260.395852][ T6146] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.395852][ T6146] [ 260.431656][ T6146] [ 260.431656][ T6146] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.431656][ T6146] [pid 6146] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6151 attached [pid 6151] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6151 [pid 6151] <... set_robust_list resumed>) = 0 [pid 6151] chdir("./47") = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6151] setpgid(0, 0) = 0 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6151] write(3, "1000", 4) = 4 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6151] write(1, "executing program\n", 18) = 18 [ 260.470753][ T6146] [ 260.470753][ T6146] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.470753][ T6146] [pid 6151] memfd_create("syzkaller", 0) = 3 [pid 6146] <... lsetxattr resumed>) = 0 [pid 6151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6146] exit_group(0) = ? [pid 6146] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6146, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", [pid 6147] <... write resumed>) = 16777216 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./47/binderfs") = 0 [pid 5847] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 260.523151][ T113] [ 260.523151][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.523151][ T113] [ 260.555994][ T5847] [ 260.555994][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.555994][ T5847] [pid 6147] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = 0 [pid 6147] <... munmap resumed>) = 0 [pid 5847] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6147] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6147] <... openat resumed>) = 4 [pid 5847] <... openat resumed>) = 4 [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 260.577794][ T5847] [ 260.577794][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.577794][ T5847] [pid 5847] close(4) = 0 [pid 5847] rmdir("./47/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./47") = 0 [pid 5847] mkdir("./48", 0777 [pid 6147] <... ioctl resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6147] close(3) = 0 [pid 6147] close(4) = 0 [pid 6147] mkdir("./file0", 0777) = 0 [ 260.631788][ T6147] loop5: detected capacity change from 0 to 32768 [pid 6147] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6147] chdir("./file0") = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 260.731423][ T6147] [ 260.731423][ T6147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.731423][ T6147] [pid 6147] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6149] <... write resumed>) = 16777216 [ 260.771866][ T6147] [ 260.771866][ T6147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.771866][ T6147] [pid 6149] munmap(0x7feda9000000, 138412032 [pid 6147] <... lsetxattr resumed>) = 0 [pid 6147] exit_group(0) = ? [pid 6148] <... write resumed>) = 16777216 [pid 6147] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6147, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6149] <... munmap resumed>) = 0 [pid 6148] munmap(0x7feda9000000, 138412032 [pid 5852] <... restart_syscall resumed>) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./47/binderfs") = 0 [pid 5852] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6149] <... openat resumed>) = 4 [ 260.820026][ T6147] [ 260.820026][ T6147] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.820026][ T6147] [ 260.851507][ T112] [ 260.851507][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.851507][ T112] [pid 6149] ioctl(4, LOOP_SET_FD, 3 [pid 6151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6149] <... ioctl resumed>) = 0 [pid 6148] <... munmap resumed>) = 0 [pid 6149] close(3) = 0 [pid 6148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6149] close(4 [pid 6148] <... openat resumed>) = 4 [pid 6149] <... close resumed>) = 0 [pid 6148] ioctl(4, LOOP_SET_FD, 3 [pid 6149] mkdir("./file0", 0777 [pid 6148] <... ioctl resumed>) = 0 [pid 6149] <... mkdir resumed>) = 0 [pid 6149] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 260.880404][ T6149] loop2: detected capacity change from 0 to 32768 [ 260.892204][ T5852] [ 260.892204][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.892204][ T5852] [ 260.920477][ T6148] loop4: detected capacity change from 0 to 32768 [pid 6148] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6148] <... close resumed>) = 0 [pid 6148] close(4) = 0 [pid 6148] mkdir("./file0", 0777) = 0 [ 260.940782][ T5852] [ 260.940782][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.940782][ T5852] [ 260.954313][ T6149] [ 260.954313][ T6149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.954313][ T6149] [pid 6148] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"./strace-static-x86_64: Process 6152 attached [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6152 [pid 6152] set_robust_list(0x555584a2d760, 24) = 0 [pid 6152] chdir("./48") = 0 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6152] setpgid(0, 0) = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6152] <... openat resumed>) = 3 [pid 6152] write(3, "1000", 4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6152] <... write resumed>) = 4 [pid 6152] close(3) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs" [pid 5852] newfstatat(AT_FDCWD, "./47/file0", [pid 6152] <... symlink resumed>) = 0 [pid 6149] <... mount resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6152] write(1, "executing program\n", 18 [pid 6149] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6152] <... write resumed>) = 18 [pid 6149] chdir("./file0" [pid 6148] <... mount resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6152] memfd_create("syzkaller", 0 [pid 6149] <... chdir resumed>) = 0 [pid 6148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... openat resumed>) = 4 [pid 6152] <... memfd_create resumed>) = 3 [pid 6149] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6148] <... openat resumed>) = 3 [pid 5852] newfstatat(4, "", [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6148] chdir("./file0" [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6152] <... mmap resumed>) = 0x7feda9000000 [pid 6149] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6148] <... chdir resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 260.983323][ T6148] [ 260.983323][ T6148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.983323][ T6148] [pid 5852] close(4) = 0 [pid 6148] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] rmdir("./47/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [ 261.045512][ T6149] [ 261.045512][ T6149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.045512][ T6149] [ 261.056593][ T6148] [ 261.056593][ T6148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.056593][ T6148] [ 261.070192][ T6148] [ 261.070192][ T6148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.070192][ T6148] [ 261.092086][ T6149] [pid 5852] rmdir("./47") = 0 [pid 5852] mkdir("./48", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6149] <... lsetxattr resumed>) = 0 [pid 6148] <... lsetxattr resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 6148] exit_group(0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6148] <... exit_group resumed>) = ? [pid 6149] exit_group(0 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 6149] <... exit_group resumed>) = ? [pid 6149] +++ exited with 0 +++ [pid 6148] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6148, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5851] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... openat resumed>) = 3 [pid 5849] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", [pid 5849] newfstatat(3, "", [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, [pid 5849] getdents64(3, [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./48/binderfs", [pid 5849] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./47/binderfs" [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5851] unlink("./48/binderfs" [pid 5849] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... unlink resumed>) = 0 [ 261.092086][ T6149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.092086][ T6149] [ 261.110615][ T113] [ 261.110615][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.110615][ T113] [ 261.128656][ T112] [ 261.128656][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.128656][ T112] [pid 5851] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6150] <... write resumed>) = 16777216 [ 261.209993][ T5849] [ 261.209993][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.209993][ T5849] [ 261.246775][ T5849] [ 261.246775][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.246775][ T5849] [pid 6150] munmap(0x7feda9000000, 138412032) = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6150] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5852] <... close resumed>) = 0 [pid 6150] <... ioctl resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] rmdir("./47/file0") = 0 [pid 5849] getdents64(3, [pid 5851] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./47" [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6150] close(3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... rmdir resumed>) = 0 [pid 6150] <... close resumed>) = 0 [pid 6150] close(4 [pid 5851] newfstatat(AT_FDCWD, "./48/file0", [pid 5849] mkdir("./48", 0777./strace-static-x86_64: Process 6153 attached [pid 6153] set_robust_list(0x555584a2d760, 24) = 0 [pid 6153] chdir("./48") = 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 261.258782][ T5851] [ 261.258782][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.258782][ T5851] [ 261.259200][ T6150] loop1: detected capacity change from 0 to 32768 [ 261.281845][ T5851] [ 261.281845][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.281845][ T5851] [pid 6153] setpgid(0, 0 [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6150] <... close resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6153 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 6150] mkdir("./file0", 0777 [pid 5851] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6153] <... setpgid resumed>) = 0 [pid 6151] <... write resumed>) = 16777216 [pid 6150] <... mkdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6151] munmap(0x7feda9000000, 138412032 [pid 6150] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... openat resumed>) = 3 [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 4 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6153] <... openat resumed>) = 3 [pid 5851] newfstatat(4, "", [pid 5849] <... ioctl resumed>) = 0 [pid 6153] write(3, "1000", 4) = 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(3 [pid 6153] close(3) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./48/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./48") = 0 [pid 5851] mkdir("./49", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 6153] symlink("/dev/binderfs", "./binderfs" [pid 6151] <... munmap resumed>) = 0 [pid 5851] close(3 [pid 6153] <... symlink resumed>) = 0 [pid 6153] write(1, "executing program\n", 18executing program ) = 18 [pid 6153] memfd_create("syzkaller", 0 [pid 6151] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 261.381011][ T6150] [ 261.381011][ T6150] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.381011][ T6150] [pid 6151] ioctl(4, LOOP_SET_FD, 3 [pid 6153] <... memfd_create resumed>) = 3 [pid 6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6151] <... ioctl resumed>) = 0 [pid 6150] <... mount resumed>) = 0 [pid 6151] close(3) = 0 [pid 6151] close(4) = 0 [pid 6151] mkdir("./file0", 0777) = 0 [pid 6151] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6150] chdir("./file0") = 0 [pid 6150] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 261.423536][ T6151] loop3: detected capacity change from 0 to 32768 [ 261.470430][ T6150] [ 261.470430][ T6150] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.470430][ T6150] [pid 6150] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6151] <... mount resumed>) = 0 [ 261.510867][ T6151] [ 261.510867][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.510867][ T6151] [ 261.531147][ T6150] [ 261.531147][ T6150] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.531147][ T6150] [pid 6151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6151] chdir("./file0") = 0 [pid 6150] <... lsetxattr resumed>) = 0 [pid 6150] exit_group(0) = ? [pid 6151] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6151] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6150] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6150, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=35 /* 0.35 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./48/binderfs") = 0 [ 261.570751][ T113] [ 261.570751][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.570751][ T113] [ 261.593157][ T6151] [ 261.593157][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.593157][ T6151] [pid 5848] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6151] <... lsetxattr resumed>) = 0 [ 261.627500][ T5848] [ 261.627500][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.627500][ T5848] [ 261.630377][ T6151] [ 261.630377][ T6151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.630377][ T6151] [ 261.660335][ T5848] [ 261.660335][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.660335][ T5848] [pid 6151] exit_group(0 [pid 5851] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6151] <... exit_group resumed>) = ? [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6151] +++ exited with 0 +++ [pid 5848] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6154 attached [pid 5850] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6154] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6154 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 4 [pid 6154] <... set_robust_list resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] newfstatat(4, "", [pid 6154] chdir("./49" [pid 5850] <... openat resumed>) = 3 [pid 6154] <... chdir resumed>) = 0 [pid 5850] newfstatat(3, "", [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 6154] setpgid(0, 0 [pid 5850] getdents64(3, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6154] <... setpgid resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] getdents64(4, [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6154] <... openat resumed>) = 3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6154] write(3, "1000", 4 [pid 5850] newfstatat(AT_FDCWD, "./47/binderfs", [pid 6154] <... write resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] close(4 [pid 6154] close(3 [pid 5850] unlink("./47/binderfs" [pid 6154] <... close resumed>) = 0 [pid 6154] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... unlink resumed>) = 0 [pid 5848] <... close resumed>) = 0 executing program [pid 6154] <... symlink resumed>) = 0 [pid 5850] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] rmdir("./48/file0" [pid 6154] write(1, "executing program\n", 18) = 18 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 6154] memfd_create("syzkaller", 0) = 3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./48") = 0 [ 261.684953][ T113] [ 261.684953][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.684953][ T113] [pid 5848] mkdir("./49", 0777 [pid 6154] <... mmap resumed>) = 0x7feda9000000 [pid 6152] <... write resumed>) = 16777216 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 6152] munmap(0x7feda9000000, 138412032 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6155 attached , child_tidptr=0x555584a2d750) = 6155 [pid 6155] set_robust_list(0x555584a2d760, 24) = 0 [pid 6155] chdir("./48") = 0 [pid 6155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6155] setpgid(0, 0) = 0 [pid 6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6155] write(3, "1000", 4) = 4 [pid 6155] close(3) = 0 [pid 6155] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6155] write(1, "executing program\n", 18) = 18 [pid 6155] memfd_create("syzkaller", 0) = 3 [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 261.743588][ T5850] [ 261.743588][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.743588][ T5850] [ 261.770212][ T5850] [ 261.770212][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.770212][ T5850] [pid 5850] <... umount2 resumed>) = 0 [pid 6153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6152] <... munmap resumed>) = 0 [pid 5850] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6152] ioctl(4, LOOP_SET_FD, 3 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./47/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6152] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 6152] close(3 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./47") = 0 [pid 5850] mkdir("./48", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6152] <... close resumed>) = 0 [pid 6152] close(4) = 0 [pid 6152] mkdir("./file0", 0777) = 0 [ 261.851387][ T6152] loop0: detected capacity change from 0 to 32768 [pid 6152] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6152] chdir("./file0") = 0 [ 261.960372][ T6152] [ 261.960372][ T6152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.960372][ T6152] [pid 6152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6152] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6156 ./strace-static-x86_64: Process 6156 attached [pid 6156] set_robust_list(0x555584a2d760, 24) = 0 [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6156] chdir("./49") = 0 [pid 6156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6156] setpgid(0, 0) = 0 [ 262.042069][ T6152] [ 262.042069][ T6152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.042069][ T6152] [ 262.070665][ T6152] [ 262.070665][ T6152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.070665][ T6152] [pid 6156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6152] <... lsetxattr resumed>) = 0 [pid 6156] <... openat resumed>) = 3 [pid 6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6156] write(3, "1000", 4) = 4 [pid 6156] close(3executing program [pid 6152] exit_group(0 [pid 6156] <... close resumed>) = 0 [pid 6156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6156] write(1, "executing program\n", 18) = 18 [pid 6156] memfd_create("syzkaller", 0) = 3 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6152] <... exit_group resumed>) = ? [ 262.098009][ T112] [ 262.098009][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.098009][ T112] [pid 6152] +++ exited with 0 +++ [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6152, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5847] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6157 attached [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6157 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [pid 6157] set_robust_list(0x555584a2d760, 24 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 6157] <... set_robust_list resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6157] chdir("./48") = 0 [pid 5847] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./48/binderfs", [pid 6157] setpgid(0, 0) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./48/binderfs" [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6157] <... openat resumed>) = 3 [pid 6157] write(3, "1000", 4) = 4 [pid 6157] close(3) = 0 [pid 6157] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6157] write(1, "executing program\n", 18) = 18 [pid 6157] memfd_create("syzkaller", 0) = 3 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 262.195922][ T5847] [ 262.195922][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.195922][ T5847] [ 262.210372][ T5847] [ 262.210372][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.210372][ T5847] [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./48/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./48") = 0 [pid 5847] mkdir("./49", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6153] <... write resumed>) = 16777216 [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6153] munmap(0x7feda9000000, 138412032 [pid 6154] <... write resumed>) = 16777216 [pid 6153] <... munmap resumed>) = 0 [pid 6154] munmap(0x7feda9000000, 138412032 [pid 6153] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6154] <... munmap resumed>) = 0 [pid 6153] close(3) = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6153] close(4) = 0 [pid 6154] <... ioctl resumed>) = 0 [pid 6153] mkdir("./file0", 0777 [pid 6154] close(3) = 0 [pid 6154] close(4 [pid 6153] <... mkdir resumed>) = 0 [ 262.511367][ T6153] loop5: detected capacity change from 0 to 32768 [ 262.533727][ T6154] loop4: detected capacity change from 0 to 32768 [pid 6153] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6154] <... close resumed>) = 0 [pid 6155] <... write resumed>) = 16777216 [pid 6154] mkdir("./file0", 0777) = 0 [pid 6154] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6155] munmap(0x7feda9000000, 138412032) = 0 [pid 5847] <... close resumed>) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 262.573955][ T6153] [ 262.573955][ T6153] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.573955][ T6153] [ 262.609539][ T6154] [ 262.609539][ T6154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.609539][ T6154] [pid 6155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6153] <... mount resumed>) = 0 [pid 6153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6153] <... openat resumed>) = 3 [pid 6153] chdir("./file0") = 0 ./strace-static-x86_64: Process 6158 attached [pid 6153] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6153] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6158] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6158 [ 262.621806][ T6155] loop2: detected capacity change from 0 to 32768 [pid 6158] <... set_robust_list resumed>) = 0 [pid 6158] chdir("./49" [pid 6155] close(3) = 0 [pid 6155] close(4) = 0 [pid 6155] mkdir("./file0", 0777) = 0 [pid 6155] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6158] <... chdir resumed>) = 0 [pid 6154] <... mount resumed>) = 0 [pid 6154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6154] chdir("./file0") = 0 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6154] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [ 262.662463][ T6153] [ 262.662463][ T6153] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.662463][ T6153] [ 262.680881][ T6155] [ 262.680881][ T6155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.680881][ T6155] [ 262.687552][ T6154] [ 262.687552][ T6154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.687552][ T6154] [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6158] write(3, "1000", 4) = 4 [pid 6158] close(3) = 0 [pid 6155] <... mount resumed>) = 0 executing program [pid 6158] symlink("/dev/binderfs", "./binderfs" [pid 6155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6158] <... symlink resumed>) = 0 [pid 6158] write(1, "executing program\n", 18 [pid 6155] <... openat resumed>) = 3 [pid 6158] <... write resumed>) = 18 [pid 6155] chdir("./file0" [pid 6153] <... lsetxattr resumed>) = 0 [pid 6158] memfd_create("syzkaller", 0 [pid 6155] <... chdir resumed>) = 0 [ 262.711099][ T6153] [ 262.711099][ T6153] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.711099][ T6153] [ 262.743139][ T112] [ 262.743139][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.743139][ T112] [ 262.750604][ T6154] [ 262.750604][ T6154] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6153] exit_group(0 [pid 6158] <... memfd_create resumed>) = 3 [pid 6155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6153] <... exit_group resumed>) = ? [pid 6155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6155] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6158] <... mmap resumed>) = 0x7feda9000000 [pid 6153] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./48/binderfs") = 0 [ 262.750604][ T6154] [ 262.766858][ T6155] [ 262.766858][ T6155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.766858][ T6155] [ 262.783233][ T5852] [ 262.783233][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.783233][ T5852] [ 262.800776][ T113] [ 262.800776][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.800776][ T113] [pid 5852] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6154] <... lsetxattr resumed>) = 0 [pid 6154] exit_group(0) = ? [pid 6154] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 6155] <... lsetxattr resumed>) = 0 [pid 5851] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6155] exit_group(0 [pid 5851] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6155] <... exit_group resumed>) = ? [pid 6155] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6155, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... openat resumed>) = 3 [pid 5849] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] newfstatat(3, "", [pid 5849] unlink("./48/binderfs" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5851] getdents64(3, [pid 5849] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./48/file0", [pid 5851] unlink("./49/binderfs" [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... unlink resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [ 262.803697][ T5852] [ 262.803697][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.803697][ T5852] [ 262.820391][ T6155] [ 262.820391][ T6155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.820391][ T6155] [ 262.849538][ T113] [ 262.849538][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.849538][ T113] [pid 5851] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./48/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./48") = 0 [pid 5852] mkdir("./49", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 262.884556][ T5849] [ 262.884556][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.884556][ T5849] [ 262.903099][ T5851] [ 262.903099][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.903099][ T5851] [ 262.920025][ T5849] [ 262.920025][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.920025][ T5849] [pid 5852] close(3 [pid 6156] <... write resumed>) = 16777216 [pid 6156] munmap(0x7feda9000000, 138412032 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./48/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6157] <... write resumed>) = 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... close resumed>) = 0 [ 262.950005][ T5851] [ 262.950005][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.950005][ T5851] [pid 5849] rmdir("./48" [pid 6157] munmap(0x7feda9000000, 138412032 [pid 6156] <... munmap resumed>) = 0 [pid 5851] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./49/file0", [pid 6156] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5851] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] mkdir("./49", 0777 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6156] <... openat resumed>) = 4 [pid 6156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6157] <... munmap resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] newfstatat(4, "", [pid 6156] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6156] <... close resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5851] getdents64(4, [pid 6156] close(4 [pid 6157] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6156] <... close resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6157] <... openat resumed>) = 4 [pid 6156] mkdir("./file0", 0777 [pid 5851] getdents64(4, [pid 5849] <... ioctl resumed>) = 0 [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6156] <... mkdir resumed>) = 0 [pid 6156] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] close(4) = 0 [pid 5851] rmdir("./49/file0" [pid 6158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [ 263.023267][ T6156] loop1: detected capacity change from 0 to 32768 [ 263.051033][ T6157] loop3: detected capacity change from 0 to 32768 [pid 5851] rmdir("./49" [pid 6157] <... ioctl resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./50", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6157] close(3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 6157] <... close resumed>) = 0 [pid 6157] close(4 [pid 5851] <... ioctl resumed>) = 0 [pid 6157] <... close resumed>) = 0 [pid 5851] close(3 [pid 6157] mkdir("./file0", 0777) = 0 [pid 6157] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6156] <... mount resumed>) = 0 [pid 6156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6156] chdir("./file0") = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 263.091246][ T6156] [ 263.091246][ T6156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.091246][ T6156] [ 263.116626][ T6157] [ 263.116626][ T6157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.116626][ T6157] [ 263.133236][ T6156] [ 263.133236][ T6156] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6156] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6157] <... mount resumed>) = 0 [ 263.133236][ T6156] [pid 6157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6157] chdir("./file0") = 0 [pid 6157] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6157] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 6156] <... lsetxattr resumed>) = 0 [ 263.170731][ T6156] [ 263.170731][ T6156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.170731][ T6156] [ 263.208956][ T6157] [ 263.208956][ T6157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.208956][ T6157] [pid 6156] exit_group(0) = ? [pid 6156] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6156, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 6159 attached [pid 5848] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./49/binderfs" [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6159 [pid 5848] <... unlink resumed>) = 0 [pid 6159] set_robust_list(0x555584a2d760, 24 [pid 5848] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] <... set_robust_list resumed>) = 0 [pid 6159] chdir("./49") = 0 [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6159] setpgid(0, 0) = 0 [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 263.221325][ T112] [ 263.221325][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.221325][ T112] [ 263.259798][ T6157] [ 263.259798][ T6157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.259798][ T6157] [pid 6159] write(3, "1000", 4executing program ) = 4 [pid 6159] close(3) = 0 [pid 6159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6159] write(1, "executing program\n", 18) = 18 [pid 6159] memfd_create("syzkaller", 0 [pid 6157] <... lsetxattr resumed>) = 0 [pid 6159] <... memfd_create resumed>) = 3 [pid 6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6157] exit_group(0 [pid 6159] <... mmap resumed>) = 0x7feda9000000 [pid 6157] <... exit_group resumed>) = ? [pid 6157] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./48/binderfs") = 0 [ 263.285087][ T5848] [ 263.285087][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.285087][ T5848] [ 263.297330][ T112] [ 263.297330][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.297330][ T112] [ 263.312192][ T5848] [ 263.312192][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.312192][ T5848] [pid 5850] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./48/file0", [pid 5848] newfstatat(AT_FDCWD, "./49/file0", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 4 [pid 5848] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [pid 5848] newfstatat(4, "", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5848] getdents64(4, [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5848] getdents64(4, [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 5848] close(4 [pid 5850] <... close resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5850] rmdir("./48/file0") = 0 [pid 5848] rmdir("./49/file0" [pid 5850] getdents64(3, [pid 5848] <... rmdir resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(3, [pid 5850] close(3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] close(3 [pid 5850] rmdir("./48" [pid 5848] <... close resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] rmdir("./49") = 0 [pid 5848] mkdir("./50", 0777) = 0 [pid 5850] mkdir("./49", 0777 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 263.351725][ T5850] [ 263.351725][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.351725][ T5850] [ 263.370270][ T5850] [ 263.370270][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.370270][ T5850] ./strace-static-x86_64: Process 6160 attached [pid 5851] <... close resumed>) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6160] set_robust_list(0x555584a2d760, 24 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6160 ./strace-static-x86_64: Process 6161 attached [pid 6160] <... set_robust_list resumed>) = 0 [pid 6161] set_robust_list(0x555584a2d760, 24 [pid 6160] chdir("./49" [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6161 [pid 6161] <... set_robust_list resumed>) = 0 [pid 6161] chdir("./50" [pid 6160] <... chdir resumed>) = 0 [pid 6161] <... chdir resumed>) = 0 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6161] <... prctl resumed>) = 0 [pid 6160] <... prctl resumed>) = 0 [pid 6161] setpgid(0, 0 [pid 6160] setpgid(0, 0 [pid 6161] <... setpgid resumed>) = 0 [pid 6160] <... setpgid resumed>) = 0 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6161] <... openat resumed>) = 3 [pid 6161] write(3, "1000", 4 [pid 6160] write(3, "1000", 4 [pid 6161] <... write resumed>) = 4 [pid 6160] <... write resumed>) = 4 [pid 6161] close(3) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs" [pid 6160] close(3 [pid 6161] <... symlink resumed>) = 0 [pid 6160] <... close resumed>) = 0 [pid 6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6161] write(1, "executing program\n", 18 [pid 6160] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6161] <... write resumed>) = 18 executing program [pid 6161] memfd_create("syzkaller", 0 [pid 6160] write(1, "executing program\n", 18 [pid 6161] <... memfd_create resumed>) = 3 [pid 6160] <... write resumed>) = 18 [pid 6160] memfd_create("syzkaller", 0) = 3 [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6158] <... write resumed>) = 16777216 [pid 6158] munmap(0x7feda9000000, 138412032) = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6158] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6162 attached [pid 6158] <... ioctl resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6162 [pid 6162] set_robust_list(0x555584a2d760, 24 [pid 6158] close(3) = 0 [pid 6158] close(4 [pid 6162] <... set_robust_list resumed>) = 0 [pid 6162] chdir("./50" [pid 6158] <... close resumed>) = 0 [pid 6162] <... chdir resumed>) = 0 [pid 6158] mkdir("./file0", 0777 [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6158] <... mkdir resumed>) = 0 [pid 6162] <... prctl resumed>) = 0 [pid 6158] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6162] setpgid(0, 0) = 0 [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6162] write(3, "1000", 4) = 4 [pid 6162] close(3) = 0 [pid 6162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6162] write(1, "executing program\n", 18executing program ) = 18 [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 263.696608][ T6158] loop0: detected capacity change from 0 to 32768 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6163 attached [pid 6163] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6163 [pid 6163] <... set_robust_list resumed>) = 0 [pid 6158] <... mount resumed>) = 0 [pid 6158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6163] chdir("./49" [pid 6158] <... openat resumed>) = 3 [pid 6163] <... chdir resumed>) = 0 [pid 6158] chdir("./file0" [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] <... chdir resumed>) = 0 [pid 6163] setpgid(0, 0 [pid 6158] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6163] <... setpgid resumed>) = 0 [pid 6158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 263.769599][ T6158] [ 263.769599][ T6158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.769599][ T6158] [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6158] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6163] <... openat resumed>) = 3 [pid 6163] write(3, "1000", 4 [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6163] <... write resumed>) = 4 [ 263.814610][ T6158] [ 263.814610][ T6158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.814610][ T6158] [pid 6163] close(3) = 0 [pid 6163] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6163] write(1, "executing program\n", 18) = 18 [pid 6163] memfd_create("syzkaller", 0) = 3 [pid 6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6158] <... lsetxattr resumed>) = 0 [pid 6158] exit_group(0) = ? [pid 6158] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6158, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=33 /* 0.33 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./49/binderfs") = 0 [ 263.861740][ T6158] [ 263.861740][ T6158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.861740][ T6158] [ 263.896302][ T112] [ 263.896302][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.896302][ T112] [pid 5847] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] <... write resumed>) = 16777216 [ 263.948892][ T5847] [ 263.948892][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.948892][ T5847] [pid 6159] munmap(0x7feda9000000, 138412032) = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6159] close(3 [pid 5847] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] close(4 [pid 5847] newfstatat(AT_FDCWD, "./49/file0", [pid 6159] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6159] mkdir("./file0", 0777 [pid 5847] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6159] <... mkdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./49/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] close(3) = 0 [ 264.000382][ T5847] [ 264.000382][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.000382][ T5847] [ 264.024229][ T6159] loop5: detected capacity change from 0 to 32768 [pid 5847] rmdir("./49") = 0 [pid 5847] mkdir("./50", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6159] <... mount resumed>) = 0 [pid 6159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6159] chdir("./file0") = 0 [pid 6159] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 264.073657][ T6159] [ 264.073657][ T6159] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.073657][ T6159] [ 264.126236][ T6159] [ 264.126236][ T6159] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.126236][ T6159] [ 264.158475][ T6159] [ 264.158475][ T6159] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.158475][ T6159] [pid 6159] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6159] exit_group(0) = ? [pid 6159] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./49/binderfs") = 0 [ 264.206537][ T113] [ 264.206537][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.206537][ T113] [ 264.250362][ T5852] [ 264.250362][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.250362][ T5852] [pid 5852] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 264.290927][ T5852] [ 264.290927][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.290927][ T5852] [pid 5852] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6160] <... write resumed>) = 16777216 [pid 5852] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6160] munmap(0x7feda9000000, 138412032 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./49/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./49") = 0 [pid 5852] mkdir("./50", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6161] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6164 attached [pid 6160] <... munmap resumed>) = 0 [pid 6160] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6164 [pid 6164] set_robust_list(0x555584a2d760, 24 [pid 6160] <... openat resumed>) = 4 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6164] chdir("./50" [pid 6160] ioctl(4, LOOP_SET_FD, 3 [pid 6161] munmap(0x7feda9000000, 138412032 [pid 6164] <... chdir resumed>) = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6164] setpgid(0, 0) = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6164] write(3, "1000", 4) = 4 [pid 6164] close(3) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6160] <... ioctl resumed>) = 0 [pid 6164] write(1, "executing program\n", 18) = 18 [pid 6160] close(3) = 0 executing program [pid 6164] memfd_create("syzkaller", 0 [pid 6161] <... munmap resumed>) = 0 [pid 6160] close(4 [pid 6164] <... memfd_create resumed>) = 3 [pid 6160] <... close resumed>) = 0 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6160] mkdir("./file0", 0777 [ 264.434520][ T6160] loop2: detected capacity change from 0 to 32768 [pid 6161] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6164] <... mmap resumed>) = 0x7feda9000000 [pid 6161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6160] <... mkdir resumed>) = 0 [pid 6160] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6161] close(3) = 0 [pid 6161] close(4) = 0 [pid 6161] mkdir("./file0", 0777) = 0 [pid 6161] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6160] <... mount resumed>) = 0 [ 264.492098][ T6161] loop4: detected capacity change from 0 to 32768 [ 264.515496][ T6160] [ 264.515496][ T6160] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.515496][ T6160] [pid 6160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6160] chdir("./file0") = 0 [pid 6160] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 264.576088][ T6160] [ 264.576088][ T6160] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.576088][ T6160] [ 264.591989][ T6161] [ 264.591989][ T6161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.591989][ T6161] [ 264.602971][ T6160] [ 264.602971][ T6160] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.602971][ T6160] [pid 6160] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6162] <... write resumed>) = 16777216 [pid 6160] <... lsetxattr resumed>) = 0 [pid 6162] munmap(0x7feda9000000, 138412032 [pid 6161] <... mount resumed>) = 0 [pid 6160] exit_group(0) = ? [pid 6161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6160] +++ exited with 0 +++ [pid 6161] <... openat resumed>) = 3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6161] chdir("./file0") = 0 [pid 6161] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6161] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./49/binderfs") = 0 [pid 5849] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6165 attached [ 264.640691][ T112] [ 264.640691][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.640691][ T112] [ 264.663321][ T6161] [ 264.663321][ T6161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.663321][ T6161] [ 264.687927][ T5849] , child_tidptr=0x555584a2d750) = 6165 [pid 6165] set_robust_list(0x555584a2d760, 24 [pid 6162] <... munmap resumed>) = 0 [pid 6165] <... set_robust_list resumed>) = 0 [pid 6165] chdir("./50" [pid 6162] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6165] <... chdir resumed>) = 0 [pid 6165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6162] <... openat resumed>) = 4 [ 264.687927][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.687927][ T5849] [ 264.689256][ T6161] [ 264.689256][ T6161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.689256][ T6161] [ 264.710698][ T5849] [ 264.710698][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.710698][ T5849] [ 264.729729][ T6162] loop1: detected capacity change from 0 to 32768 [ 264.729766][ T113] [pid 6165] <... prctl resumed>) = 0 [pid 6163] <... write resumed>) = 16777216 [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6161] <... lsetxattr resumed>) = 0 [pid 6165] setpgid(0, 0) = 0 [pid 6163] munmap(0x7feda9000000, 138412032 [pid 6162] <... ioctl resumed>) = 0 [pid 6161] exit_group(0 [pid 6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6162] close(3 [pid 6161] <... exit_group resumed>) = ? [pid 6165] <... openat resumed>) = 3 [pid 6161] +++ exited with 0 +++ [pid 6165] write(3, "1000", 4 [pid 6162] <... close resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 6165] <... write resumed>) = 4 [pid 6162] close(4 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6165] close(3 [pid 6162] <... close resumed>) = 0 [pid 6164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... close resumed>) = 0 [pid 6162] mkdir("./file0", 0777 [pid 5851] <... restart_syscall resumed>) = 0 [pid 6165] symlink("/dev/binderfs", "./binderfs" [pid 6162] <... mkdir resumed>) = 0 [pid 6165] <... symlink resumed>) = 0 [pid 6162] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6165] write(1, "executing program\n", 18 [pid 6163] <... munmap resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 6165] <... write resumed>) = 18 [pid 5851] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5851] <... openat resumed>) = 3 [pid 5849] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6165] memfd_create("syzkaller", 0 [pid 5851] getdents64(3, [pid 6163] <... openat resumed>) = 4 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6165] <... memfd_create resumed>) = 3 [ 264.729766][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.729766][ T113] [pid 5851] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./50/binderfs") = 0 [pid 5851] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6163] <... ioctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6165] <... mmap resumed>) = 0x7feda9000000 [pid 6163] close(3 [pid 5849] newfstatat(AT_FDCWD, "./49/file0", [pid 6163] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6163] close(4 [pid 5849] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] mkdir("./file0", 0777 [pid 5849] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6163] <... mkdir resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 6163] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 6162] <... mount resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [ 264.786402][ T6162] [ 264.786402][ T6162] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.786402][ T6162] [ 264.797693][ T6163] loop3: detected capacity change from 0 to 32768 [ 264.798040][ T5851] [ 264.798040][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.798040][ T5851] [pid 5849] close(4) = 0 [pid 6162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] rmdir("./49/file0" [pid 6162] <... openat resumed>) = 3 [pid 6162] chdir("./file0" [pid 5849] <... rmdir resumed>) = 0 [pid 6162] <... chdir resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6162] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] close(3 [pid 6162] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... close resumed>) = 0 [ 264.851294][ T5851] [ 264.851294][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.851294][ T5851] [ 264.864796][ T6163] [ 264.864796][ T6163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.864796][ T6163] [pid 5849] rmdir("./49" [pid 5851] <... umount2 resumed>) = 0 [pid 6163] <... mount resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 6163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] mkdir("./50", 0777 [pid 6163] <... openat resumed>) = 3 [pid 6163] chdir("./file0" [pid 5849] <... mkdir resumed>) = 0 [pid 6163] <... chdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5851] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] <... openat resumed>) = 3 [pid 6163] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./50/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./50") = 0 [pid 5851] mkdir("./51", 0777) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5849] <... ioctl resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 264.896840][ T6162] [ 264.896840][ T6162] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.896840][ T6162] [ 264.914290][ T6162] [ 264.914290][ T6162] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.914290][ T6162] [ 264.926950][ T6163] [ 264.926950][ T6163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.926950][ T6163] [ 264.941331][ T6163] [pid 5849] close(3 [ 264.941331][ T6163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.941331][ T6163] [pid 5851] close(3 [pid 6162] <... lsetxattr resumed>) = 0 [pid 6163] <... lsetxattr resumed>) = 0 [pid 6162] exit_group(0 [pid 6163] exit_group(0 [pid 6162] <... exit_group resumed>) = ? [pid 6163] <... exit_group resumed>) = ? [pid 6162] +++ exited with 0 +++ [pid 6163] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6162, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... openat resumed>) = 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(3, "", [pid 5848] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5850] getdents64(3, [pid 5848] newfstatat(3, "", [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(3, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5848] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] unlink("./49/binderfs" [pid 5848] newfstatat(AT_FDCWD, "./50/binderfs", [pid 5850] <... unlink resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] unlink("./50/binderfs") = 0 [ 264.991345][ T112] [ 264.991345][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.991345][ T112] [ 265.010805][ T113] [ 265.010805][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.010805][ T113] [ 265.048249][ T5850] [ 265.048249][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.048249][ T5850] [ 265.060329][ T5848] [ 265.060329][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.060329][ T5848] [ 265.082109][ T5848] [ 265.082109][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.082109][ T5848] [ 265.094073][ T5850] [pid 5848] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./49/file0", [pid 5848] newfstatat(AT_FDCWD, "./50/file0", [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] newfstatat(4, "", [pid 5848] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] newfstatat(4, "", [pid 5850] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 5850] getdents64(4, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(4, [pid 5850] close(4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] close(4 [pid 5850] rmdir("./49/file0" [pid 5848] <... close resumed>) = 0 [ 265.094073][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.094073][ T5850] [pid 5850] <... rmdir resumed>) = 0 [pid 5848] rmdir("./50/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./50") = 0 [pid 5848] mkdir("./51", 0777) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] rmdir("./49" [pid 5848] close(3 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./50", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5851] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6166 attached , child_tidptr=0x555584a2d750) = 6166 [pid 6166] set_robust_list(0x555584a2d760, 24) = 0 [pid 6166] chdir("./51") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6166] setpgid(0, 0 [pid 6164] <... write resumed>) = 16777216 [pid 6166] <... setpgid resumed>) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6166] write(1, "executing program\n", 18 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6167 attached [pid 6166] <... write resumed>) = 18 [pid 6166] memfd_create("syzkaller", 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6167 [pid 6166] <... memfd_create resumed>) = 3 [pid 6167] set_robust_list(0x555584a2d760, 24 [pid 6164] munmap(0x7feda9000000, 138412032 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6167] <... set_robust_list resumed>) = 0 [pid 6167] chdir("./50" [pid 6164] <... munmap resumed>) = 0 [pid 6167] <... chdir resumed>) = 0 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6164] <... openat resumed>) = 4 [pid 6167] setpgid(0, 0 [pid 6164] ioctl(4, LOOP_SET_FD, 3 [pid 6167] <... setpgid resumed>) = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6164] <... ioctl resumed>) = 0 [pid 6167] <... openat resumed>) = 3 [pid 6164] close(3 [pid 6167] write(3, "1000", 4 [pid 6164] <... close resumed>) = 0 [pid 6167] <... write resumed>) = 4 [pid 6167] close(3) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs" [pid 6164] close(4 [pid 6167] <... symlink resumed>) = 0 [pid 6164] <... close resumed>) = 0 executing program [pid 6167] write(1, "executing program\n", 18 [pid 6164] mkdir("./file0", 0777 [pid 6167] <... write resumed>) = 18 [pid 6164] <... mkdir resumed>) = 0 [pid 6167] memfd_create("syzkaller", 0 [pid 6164] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6167] <... memfd_create resumed>) = 3 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 265.351747][ T6164] loop0: detected capacity change from 0 to 32768 [pid 5848] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6168 attached [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6168] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6168 [pid 6168] <... set_robust_list resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6169 ./strace-static-x86_64: Process 6169 attached [pid 6168] chdir("./51") = 0 [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6169] set_robust_list(0x555584a2d760, 24 [pid 6168] <... prctl resumed>) = 0 [pid 6168] setpgid(0, 0 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6164] <... mount resumed>) = 0 [pid 6168] <... setpgid resumed>) = 0 [pid 6164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6169] chdir("./50" [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6164] <... openat resumed>) = 3 [pid 6169] <... chdir resumed>) = 0 [pid 6168] <... openat resumed>) = 3 [pid 6164] chdir("./file0" [pid 6168] write(3, "1000", 4 [pid 6164] <... chdir resumed>) = 0 [pid 6168] <... write resumed>) = 4 [pid 6164] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6168] close(3 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6168] <... close resumed>) = 0 [pid 6164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6169] <... prctl resumed>) = 0 [pid 6168] symlink("/dev/binderfs", "./binderfs" [pid 6164] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6169] setpgid(0, 0 [pid 6168] <... symlink resumed>) = 0 [pid 6169] <... setpgid resumed>) = 0 [ 265.472579][ T6164] [ 265.472579][ T6164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.472579][ T6164] executing program [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6168] write(1, "executing program\n", 18) = 18 [pid 6169] <... openat resumed>) = 3 [pid 6168] memfd_create("syzkaller", 0) = 3 [pid 6169] write(3, "1000", 4) = 4 [pid 6169] close(3) = 0 executing program [pid 6169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6169] write(1, "executing program\n", 18) = 18 [pid 6169] memfd_create("syzkaller", 0) = 3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6168] <... mmap resumed>) = 0x7feda9000000 [ 265.527777][ T6164] [ 265.527777][ T6164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.527777][ T6164] [ 265.550072][ T6164] [ 265.550072][ T6164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.550072][ T6164] [pid 6164] <... lsetxattr resumed>) = 0 [pid 6164] exit_group(0) = ? [pid 6164] +++ exited with 0 +++ [pid 6165] <... write resumed>) = 16777216 [ 265.583253][ T113] [ 265.583253][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.583253][ T113] [pid 6165] munmap(0x7feda9000000, 138412032 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5847] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6165] <... munmap resumed>) = 0 [pid 5847] getdents64(3, [pid 6165] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6165] <... openat resumed>) = 4 [pid 5847] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6165] ioctl(4, LOOP_SET_FD, 3 [pid 5847] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./50/binderfs") = 0 [pid 5847] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... ioctl resumed>) = 0 [ 265.700467][ T6165] loop5: detected capacity change from 0 to 32768 [pid 6165] close(3) = 0 [pid 6165] close(4) = 0 [pid 6165] mkdir("./file0", 0777 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... mkdir resumed>) = 0 [ 265.741935][ T5847] [ 265.741935][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.741935][ T5847] [ 265.774471][ T6165] [ 265.774471][ T6165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.774471][ T6165] [ 265.786114][ T5847] [pid 6165] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 265.786114][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.786114][ T5847] [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... mount resumed>) = 0 [pid 6165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6165] chdir("./file0") = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6165] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./50/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./50") = 0 [pid 5847] mkdir("./51", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 265.881355][ T6165] [ 265.881355][ T6165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.881355][ T6165] [ 265.910083][ T6165] [ 265.910083][ T6165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.910083][ T6165] [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6165] <... lsetxattr resumed>) = 0 [pid 6165] exit_group(0) = ? [pid 6165] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6165, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./50/binderfs") = 0 [ 265.949521][ T113] [ 265.949521][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 265.949521][ T113] [ 266.050497][ T5852] [ 266.050497][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.050497][ T5852] [ 266.096464][ T5852] [ 266.096464][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.096464][ T5852] [pid 5852] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5852] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./50/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./50") = 0 [pid 5852] mkdir("./51", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 6166] <... write resumed>) = 16777216 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6170 attached [pid 5852] <... ioctl resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6170 [pid 6170] set_robust_list(0x555584a2d760, 24 [pid 5852] close(3 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6170] chdir("./51") = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6168] <... write resumed>) = 16777216 [pid 6167] <... write resumed>) = 16777216 [pid 6167] munmap(0x7feda9000000, 138412032 [pid 6170] setpgid(0, 0 [pid 6168] munmap(0x7feda9000000, 138412032 [pid 6170] <... setpgid resumed>) = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6166] munmap(0x7feda9000000, 138412032 [pid 6170] <... openat resumed>) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6168] <... munmap resumed>) = 0 [pid 6167] <... munmap resumed>) = 0 executing program [pid 6170] write(1, "executing program\n", 18 [pid 6168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6167] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6170] <... write resumed>) = 18 [pid 6170] memfd_create("syzkaller", 0 [pid 6168] <... openat resumed>) = 4 [pid 6167] <... openat resumed>) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3 [pid 6170] <... memfd_create resumed>) = 3 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6168] <... ioctl resumed>) = 0 [pid 6167] ioctl(4, LOOP_SET_FD, 3 [pid 6166] <... munmap resumed>) = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6166] ioctl(4, LOOP_SET_FD, 3 [pid 6170] <... mmap resumed>) = 0x7feda9000000 [pid 6168] close(3 [pid 6167] <... ioctl resumed>) = 0 [pid 6168] <... close resumed>) = 0 [pid 6166] <... ioctl resumed>) = 0 [pid 6168] close(4 [pid 6166] close(3) = 0 [ 266.358219][ T6168] loop1: detected capacity change from 0 to 32768 [ 266.370639][ T6167] loop2: detected capacity change from 0 to 32768 [ 266.371653][ T6166] loop4: detected capacity change from 0 to 32768 [pid 6166] close(4 [pid 6168] <... close resumed>) = 0 [pid 6167] close(3 [pid 6166] <... close resumed>) = 0 [pid 6168] mkdir("./file0", 0777 [pid 6167] <... close resumed>) = 0 [pid 6166] mkdir("./file0", 0777 [pid 6168] <... mkdir resumed>) = 0 [pid 6167] close(4 [pid 6166] <... mkdir resumed>) = 0 [pid 6168] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6167] <... close resumed>) = 0 [pid 6166] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6167] mkdir("./file0", 0777) = 0 [pid 6167] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6168] <... mount resumed>) = 0 [pid 6168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6169] <... write resumed>) = 16777216 [pid 6168] <... openat resumed>) = 3 [ 266.429059][ T6168] [ 266.429059][ T6168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.429059][ T6168] [ 266.442294][ T6166] [ 266.442294][ T6166] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.442294][ T6166] [ 266.464053][ T6167] [ 266.464053][ T6167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.464053][ T6167] [pid 6168] chdir("./file0") = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6168] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6169] munmap(0x7feda9000000, 138412032 [pid 6166] <... mount resumed>) = 0 [pid 6166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6166] chdir("./file0") = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6166] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6167] <... mount resumed>) = 0 [ 266.487433][ T6168] [ 266.487433][ T6168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.487433][ T6168] [ 266.515811][ T6166] [ 266.515811][ T6166] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.515811][ T6166] [ 266.522103][ T6168] [ 266.522103][ T6168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.522103][ T6168] [pid 6169] <... munmap resumed>) = 0 [pid 6167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6167] chdir("./file0") = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6169] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6167] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6169] <... openat resumed>) = 4 [pid 6169] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... close resumed>) = 0 [pid 6168] <... lsetxattr resumed>) = 0 [pid 6168] exit_group(0) = ? [pid 6168] +++ exited with 0 +++ [pid 6166] <... lsetxattr resumed>) = 0 [pid 6166] exit_group(0) = ? [ 266.547591][ T6166] [ 266.547591][ T6166] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.547591][ T6166] [ 266.564293][ T6167] [ 266.564293][ T6167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.564293][ T6167] [ 266.565207][ T6169] loop3: detected capacity change from 0 to 32768 [ 266.586232][ T6167] [ 266.586232][ T6167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.586232][ T6167] [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6168, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6171 attached [pid 6171] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6171 [pid 6171] <... set_robust_list resumed>) = 0 [pid 6171] chdir("./51") = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6167] <... lsetxattr resumed>) = 0 [pid 6166] +++ exited with 0 +++ [pid 6171] <... prctl resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6169] <... ioctl resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6171] setpgid(0, 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] close(3 [pid 5848] <... openat resumed>) = 3 [pid 5851] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6171] <... setpgid resumed>) = 0 [pid 5848] newfstatat(3, "", [pid 6169] <... close resumed>) = 0 [pid 6169] close(4 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... openat resumed>) = 3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6167] exit_group(0 [pid 5851] newfstatat(3, "", [pid 5848] getdents64(3, [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] getdents64(3, [pid 6167] <... exit_group resumed>) = ? [pid 5848] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6169] <... close resumed>) = 0 [pid 6169] mkdir("./file0", 0777) = 0 [pid 6171] <... openat resumed>) = 3 [pid 6167] +++ exited with 0 +++ [pid 5851] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(AT_FDCWD, "./51/binderfs", [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6171] write(3, "1000", 4 [pid 5851] newfstatat(AT_FDCWD, "./51/binderfs", [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5848] unlink("./51/binderfs" [pid 6169] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6171] <... write resumed>) = 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 6171] close(3 [pid 5851] unlink("./51/binderfs" [pid 5848] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... unlink resumed>) = 0 [pid 5851] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] <... close resumed>) = 0 [pid 5849] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] symlink("/dev/binderfs", "./binderfs") = 0 [ 266.598405][ T112] [ 266.598405][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.598405][ T112] [ 266.600219][ T113] [ 266.600219][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.600219][ T113] [ 266.637148][ T112] [ 266.637148][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.637148][ T112] [pid 6171] write(1, "executing program\n", 18 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6171] <... write resumed>) = 18 executing program [pid 5849] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6171] memfd_create("syzkaller", 0 [pid 5849] <... openat resumed>) = 3 [pid 6171] <... memfd_create resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./50/binderfs") = 0 [ 266.690386][ T5848] [ 266.690386][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.690386][ T5848] [ 266.712176][ T5851] [ 266.712176][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.712176][ T5851] [ 266.723330][ T5849] [ 266.723330][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.723330][ T5849] [ 266.730165][ T5848] [pid 5849] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6169] <... mount resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 6169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6169] <... openat resumed>) = 3 [pid 5851] newfstatat(AT_FDCWD, "./51/file0", [pid 5848] getdents64(4, [pid 6169] chdir("./file0" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 266.730165][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.730165][ T5848] [ 266.745597][ T5849] [ 266.745597][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.745597][ T5849] [ 266.750535][ T5851] [ 266.750535][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.750535][ T5851] [ 266.770499][ T6169] [ 266.770499][ T6169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.770499][ T6169] [pid 6169] <... chdir resumed>) = 0 [pid 5851] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6169] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(4, [pid 5851] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6169] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... openat resumed>) = 4 [pid 5849] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(4, "", [pid 5848] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] rmdir("./51/file0" [pid 5851] getdents64(4, [pid 5849] newfstatat(AT_FDCWD, "./50/file0", [pid 5848] <... rmdir resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] getdents64(3, [pid 5849] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] newfstatat(4, "", [pid 5851] getdents64(4, [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... close resumed>) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] rmdir("./51" [pid 5851] close(4 [pid 5849] getdents64(4, [pid 5848] <... rmdir resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./51/file0" [pid 5848] mkdir("./52", 0777 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./50/file0" [pid 5848] <... mkdir resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5849] getdents64(3, [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] getdents64(3, [pid 5848] <... ioctl resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 5848] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./50") = 0 [pid 5849] mkdir("./51", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 266.821428][ T6169] [ 266.821428][ T6169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.821428][ T6169] [ 266.859999][ T6169] [ 266.859999][ T6169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.859999][ T6169] [pid 5849] close(3 [pid 5851] close(3) = 0 [pid 6169] <... lsetxattr resumed>) = 0 [pid 6169] exit_group(0 [pid 5851] rmdir("./51" [pid 6169] <... exit_group resumed>) = ? [pid 6169] +++ exited with 0 +++ [pid 5851] <... rmdir resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./50/binderfs") = 0 [pid 5850] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] mkdir("./52", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 266.921032][ T112] [ 266.921032][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.921032][ T112] [ 266.960402][ T5850] [ 266.960402][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.960402][ T5850] [ 267.006309][ T5850] [ 267.006309][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.006309][ T5850] [pid 5851] close(3 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./50/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./50") = 0 [pid 5850] mkdir("./51", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5849] <... close resumed>) = 0 [pid 6170] <... write resumed>) = 16777216 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6172 ./strace-static-x86_64: Process 6172 attached [pid 6172] set_robust_list(0x555584a2d760, 24) = 0 executing program [pid 6172] chdir("./51") = 0 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6172] setpgid(0, 0) = 0 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6172] write(3, "1000", 4) = 4 [pid 6172] close(3) = 0 [pid 6172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6172] write(1, "executing program\n", 18) = 18 [pid 5848] <... close resumed>) = 0 [pid 6172] memfd_create("syzkaller", 0) = 3 [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6170] munmap(0x7feda9000000, 138412032 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x555584a2d760, 24 [pid 6170] <... munmap resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6173 [pid 6173] <... set_robust_list resumed>) = 0 [pid 6173] chdir("./52" [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6173] <... chdir resumed>) = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6170] <... openat resumed>) = 4 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6173] <... prctl resumed>) = 0 [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6173] setpgid(0, 0./strace-static-x86_64: Process 6174 attached ) = 0 [pid 6170] <... ioctl resumed>) = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] set_robust_list(0x555584a2d760, 24 [pid 6170] close(3 [pid 6174] <... set_robust_list resumed>) = 0 [pid 6173] <... openat resumed>) = 3 [pid 6170] <... close resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6174 [pid 6170] close(4 [pid 6174] chdir("./52" [pid 6173] write(3, "1000", 4 [pid 6170] <... close resumed>) = 0 [pid 6174] <... chdir resumed>) = 0 [pid 6173] <... write resumed>) = 4 [pid 6170] mkdir("./file0", 0777 [pid 6174] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6173] close(3 [pid 6170] <... mkdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6174] <... prctl resumed>) = 0 [pid 6173] <... close resumed>) = 0 [pid 6170] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6173] write(1, "executing program\n", 18) = 18 executing program [ 267.342925][ T6170] loop0: detected capacity change from 0 to 32768 ./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x555584a2d760, 24) = 0 [pid 6175] chdir("./51") = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6173] memfd_create("syzkaller", 0 [pid 6175] <... prctl resumed>) = 0 [pid 6174] setpgid(0, 0 [pid 6170] <... mount resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6175 [pid 6170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6174] <... setpgid resumed>) = 0 [pid 6170] <... openat resumed>) = 3 [pid 6175] setpgid(0, 0 [pid 6174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6173] <... memfd_create resumed>) = 3 [pid 6170] chdir("./file0" [pid 6175] <... setpgid resumed>) = 0 [pid 6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6170] <... chdir resumed>) = 0 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6173] <... mmap resumed>) = 0x7feda9000000 [pid 6175] <... openat resumed>) = 3 [pid 6170] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6175] write(3, "1000", 4) = 4 [pid 6170] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6175] close(3 [pid 6170] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6175] <... close resumed>) = 0 [pid 6175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6175] write(1, "executing program\n", 18 [pid 6174] <... openat resumed>) = 3 executing program [pid 6175] <... write resumed>) = 18 [ 267.386461][ T6170] [ 267.386461][ T6170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.386461][ T6170] [ 267.420558][ T6170] [ 267.420558][ T6170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.420558][ T6170] [pid 6175] memfd_create("syzkaller", 0) = 3 [pid 6174] write(3, "1000", 4 [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6174] <... write resumed>) = 4 [pid 6174] close(3) = 0 [pid 6174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6174] write(1, "executing program\n", 18executing program ) = 18 [pid 6174] memfd_create("syzkaller", 0 [pid 6170] <... lsetxattr resumed>) = 0 [pid 6174] <... memfd_create resumed>) = 3 [pid 6170] exit_group(0) = ? [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6170] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6170, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./51/binderfs") = 0 [ 267.440617][ T6170] [ 267.440617][ T6170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.440617][ T6170] [ 267.479765][ T112] [ 267.479765][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.479765][ T112] [ 267.510941][ T5847] [ 267.510941][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.510941][ T5847] [ 267.522493][ T5847] [ 267.522493][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.522493][ T5847] [pid 5847] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6171] <... write resumed>) = 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 6171] munmap(0x7feda9000000, 138412032 [pid 5847] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6171] <... munmap resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6171] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] getdents64(4, [pid 6171] <... openat resumed>) = 4 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6171] ioctl(4, LOOP_SET_FD, 3 [pid 5847] close(4) = 0 [pid 5847] rmdir("./51/file0") = 0 [pid 6171] <... ioctl resumed>) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6171] close(3 [pid 5847] close(3 [pid 6171] <... close resumed>) = 0 [pid 6171] close(4 [pid 5847] <... close resumed>) = 0 [pid 6171] <... close resumed>) = 0 [pid 5847] rmdir("./51" [pid 6171] mkdir("./file0", 0777 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./52", 0777 [pid 6171] <... mkdir resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6171] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... openat resumed>) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 267.634960][ T6171] loop5: detected capacity change from 0 to 32768 [pid 5847] close(3 [pid 6173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 267.717125][ T6171] [ 267.717125][ T6171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.717125][ T6171] [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6171] <... mount resumed>) = 0 [pid 6171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6171] chdir("./file0") = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6171] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6171] exit_group(0) = ? [ 267.801317][ T6171] [ 267.801317][ T6171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.801317][ T6171] [ 267.840023][ T6171] [ 267.840023][ T6171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.840023][ T6171] [pid 6171] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./51/binderfs") = 0 [ 267.875549][ T112] [ 267.875549][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.875549][ T112] [ 267.914734][ T5852] [ 267.914734][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.914734][ T5852] [pid 5852] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6176 attached , child_tidptr=0x555584a2d750) = 6176 [pid 6176] set_robust_list(0x555584a2d760, 24) = 0 [pid 6176] chdir("./52") = 0 [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6176] setpgid(0, 0) = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6176] write(3, "1000", 4) = 4 [pid 6176] close(3) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6176] write(1, "executing program\n", 18) = 18 [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [ 267.960233][ T5852] [ 267.960233][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.960233][ T5852] [pid 5852] rmdir("./51/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./51") = 0 [pid 5852] mkdir("./52", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6172] <... write resumed>) = 16777216 [pid 6172] munmap(0x7feda9000000, 138412032) = 0 [pid 6174] <... write resumed>) = 16777216 [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6172] ioctl(4, LOOP_SET_FD, 3 [pid 6174] munmap(0x7feda9000000, 138412032 [pid 6172] <... ioctl resumed>) = 0 [pid 6172] close(3) = 0 [pid 6172] close(4) = 0 [pid 6172] mkdir("./file0", 0777) = 0 [pid 6172] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6173] <... write resumed>) = 16777216 [pid 6173] munmap(0x7feda9000000, 138412032 [pid 6174] <... munmap resumed>) = 0 [pid 6173] <... munmap resumed>) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 268.216847][ T6172] loop2: detected capacity change from 0 to 32768 [ 268.239538][ T6172] [ 268.239538][ T6172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.239538][ T6172] [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 6175] <... write resumed>) = 16777216 [pid 6175] munmap(0x7feda9000000, 138412032 [pid 6173] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6172] <... mount resumed>) = 0 [pid 6173] ioctl(4, LOOP_SET_FD, 3 [pid 6172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6174] <... ioctl resumed>) = 0 [pid 6174] close(3) = 0 [pid 6174] close(4) = 0 [pid 6174] mkdir("./file0", 0777) = 0 [pid 6174] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6172] chdir("./file0" [pid 6175] <... munmap resumed>) = 0 [pid 6172] <... chdir resumed>) = 0 [ 268.289444][ T6174] loop4: detected capacity change from 0 to 32768 [ 268.316416][ T6173] loop1: detected capacity change from 0 to 32768 [ 268.334371][ T6174] [pid 6172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6175] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6175] <... openat resumed>) = 4 [pid 6173] <... ioctl resumed>) = 0 [pid 6172] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6175] ioctl(4, LOOP_SET_FD, 3 [pid 6173] close(3 [pid 5852] <... close resumed>) = 0 [pid 6173] <... close resumed>) = 0 [pid 6173] close(4 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6173] <... close resumed>) = 0 [pid 6174] <... mount resumed>) = 0 [pid 6173] mkdir("./file0", 0777 [pid 6174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6177 attached [pid 6174] chdir("./file0") = 0 [pid 6173] <... mkdir resumed>) = 0 [pid 6177] set_robust_list(0x555584a2d760, 24 [pid 6174] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6177] <... set_robust_list resumed>) = 0 [pid 6174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6177] chdir("./52" [pid 6174] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6173] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6177 [ 268.334371][ T6174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.334371][ T6174] [ 268.346653][ T6172] [ 268.346653][ T6172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.346653][ T6172] [ 268.358664][ T6175] loop3: detected capacity change from 0 to 32768 [ 268.372223][ T6174] [ 268.372223][ T6174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.372223][ T6174] [ 268.380018][ T6172] [pid 6177] <... chdir resumed>) = 0 [pid 6177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6177] setpgid(0, 0) = 0 [pid 6177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6177] write(3, "1000", 4) = 4 [pid 6177] close(3) = 0 [pid 6177] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6177] write(1, "executing program\n", 18) = 18 [pid 6177] memfd_create("syzkaller", 0) = 3 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6175] <... ioctl resumed>) = 0 [pid 6175] close(3) = 0 [pid 6175] close(4) = 0 [ 268.380018][ T6172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.380018][ T6172] [pid 6175] mkdir("./file0", 0777 [pid 6172] <... lsetxattr resumed>) = 0 [pid 6175] <... mkdir resumed>) = 0 [pid 6172] exit_group(0 [pid 6175] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6172] <... exit_group resumed>) = ? [pid 6172] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6174] <... lsetxattr resumed>) = 0 [ 268.418791][ T6174] [ 268.418791][ T6174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.418791][ T6174] [ 268.435270][ T113] [ 268.435270][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.435270][ T113] [ 268.448693][ T6173] [ 268.448693][ T6173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.448693][ T6173] [ 268.463950][ T112] [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6174] exit_group(0 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6174] <... exit_group resumed>) = ? [pid 5849] getdents64(3, [pid 6174] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6174, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5849] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./51/binderfs") = 0 [pid 5849] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6173] <... mount resumed>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 6173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6173] chdir("./file0" [pid 5851] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6173] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... openat resumed>) = 3 [pid 6173] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./52/binderfs") = 0 [ 268.463950][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.463950][ T112] [ 268.469375][ T6175] [ 268.469375][ T6175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.469375][ T6175] [ 268.486631][ T5849] [ 268.486631][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.486631][ T5849] [ 268.511028][ T6173] [ 268.511028][ T6173] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5851] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6175] <... mount resumed>) = 0 [pid 6175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6175] chdir("./file0") = 0 [pid 6175] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 268.511028][ T6173] [ 268.520244][ T5849] [ 268.520244][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.520244][ T5849] [ 268.532697][ T5851] [ 268.532697][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.532697][ T5851] [ 268.540406][ T6173] [ 268.540406][ T6173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.540406][ T6173] [ 268.561345][ T6175] [ 268.561345][ T6175] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6175] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6173] <... lsetxattr resumed>) = 0 [pid 6173] exit_group(0) = ? [pid 6173] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./52/binderfs", [pid 6175] <... lsetxattr resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 268.561345][ T6175] [ 268.572953][ T5851] [ 268.572953][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.572953][ T5851] [ 268.580504][ T113] [ 268.580504][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.580504][ T113] [ 268.600108][ T6175] [ 268.600108][ T6175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.600108][ T6175] [pid 5848] unlink("./52/binderfs") = 0 [pid 5848] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] newfstatat(AT_FDCWD, "./51/file0", [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] newfstatat(AT_FDCWD, "./52/file0", [pid 5849] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... openat resumed>) = 4 [pid 5851] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] newfstatat(4, "", [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 6175] exit_group(0) = ? [pid 5851] getdents64(4, [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 5851] getdents64(4, [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5851] close(4 [pid 5849] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] rmdir("./51/file0" [pid 6175] +++ exited with 0 +++ [pid 5851] rmdir("./52/file0" [pid 5849] <... rmdir resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5850] unlink("./51/binderfs") = 0 [pid 5850] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 5851] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] rmdir("./51" [pid 5851] rmdir("./52" [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./52", 0777 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./53", 0777 [pid 5849] <... mkdir resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... openat resumed>) = 3 [pid 5851] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] <... ioctl resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5849] close(3 [ 268.630360][ T112] [ 268.630360][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.630360][ T112] [ 268.646719][ T5848] [ 268.646719][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.646719][ T5848] [ 268.670180][ T5850] [ 268.670180][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.670180][ T5850] [pid 5851] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 268.684529][ T5848] [ 268.684529][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.684529][ T5848] [ 268.720289][ T5850] [ 268.720289][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.720289][ T5850] [pid 5848] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4 [pid 5850] <... umount2 resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./52/file0" [pid 5850] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... rmdir resumed>) = 0 [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(3, [pid 5850] newfstatat(AT_FDCWD, "./51/file0", [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./52" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5850] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] mkdir("./53", 0777 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... mkdir resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] newfstatat(4, "", [pid 5848] <... openat resumed>) = 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5850] getdents64(4, [pid 5848] <... ioctl resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] close(3 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./51/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./51") = 0 [pid 5850] mkdir("./52", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6176] <... write resumed>) = 16777216 [pid 6176] munmap(0x7feda9000000, 138412032) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6176] close(3) = 0 [pid 6176] close(4) = 0 [pid 6176] mkdir("./file0", 0777) = 0 [ 268.975539][ T6176] loop0: detected capacity change from 0 to 32768 [pid 6176] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6178 attached [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6178 [pid 6178] set_robust_list(0x555584a2d760, 24./strace-static-x86_64: Process 6179 attached ) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6179 [pid 6179] set_robust_list(0x555584a2d760, 24 [pid 6178] chdir("./52" [pid 6179] <... set_robust_list resumed>) = 0 [pid 6178] <... chdir resumed>) = 0 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6178] setpgid(0, 0) = 0 executing program [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6179] chdir("./53" [pid 6178] write(3, "1000", 4) = 4 [pid 6178] close(3) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6178] write(1, "executing program\n", 18) = 18 [pid 6178] memfd_create("syzkaller", 0) = 3 [pid 6179] <... chdir resumed>) = 0 [pid 6176] <... mount resumed>) = 0 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6178] <... mmap resumed>) = 0x7feda9000000 [ 269.042141][ T6176] [ 269.042141][ T6176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.042141][ T6176] [pid 6179] <... prctl resumed>) = 0 [pid 6176] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 6176] chdir("./file0" [pid 6179] setpgid(0, 0 [pid 6176] <... chdir resumed>) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6179] <... setpgid resumed>) = 0 [pid 6176] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6176] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6179] <... openat resumed>) = 3 [pid 6179] write(3, "1000", 4 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6180 attached executing program [pid 6179] <... write resumed>) = 4 [pid 5850] <... close resumed>) = 0 [pid 6180] set_robust_list(0x555584a2d760, 24 [pid 6179] close(3 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6180 [pid 6180] <... set_robust_list resumed>) = 0 [pid 6179] <... close resumed>) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 6180] chdir("./53"./strace-static-x86_64: Process 6181 attached [pid 6181] set_robust_list(0x555584a2d760, 24 [pid 6179] <... symlink resumed>) = 0 [pid 6181] <... set_robust_list resumed>) = 0 [pid 6181] chdir("./52") = 0 [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6181] write(3, "1000", 4) = 4 [pid 6181] close(3) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6181] write(1, "executing program\n", 18) = 18 executing program [pid 6181] memfd_create("syzkaller", 0 [pid 6179] write(1, "executing program\n", 18 [pid 6176] <... lsetxattr resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6181 [pid 6181] <... memfd_create resumed>) = 3 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6179] <... write resumed>) = 18 [pid 6176] exit_group(0) = ? [pid 6180] <... chdir resumed>) = 0 [pid 6179] memfd_create("syzkaller", 0 [pid 6176] +++ exited with 0 +++ [pid 6179] <... memfd_create resumed>) = 3 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6176, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 6180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 269.109743][ T6176] [ 269.109743][ T6176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.109743][ T6176] [ 269.130667][ T6176] [ 269.130667][ T6176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.130667][ T6176] [ 269.153398][ T113] [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6180] <... prctl resumed>) = 0 [pid 6179] <... mmap resumed>) = 0x7feda9000000 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6180] setpgid(0, 0 [pid 5847] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6180] <... setpgid resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] unlink("./52/binderfs") = 0 [pid 5847] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6180] <... openat resumed>) = 3 [pid 6180] write(3, "1000", 4) = 4 [ 269.153398][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.153398][ T113] [pid 6180] close(3) = 0 [pid 6180] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6180] write(1, "executing program\n", 18) = 18 [pid 6180] memfd_create("syzkaller", 0) = 3 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6177] <... write resumed>) = 16777216 [pid 5847] <... umount2 resumed>) = 0 [ 269.200626][ T5847] [ 269.200626][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.200626][ T5847] [ 269.224420][ T5847] [ 269.224420][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.224420][ T5847] [pid 6177] munmap(0x7feda9000000, 138412032 [pid 5847] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./52/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./52") = 0 [pid 6177] <... munmap resumed>) = 0 [pid 5847] mkdir("./53", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6177] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6177] close(3) = 0 [pid 6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6177] close(4) = 0 [ 269.347341][ T6177] loop5: detected capacity change from 0 to 32768 [pid 6177] mkdir("./file0", 0777) = 0 [pid 6178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6177] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6177] <... mount resumed>) = 0 [pid 6177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6177] chdir("./file0") = 0 [pid 6177] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 269.500609][ T6177] [ 269.500609][ T6177] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.500609][ T6177] [pid 6177] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x555584a2d760, 24) = 0 [pid 6182] chdir("./53") = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6182 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 269.555416][ T6177] [ 269.555416][ T6177] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.555416][ T6177] [ 269.592803][ T6177] [ 269.592803][ T6177] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.592803][ T6177] [pid 6177] <... lsetxattr resumed>) = 0 [pid 6182] write(3, "1000", 4) = 4 [pid 6177] exit_group(0 [pid 6182] close(3 [pid 6177] <... exit_group resumed>) = ? [pid 6182] <... close resumed>) = 0 [pid 6177] +++ exited with 0 +++ [pid 6182] symlink("/dev/binderfs", "./binderfs" [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6177, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6182] <... symlink resumed>) = 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6182] write(1, "executing program\n", 18 [pid 5852] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program ) = 3 [pid 6182] <... write resumed>) = 18 [pid 6182] memfd_create("syzkaller", 0 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6182] <... memfd_create resumed>) = 3 [pid 5852] getdents64(3, [ 269.620918][ T112] [ 269.620918][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.620918][ T112] [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./52/binderfs") = 0 [pid 5852] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6179] <... write resumed>) = 16777216 [ 269.740054][ T5852] [ 269.740054][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.740054][ T5852] [pid 6179] munmap(0x7feda9000000, 138412032) = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6179] close(3) = 0 [pid 6179] close(4) = 0 [pid 6179] mkdir("./file0", 0777) = 0 [ 269.789044][ T5852] [ 269.789044][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.789044][ T5852] [ 269.818988][ T6179] loop4: detected capacity change from 0 to 32768 [ 269.835528][ T6179] [pid 6179] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6179] chdir("./file0") = 0 [pid 6179] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6179] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 269.835528][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.835528][ T6179] [ 269.873354][ T6179] [ 269.873354][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.873354][ T6179] [pid 5852] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6179] <... lsetxattr resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6179] exit_group(0) = ? [pid 6179] +++ exited with 0 +++ [pid 6178] <... write resumed>) = 16777216 [pid 5852] close(4) = 0 [pid 5852] rmdir("./52/file0" [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... rmdir resumed>) = 0 [pid 6181] <... write resumed>) = 16777216 [pid 6178] munmap(0x7feda9000000, 138412032 [pid 5852] getdents64(3, [pid 5851] <... restart_syscall resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 6181] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 5851] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./52" [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... rmdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 269.888735][ T6179] [ 269.888735][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.888735][ T6179] [ 269.911186][ T112] [ 269.911186][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.911186][ T112] [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] mkdir("./53", 0777 [pid 5851] getdents64(3, [pid 5852] <... mkdir resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5851] newfstatat(AT_FDCWD, "./53/binderfs", [pid 5852] <... ioctl resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] close(3 [pid 5851] unlink("./53/binderfs") = 0 [pid 5851] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6181] <... munmap resumed>) = 0 [pid 6178] <... munmap resumed>) = 0 [pid 6181] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6178] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6181] <... openat resumed>) = 4 [pid 6178] <... openat resumed>) = 4 [ 269.997636][ T5851] [ 269.997636][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.997636][ T5851] [ 270.021031][ T5851] [ 270.021031][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.021031][ T5851] [ 270.035224][ T6181] loop3: detected capacity change from 0 to 32768 [pid 6181] ioctl(4, LOOP_SET_FD, 3 [pid 6178] ioctl(4, LOOP_SET_FD, 3 [pid 6181] <... ioctl resumed>) = 0 [pid 6181] close(3) = 0 [pid 6181] close(4) = 0 [pid 6181] mkdir("./file0", 0777) = 0 [pid 6178] <... ioctl resumed>) = 0 [pid 6181] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6178] close(3) = 0 [pid 6178] close(4) = 0 [pid 6178] mkdir("./file0", 0777) = 0 [ 270.042499][ T6178] loop2: detected capacity change from 0 to 32768 [pid 6178] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... umount2 resumed>) = 0 [pid 6180] <... write resumed>) = 16777216 [pid 6180] munmap(0x7feda9000000, 138412032 [pid 5851] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./53/file0") = 0 [pid 6181] <... mount resumed>) = 0 [pid 6181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6181] chdir("./file0" [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6181] <... chdir resumed>) = 0 [pid 5851] close(3 [pid 6181] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5851] <... close resumed>) = 0 [pid 6181] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] rmdir("./53" [ 270.075189][ T6181] [ 270.075189][ T6181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.075189][ T6181] [ 270.114550][ T6181] [ 270.114550][ T6181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.114550][ T6181] [pid 6181] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./54", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6180] <... munmap resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6180] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 270.132520][ T6178] [ 270.132520][ T6178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.132520][ T6178] [ 270.171421][ T6181] [ 270.171421][ T6181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.171421][ T6181] [pid 6180] ioctl(4, LOOP_SET_FD, 3 [pid 6181] <... lsetxattr resumed>) = 0 [pid 6181] exit_group(0 [pid 6178] <... mount resumed>) = 0 [pid 6181] <... exit_group resumed>) = ? [pid 6181] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 6178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6178] <... openat resumed>) = 3 [pid 6178] chdir("./file0") = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 6180] <... ioctl resumed>) = 0 [pid 6180] close(3 [pid 6178] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", [pid 6180] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 270.182901][ T6180] loop1: detected capacity change from 0 to 32768 [ 270.203621][ T112] [ 270.203621][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.203621][ T112] [ 270.229525][ T6180] [pid 6180] close(4 [pid 5850] getdents64(3, [pid 6180] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6180] mkdir("./file0", 0777 [pid 5850] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6180] <... mkdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./52/binderfs") = 0 [pid 5850] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6180] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6178] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6180] <... mount resumed>) = 0 [pid 6180] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6180] chdir("./file0") = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 270.229525][ T6180] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.229525][ T6180] [ 270.230598][ T6178] [ 270.230598][ T6178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.230598][ T6178] [ 270.270355][ T5850] [ 270.270355][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.270355][ T5850] [ 270.275040][ T6180] [pid 6180] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = 0 [ 270.275040][ T6180] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.275040][ T6180] [ 270.291719][ T5850] [ 270.291719][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.291719][ T5850] [ 270.311047][ T6178] [ 270.311047][ T6178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.311047][ T6178] [pid 6178] <... lsetxattr resumed>) = 0 [pid 5850] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6178] exit_group(0 [pid 5850] newfstatat(AT_FDCWD, "./52/file0", [pid 6178] <... exit_group resumed>) = ? [pid 6178] +++ exited with 0 +++ [pid 5852] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6178, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5850] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5849] <... restart_syscall resumed>) = 0 [ 270.336918][ T6180] [ 270.336918][ T6180] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.336918][ T6180] [ 270.348225][ T113] [ 270.348225][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.348225][ T113] [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6183 [pid 6180] <... lsetxattr resumed>) = 0 ./strace-static-x86_64: Process 6183 attached [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] getdents64(4, [pid 5849] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6183] set_robust_list(0x555584a2d760, 24./strace-static-x86_64: Process 6184 attached ) = 0 [pid 6180] exit_group(0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] getdents64(4, [pid 5849] <... openat resumed>) = 3 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6184 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6180] <... exit_group resumed>) = ? [pid 5850] <... close resumed>) = 0 [pid 6184] set_robust_list(0x555584a2d760, 24 [pid 6183] chdir("./53" [pid 6180] +++ exited with 0 +++ [pid 5850] rmdir("./52/file0" [pid 5849] newfstatat(3, "", [pid 6184] <... set_robust_list resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6180, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 6184] chdir("./54" [pid 6183] <... chdir resumed>) = 0 [pid 5850] getdents64(3, [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6184] <... chdir resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] close(3 [pid 5849] getdents64(3, [pid 6184] <... prctl resumed>) = 0 [pid 6183] <... prctl resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6184] setpgid(0, 0 [pid 6183] setpgid(0, 0 [pid 5850] rmdir("./52" [pid 5849] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6184] <... setpgid resumed>) = 0 [pid 6183] <... setpgid resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... restart_syscall resumed>) = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] mkdir("./53", 0777 [pid 5849] newfstatat(AT_FDCWD, "./52/binderfs", [pid 6184] <... openat resumed>) = 3 [pid 6183] <... openat resumed>) = 3 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6184] write(3, "1000", 4 [pid 5849] unlink("./52/binderfs" [pid 5848] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6184] <... write resumed>) = 4 [pid 6183] write(3, "1000", 4 [pid 5849] <... unlink resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6184] close(3 [pid 6183] <... write resumed>) = 4 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6184] <... close resumed>) = 0 [ 270.393973][ T112] [ 270.393973][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.393973][ T112] [pid 6183] close(3 [pid 5850] <... openat resumed>) = 3 [pid 5848] <... openat resumed>) = 3 [pid 6184] symlink("/dev/binderfs", "./binderfs" [pid 6183] <... close resumed>) = 0 [pid 5848] newfstatat(3, "", [pid 6184] <... symlink resumed>) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs" [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6184] write(1, "executing program\n", 18 [pid 6183] <... symlink resumed>) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5848] getdents64(3, executing program [pid 6184] <... write resumed>) = 18 [pid 5850] close(3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6184] memfd_create("syzkaller", 0 [pid 6183] write(1, "executing program\n", 18 [pid 6182] <... write resumed>) = 16777216 [pid 5848] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./53/binderfs" [pid 6184] <... memfd_create resumed>) = 3 [pid 6182] munmap(0x7feda9000000, 138412032 [pid 5848] <... unlink resumed>) = 0 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6183] <... write resumed>) = 18 [pid 6183] memfd_create("syzkaller", 0) = 3 [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6184] <... mmap resumed>) = 0x7feda9000000 [ 270.439354][ T5849] [ 270.439354][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.439354][ T5849] [ 270.455958][ T5849] [ 270.455958][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.455958][ T5849] [pid 6182] <... munmap resumed>) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... umount2 resumed>) = 0 [pid 6182] <... openat resumed>) = 4 [pid 5849] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 270.490620][ T5848] [ 270.490620][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.490620][ T5848] [ 270.524774][ T5848] [ 270.524774][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.524774][ T5848] [pid 6182] <... ioctl resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6182] close(3 [pid 5849] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6182] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] close(4 [pid 5849] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6182] <... close resumed>) = 0 [pid 6182] mkdir("./file0", 0777 [pid 5849] <... openat resumed>) = 4 [pid 6182] <... mkdir resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 6182] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5849] getdents64(4, [pid 5848] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(4, [pid 5848] newfstatat(AT_FDCWD, "./53/file0", [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] close(4 [pid 5848] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] rmdir("./52/file0" [pid 5848] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... rmdir resumed>) = 0 [ 270.540165][ T6182] loop0: detected capacity change from 0 to 32768 [pid 5848] <... openat resumed>) = 4 [pid 5849] getdents64(3, [pid 5848] newfstatat(4, "", [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(3 [pid 5848] getdents64(4, [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./52" [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] getdents64(4, [pid 5849] mkdir("./53", 0777 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] close(4 [pid 6182] <... mount resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... close resumed>) = 0 [pid 6182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... openat resumed>) = 3 [pid 5848] rmdir("./53/file0" [pid 6182] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 6182] chdir("./file0" [pid 5849] close(3 [pid 6182] <... chdir resumed>) = 0 [pid 5848] getdents64(3, [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] close(3) = 0 [pid 5848] rmdir("./53" [pid 6182] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... rmdir resumed>) = 0 [ 270.586375][ T6182] [ 270.586375][ T6182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.586375][ T6182] [pid 5848] mkdir("./54", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 270.650862][ T6182] [ 270.650862][ T6182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.650862][ T6182] [pid 5848] close(3 [pid 6182] <... lsetxattr resumed>) = 0 [ 270.710049][ T6182] [ 270.710049][ T6182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.710049][ T6182] [pid 6182] exit_group(0) = ? [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 6182] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5847] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] getdents64(3, ./strace-static-x86_64: Process 6185 attached 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6185 [pid 5847] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6185] set_robust_list(0x555584a2d760, 24 [pid 5847] unlink("./53/binderfs" [pid 6185] <... set_robust_list resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [ 270.760494][ T113] [ 270.760494][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.760494][ T113] [pid 6184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6185] chdir("./53") = 0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6185] setpgid(0, 0) = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6185] write(3, "1000", 4) = 4 [pid 6185] close(3) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6185] write(1, "executing program\n", 18) = 18 [pid 6185] memfd_create("syzkaller", 0) = 3 [pid 6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6186 ./strace-static-x86_64: Process 6186 attached [pid 5847] <... umount2 resumed>) = 0 [pid 6186] set_robust_list(0x555584a2d760, 24) = 0 [ 270.850843][ T5847] [ 270.850843][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.850843][ T5847] [ 270.876744][ T5847] [ 270.876744][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.876744][ T5847] [pid 6186] chdir("./53") = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6186] <... prctl resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./53/file0", [pid 6186] setpgid(0, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6186] <... setpgid resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6186] <... openat resumed>) = 3 [pid 6186] write(3, "1000", 4 [pid 5847] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6186] <... write resumed>) = 4 ./strace-static-x86_64: Process 6187 attached [pid 6186] close(3 [pid 5847] <... openat resumed>) = 4 [pid 6187] set_robust_list(0x555584a2d760, 24 [pid 6186] <... close resumed>) = 0 [pid 5847] newfstatat(4, "", [pid 6187] <... set_robust_list resumed>) = 0 [pid 6186] symlink("/dev/binderfs", "./binderfs" [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6187 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6187] chdir("./54" [pid 6186] <... symlink resumed>) = 0 executing program [pid 5847] getdents64(4, [pid 6187] <... chdir resumed>) = 0 [pid 6186] write(1, "executing program\n", 18 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6186] <... write resumed>) = 18 [pid 5847] getdents64(4, [pid 6187] <... prctl resumed>) = 0 [pid 6186] memfd_create("syzkaller", 0 [pid 6187] setpgid(0, 0 [pid 6186] <... memfd_create resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 6187] <... setpgid resumed>) = 0 [pid 5847] rmdir("./53/file0" [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6186] <... mmap resumed>) = 0x7feda9000000 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3 [pid 6187] <... openat resumed>) = 3 [pid 5847] <... close resumed>) = 0 [pid 6187] write(3, "1000", 4 [pid 5847] rmdir("./53") = 0 [pid 5847] mkdir("./54", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6187] <... write resumed>) = 4 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6187] close(3 [pid 5847] <... ioctl resumed>) = 0 [pid 6187] <... close resumed>) = 0 [pid 6187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] close(3 executing program [pid 6187] write(1, "executing program\n", 18) = 18 [pid 6187] memfd_create("syzkaller", 0) = 3 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6183] <... write resumed>) = 16777216 [pid 6183] munmap(0x7feda9000000, 138412032 [pid 6184] <... write resumed>) = 16777216 [pid 6184] munmap(0x7feda9000000, 138412032 [pid 6183] <... munmap resumed>) = 0 [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6183] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6183] ioctl(4, LOOP_SET_FD, 3 [pid 6184] <... munmap resumed>) = 0 [pid 6183] <... ioctl resumed>) = 0 [pid 6183] close(3) = 0 [pid 6183] close(4) = 0 [pid 6183] mkdir("./file0", 0777 [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6183] <... mkdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6183] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6184] <... openat resumed>) = 4 [pid 6184] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6188 attached [pid 6188] set_robust_list(0x555584a2d760, 24) = 0 [pid 6188] chdir("./54") = 0 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6188] setpgid(0, 0) = 0 [ 271.333409][ T6183] loop5: detected capacity change from 0 to 32768 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6188] close(3) = 0 [pid 6188] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6188] write(1, "executing program\n", 18) = 18 [pid 6188] memfd_create("syzkaller", 0) = 3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6188 [pid 6184] <... ioctl resumed>) = 0 [pid 6184] close(3) = 0 [pid 6184] close(4) = 0 [pid 6184] mkdir("./file0", 0777) = 0 [ 271.395603][ T6184] loop4: detected capacity change from 0 to 32768 [ 271.396582][ T6183] [ 271.396582][ T6183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.396582][ T6183] [pid 6184] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6183] <... mount resumed>) = 0 [pid 6183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6183] chdir("./file0") = 0 [pid 6183] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 271.440438][ T6184] [ 271.440438][ T6184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.440438][ T6184] [ 271.478133][ T6183] [ 271.478133][ T6183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.478133][ T6183] [pid 6183] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6184] <... mount resumed>) = 0 [pid 6184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6183] <... lsetxattr resumed>) = 0 [pid 6184] <... openat resumed>) = 3 [pid 6183] exit_group(0) = ? [pid 6184] chdir("./file0") = 0 [ 271.509215][ T6183] [ 271.509215][ T6183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.509215][ T6183] [ 271.544429][ T112] [ 271.544429][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.544429][ T112] [ 271.556795][ T6184] [pid 6184] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6183] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 6184] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6185] <... write resumed>) = 16777216 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6185] munmap(0x7feda9000000, 138412032 [pid 5852] <... openat resumed>) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 271.556795][ T6184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.556795][ T6184] [ 271.582436][ T6184] [ 271.582436][ T6184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.582436][ T6184] [pid 6184] <... lsetxattr resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./53/binderfs", [pid 6185] <... munmap resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6185] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] unlink("./53/binderfs" [pid 6185] <... openat resumed>) = 4 [pid 5852] <... unlink resumed>) = 0 [pid 5852] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6184] exit_group(0 [pid 6185] ioctl(4, LOOP_SET_FD, 3 [pid 6184] <... exit_group resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./54/binderfs") = 0 [pid 5851] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6185] <... ioctl resumed>) = 0 [ 271.610606][ T113] [ 271.610606][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.610606][ T113] [ 271.630502][ T6185] loop3: detected capacity change from 0 to 32768 [ 271.637089][ T5852] [ 271.637089][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.637089][ T5852] [pid 6185] close(3) = 0 [pid 6185] close(4) = 0 [pid 6185] mkdir("./file0", 0777) = 0 [pid 6185] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = 0 [ 271.661521][ T5851] [ 271.661521][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.661521][ T5851] [ 271.673754][ T5852] [ 271.673754][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.673754][ T5852] [ 271.686927][ T5851] [ 271.686927][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.686927][ T5851] [pid 5852] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... umount2 resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./53/file0", [pid 5851] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] newfstatat(AT_FDCWD, "./54/file0", [pid 5852] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", [pid 5852] newfstatat(4, "", [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, [pid 5852] getdents64(4, [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, [pid 5852] getdents64(4, [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4 [pid 5852] close(4 [pid 5851] <... close resumed>) = 0 [pid 6186] <... write resumed>) = 16777216 [pid 5852] <... close resumed>) = 0 [pid 5851] rmdir("./54/file0" [pid 6185] <... mount resumed>) = 0 [pid 5852] rmdir("./53/file0" [pid 5851] <... rmdir resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, [pid 6185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] getdents64(3, [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6186] munmap(0x7feda9000000, 138412032 [pid 6185] <... openat resumed>) = 3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 6187] <... write resumed>) = 16777216 [pid 6185] chdir("./file0" [pid 5852] close(3 [pid 5851] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] rmdir("./54" [pid 5852] rmdir("./53") = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./55", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 271.737372][ T6185] [ 271.737372][ T6185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.737372][ T6185] [pid 5851] close(3 [pid 6187] munmap(0x7feda9000000, 138412032 [pid 6185] <... chdir resumed>) = 0 [pid 5852] mkdir("./54", 0777 [pid 6185] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6185] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... mkdir resumed>) = 0 [pid 6186] <... munmap resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 271.794693][ T6185] [ 271.794693][ T6185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.794693][ T6185] [pid 5852] close(3 [pid 6186] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6186] close(3) = 0 [pid 6186] close(4) = 0 [pid 6186] mkdir("./file0", 0777) = 0 [ 271.841000][ T6186] loop2: detected capacity change from 0 to 32768 [ 271.845163][ T6185] [ 271.845163][ T6185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.845163][ T6185] [ 271.864008][ T6186] [ 271.864008][ T6186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.864008][ T6186] [pid 6186] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6187] <... munmap resumed>) = 0 [pid 6185] <... lsetxattr resumed>) = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6185] exit_group(0 [pid 6187] <... openat resumed>) = 4 [pid 6185] <... exit_group resumed>) = ? [pid 6185] +++ exited with 0 +++ [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 6186] <... mount resumed>) = 0 [pid 6186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 6186] <... openat resumed>) = 3 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6186] chdir("./file0") = 0 [pid 6186] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6186] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./53/binderfs") = 0 [ 271.889655][ T112] [ 271.889655][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.889655][ T112] [ 271.916969][ T6187] loop1: detected capacity change from 0 to 32768 [ 271.917252][ T6186] [ 271.917252][ T6186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.917252][ T6186] [pid 5850] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] <... ioctl resumed>) = 0 [pid 6187] close(3) = 0 [pid 6187] close(4) = 0 [pid 6187] mkdir("./file0", 0777) = 0 [ 271.966161][ T6186] [ 271.966161][ T6186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.966161][ T6186] [ 271.981197][ T5850] [ 271.981197][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.981197][ T5850] [ 272.000227][ T5850] [ 272.000227][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.000227][ T5850] [pid 6187] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6186] <... lsetxattr resumed>) = 0 [pid 6186] exit_group(0) = ? [pid 6186] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6186, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./53/binderfs") = 0 [ 272.027494][ T6187] [ 272.027494][ T6187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.027494][ T6187] [ 272.038463][ T112] [ 272.038463][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.038463][ T112] [pid 5849] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] <... mount resumed>) = 0 [pid 6187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6187] chdir("./file0") = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6187] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6189 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6189 attached [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6189] set_robust_list(0x555584a2d760, 24 [pid 5850] <... close resumed>) = 0 [pid 6189] <... set_robust_list resumed>) = 0 [pid 5850] rmdir("./53/file0" [pid 6189] chdir("./55" [pid 5850] <... rmdir resumed>) = 0 [pid 6189] <... chdir resumed>) = 0 [pid 5850] getdents64(3, [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6189] <... prctl resumed>) = 0 [pid 5850] close(3 [pid 6189] setpgid(0, 0 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./53") = 0 [pid 5850] mkdir("./54", 0777 [pid 6189] <... setpgid resumed>) = 0 [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... mkdir resumed>) = 0 [ 272.083621][ T6187] [ 272.083621][ T6187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.083621][ T6187] [ 272.094258][ T5849] [ 272.094258][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.094258][ T5849] [ 272.111011][ T5849] [ 272.111011][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.111011][ T5849] [ 272.124516][ T6187] [ 272.124516][ T6187] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6189] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6189] write(3, "1000", 4 [pid 5850] <... openat resumed>) = 3 [pid 6189] <... write resumed>) = 4 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6189] close(3 [pid 5850] <... ioctl resumed>) = 0 [pid 6189] <... close resumed>) = 0 [pid 5850] close(3 [pid 6189] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6189] write(1, "executing program\n", 18) = 18 [pid 6189] memfd_create("syzkaller", 0) = 3 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... umount2 resumed>) = 0 [ 272.124516][ T6187] [pid 6187] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6187] exit_group(0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./53/file0", [pid 6187] <... exit_group resumed>) = ? [pid 6187] +++ exited with 0 +++ [pid 5852] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5849] umount2("./53/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... restart_syscall resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(4, "", [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6190 attached [pid 5849] getdents64(4, [pid 5848] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6190] set_robust_list(0x555584a2d760, 24) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6190 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... openat resumed>) = 3 [pid 5849] getdents64(4, [pid 6190] chdir("./54" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] newfstatat(3, "", [pid 6190] <... chdir resumed>) = 0 [pid 5849] close(4 [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] rmdir("./53/file0" [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6190] <... prctl resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6190] setpgid(0, 0 [pid 5849] getdents64(3, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6190] <... setpgid resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] newfstatat(AT_FDCWD, "./54/binderfs", [pid 5849] close(3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... close resumed>) = 0 [pid 5848] unlink("./54/binderfs" [pid 5849] rmdir("./53" [pid 5848] <... unlink resumed>) = 0 [pid 6190] <... openat resumed>) = 3 [ 272.174294][ T112] [ 272.174294][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.174294][ T112] [pid 5848] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6190] write(3, "1000", 4 [pid 5849] <... rmdir resumed>) = 0 [pid 6190] <... write resumed>) = 4 [pid 6190] close(3 [pid 5849] mkdir("./54", 0777 [pid 6190] <... close resumed>) = 0 [pid 6190] symlink("/dev/binderfs", "./binderfs" [pid 5849] <... mkdir resumed>) = 0 executing program [pid 6190] <... symlink resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6190] write(1, "executing program\n", 18 [pid 5849] <... openat resumed>) = 3 [pid 6190] <... write resumed>) = 18 [pid 6190] memfd_create("syzkaller", 0) = 3 [pid 6190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6190] <... mmap resumed>) = 0x7feda9000000 [pid 5849] <... ioctl resumed>) = 0 [ 272.220718][ T5848] [ 272.220718][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.220718][ T5848] [ 272.251252][ T5848] [ 272.251252][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.251252][ T5848] [pid 5849] close(3 [pid 6188] <... write resumed>) = 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 6188] munmap(0x7feda9000000, 138412032) = 0 [pid 5848] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./54/file0") = 0 [pid 5848] getdents64(3, [pid 6188] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6188] <... openat resumed>) = 4 [pid 5848] close(3 [pid 6188] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./54" [pid 6188] <... ioctl resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 6188] close(3) = 0 [pid 5848] mkdir("./55", 0777 [pid 6188] close(4) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 6188] mkdir("./file0", 0777 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6188] <... mkdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] close(3 [pid 6188] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6191 [pid 6191] <... set_robust_list resumed>) = 0 [ 272.358774][ T6188] loop0: detected capacity change from 0 to 32768 [pid 6191] chdir("./54") = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6191] setpgid(0, 0) = 0 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6191] write(3, "1000", 4) = 4 [pid 6191] close(3) = 0 [ 272.414613][ T6188] [ 272.414613][ T6188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.414613][ T6188] [pid 6191] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6191] write(1, "executing program\n", 18) = 18 [pid 6188] <... mount resumed>) = 0 [pid 6191] memfd_create("syzkaller", 0 [pid 6188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6191] <... memfd_create resumed>) = 3 [pid 6188] <... openat resumed>) = 3 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6188] chdir("./file0") = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6188] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6191] <... mmap resumed>) = 0x7feda9000000 [pid 5849] <... close resumed>) = 0 [ 272.492325][ T6188] [ 272.492325][ T6188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.492325][ T6188] [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6192 ./strace-static-x86_64: Process 6192 attached [pid 6192] set_robust_list(0x555584a2d760, 24) = 0 [pid 6192] chdir("./54") = 0 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6188] <... lsetxattr resumed>) = 0 [pid 6192] <... prctl resumed>) = 0 [pid 6188] exit_group(0 [pid 6192] setpgid(0, 0 [pid 6188] <... exit_group resumed>) = ? [pid 6192] <... setpgid resumed>) = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6188] +++ exited with 0 +++ [pid 6192] <... openat resumed>) = 3 [pid 6192] write(3, "1000", 4) = 4 [pid 6192] close(3) = 0 [pid 6192] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6192] write(1, "executing program\n", 18) = 18 [pid 6192] memfd_create("syzkaller", 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6188, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6192] <... memfd_create resumed>) = 3 [pid 5847] <... restart_syscall resumed>) = 0 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", [pid 6190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 272.533736][ T6188] [ 272.533736][ T6188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.533736][ T6188] [ 272.563363][ T113] [ 272.563363][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.563363][ T113] [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./54/binderfs") = 0 [pid 5847] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6193 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6193] chdir("./55") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] write(1, "executing program\n", 18executing program ) = 18 [pid 6193] memfd_create("syzkaller", 0) = 3 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 272.671843][ T5847] [ 272.671843][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.671843][ T5847] [ 272.695938][ T5847] [ 272.695938][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.695938][ T5847] [pid 5847] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./54/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./54" [pid 6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./55", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6189] <... write resumed>) = 16777216 [pid 6189] munmap(0x7feda9000000, 138412032 [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6189] <... munmap resumed>) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... close resumed>) = 0 [pid 6189] <... openat resumed>) = 4 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6194 attached [pid 6189] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6194 [pid 6190] <... write resumed>) = 16777216 [pid 6194] set_robust_list(0x555584a2d760, 24) = 0 [pid 6194] chdir("./55") = 0 [pid 6190] munmap(0x7feda9000000, 138412032 [pid 6194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6194] setpgid(0, 0) = 0 [pid 6194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6189] <... ioctl resumed>) = 0 [pid 6194] <... openat resumed>) = 3 [pid 6189] close(3 [pid 6194] write(3, "1000", 4 [pid 6189] <... close resumed>) = 0 [pid 6194] <... write resumed>) = 4 [pid 6189] close(4 [pid 6194] close(3 [pid 6189] <... close resumed>) = 0 [pid 6194] <... close resumed>) = 0 [pid 6189] mkdir("./file0", 0777 [pid 6194] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6194] write(1, "executing program\n", 18) = 18 [pid 6189] <... mkdir resumed>) = 0 [pid 6194] memfd_create("syzkaller", 0 [pid 6189] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6194] <... memfd_create resumed>) = 3 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 273.075480][ T6189] loop4: detected capacity change from 0 to 32768 [pid 6190] <... munmap resumed>) = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6190] ioctl(4, LOOP_SET_FD, 3 [pid 6189] <... mount resumed>) = 0 [pid 6189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6189] chdir("./file0" [pid 6190] <... ioctl resumed>) = 0 [pid 6189] <... chdir resumed>) = 0 [pid 6189] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 273.152450][ T6189] [ 273.152450][ T6189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.152450][ T6189] [ 273.153385][ T6190] loop5: detected capacity change from 0 to 32768 [pid 6190] close(3 [pid 6189] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6190] <... close resumed>) = 0 [pid 6190] close(4) = 0 [pid 6190] mkdir("./file0", 0777) = 0 [pid 6190] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6191] <... write resumed>) = 16777216 [ 273.210800][ T6189] [ 273.210800][ T6189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.210800][ T6189] [ 273.236572][ T6190] [ 273.236572][ T6190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.236572][ T6190] [ 273.251356][ T6189] [ 273.251356][ T6189] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6191] munmap(0x7feda9000000, 138412032 [pid 6190] <... mount resumed>) = 0 [pid 6190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6190] chdir("./file0") = 0 [pid 6190] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 273.251356][ T6189] [pid 6190] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6189] <... lsetxattr resumed>) = 0 [pid 6189] exit_group(0) = ? [pid 6189] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 6191] <... munmap resumed>) = 0 [ 273.286870][ T6190] [ 273.286870][ T6190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.286870][ T6190] [ 273.302230][ T113] [ 273.302230][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.302230][ T113] [ 273.310056][ T6190] [ 273.310056][ T6190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.310056][ T6190] [pid 5851] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6192] <... write resumed>) = 16777216 [pid 6191] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6190] <... lsetxattr resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] <... openat resumed>) = 4 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", [pid 6192] munmap(0x7feda9000000, 138412032 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6191] ioctl(4, LOOP_SET_FD, 3 [pid 5851] getdents64(3, [pid 6190] exit_group(0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6190] <... exit_group resumed>) = ? [pid 6190] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6190, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6191] <... ioctl resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(3, "", [pid 5851] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6191] close(3 [pid 5852] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] unlink("./55/binderfs" [pid 6191] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./54/binderfs", [pid 6191] close(4 [pid 5851] <... unlink resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6191] <... close resumed>) = 0 [pid 5852] unlink("./54/binderfs" [pid 6191] mkdir("./file0", 0777 [pid 5852] <... unlink resumed>) = 0 [pid 5852] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6191] <... mkdir resumed>) = 0 [pid 6192] <... munmap resumed>) = 0 [pid 6191] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6192] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 273.343755][ T112] [ 273.343755][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.343755][ T112] [ 273.360613][ T6191] loop3: detected capacity change from 0 to 32768 [ 273.382493][ T5851] [ 273.382493][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.382493][ T5851] [ 273.407816][ T5852] [ 273.407816][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.407816][ T5852] [ 273.420861][ T6192] loop2: detected capacity change from 0 to 32768 [ 273.429124][ T5851] [ 273.429124][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.429124][ T5851] [ 273.442820][ T5852] [ 273.442820][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.442820][ T5852] [pid 6192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6193] <... write resumed>) = 16777216 [pid 6191] <... mount resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 6192] close(3) = 0 [pid 6191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6192] close(4 [pid 5852] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6192] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] munmap(0x7feda9000000, 138412032 [pid 6192] mkdir("./file0", 0777 [pid 6191] <... openat resumed>) = 3 [pid 5852] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6192] <... mkdir resumed>) = 0 [pid 6191] chdir("./file0" [pid 5852] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] newfstatat(AT_FDCWD, "./55/file0", [pid 5852] close(4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./54/file0" [pid 5851] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... rmdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5851] close(4 [pid 5852] rmdir("./54" [pid 5851] <... close resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5851] rmdir("./55/file0" [pid 6192] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6191] <... chdir resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [ 273.459980][ T6191] [ 273.459980][ T6191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.459980][ T6191] [pid 5851] rmdir("./55" [pid 6191] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] mkdir("./55", 0777 [pid 5851] <... rmdir resumed>) = 0 [pid 6191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... mkdir resumed>) = 0 [pid 5851] mkdir("./56", 0777 [pid 6191] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... openat resumed>) = 3 [pid 5851] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5852] <... ioctl resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 5851] close(3 [pid 6193] <... munmap resumed>) = 0 [ 273.504082][ T6191] [ 273.504082][ T6191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.504082][ T6191] [ 273.517924][ T6192] [ 273.517924][ T6192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.517924][ T6192] [ 273.528617][ T6191] [ 273.528617][ T6191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.528617][ T6191] [pid 6193] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6191] <... lsetxattr resumed>) = 0 [pid 6193] <... openat resumed>) = 4 [pid 6192] <... mount resumed>) = 0 [pid 6193] ioctl(4, LOOP_SET_FD, 3 [pid 6191] exit_group(0) = ? [pid 6192] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6191] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6193] <... ioctl resumed>) = 0 [pid 6192] <... openat resumed>) = 3 [pid 6193] close(3 [pid 6192] chdir("./file0" [pid 6193] <... close resumed>) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 6193] close(4 [pid 6192] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6193] <... close resumed>) = 0 [pid 6193] mkdir("./file0", 0777 [pid 6192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6193] <... mkdir resumed>) = 0 [pid 6192] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6193] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] unlink("./54/binderfs") = 0 [ 273.561079][ T113] [ 273.561079][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.561079][ T113] [ 273.573488][ T6193] loop1: detected capacity change from 0 to 32768 [ 273.601060][ T6192] [ 273.601060][ T6192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.601060][ T6192] [pid 5850] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6192] <... lsetxattr resumed>) = 0 [ 273.630289][ T6192] [ 273.630289][ T6192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.630289][ T6192] [ 273.640390][ T5850] [ 273.640390][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.640390][ T5850] [ 273.669722][ T6193] [ 273.669722][ T6193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.669722][ T6193] [pid 6192] exit_group(0) = ? [pid 6192] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./54/binderfs" [pid 6193] <... mount resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5849] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6193] chdir("./file0") = 0 [ 273.681386][ T5850] [ 273.681386][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.681386][ T5850] [ 273.682122][ T112] [ 273.682122][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.682122][ T112] [pid 6193] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 273.743378][ T6193] [ 273.743378][ T6193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.743378][ T6193] [ 273.754502][ T5849] [ 273.754502][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.754502][ T5849] [ 273.776488][ T6193] [ 273.776488][ T6193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.776488][ T6193] [ 273.776767][ T5849] [pid 6193] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./54/file0" [pid 6193] <... lsetxattr resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, [pid 6193] exit_group(0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [ 273.776767][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.776767][ T5849] [pid 5850] rmdir("./54" [pid 6193] <... exit_group resumed>) = ? [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./55", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6193] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./55/binderfs") = 0 [pid 5848] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... close resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./54/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./54/file0") = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./54" [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6195 [pid 5849] <... rmdir resumed>) = 0 [ 273.822342][ T113] [ 273.822342][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.822342][ T113] [ 273.857843][ T5848] [ 273.857843][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.857843][ T5848] [pid 5849] mkdir("./55", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 ./strace-static-x86_64: Process 6195 attached [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6195] set_robust_list(0x555584a2d760, 24) = 0 [pid 6195] chdir("./56") = 0 [pid 6195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6195] setpgid(0, 0) = 0 [pid 6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6196 attached [pid 6195] <... openat resumed>) = 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6196 [pid 6195] write(3, "1000", 4) = 4 [pid 6195] close(3) = 0 [pid 6195] symlink("/dev/binderfs", "./binderfs" [pid 6196] set_robust_list(0x555584a2d760, 24 [pid 6195] <... symlink resumed>) = 0 executing program [pid 6195] write(1, "executing program\n", 18) = 18 [pid 6196] <... set_robust_list resumed>) = 0 [pid 6195] memfd_create("syzkaller", 0) = 3 [pid 6196] chdir("./55" [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6196] <... chdir resumed>) = 0 [pid 6195] <... mmap resumed>) = 0x7feda9000000 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6196] setpgid(0, 0) = 0 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... umount2 resumed>) = 0 [pid 6196] <... openat resumed>) = 3 [ 273.891617][ T5848] [ 273.891617][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.891617][ T5848] [pid 5848] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6196] write(3, "1000", 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... write resumed>) = 4 [pid 5848] newfstatat(AT_FDCWD, "./55/file0", [pid 6196] close(3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6196] <... close resumed>) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5848] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6196] write(1, "executing program\n", 18) = 18 [pid 6196] memfd_create("syzkaller", 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... memfd_create resumed>) = 3 [pid 5848] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 6194] <... write resumed>) = 16777216 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 6194] munmap(0x7feda9000000, 138412032 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./55/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6194] <... munmap resumed>) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./55") = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] mkdir("./56", 0777 [pid 6194] <... openat resumed>) = 4 [pid 5848] <... mkdir resumed>) = 0 [pid 6194] ioctl(4, LOOP_SET_FD, 3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6194] <... ioctl resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6194] close(3) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 6194] close(4) = 0 [pid 5848] close(3 [pid 6194] mkdir("./file0", 0777) = 0 [pid 6194] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [ 274.071732][ T6194] loop0: detected capacity change from 0 to 32768 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x555584a2d760, 24) = 0 [pid 6197] chdir("./55") = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6197 [pid 6197] <... prctl resumed>) = 0 [pid 6197] setpgid(0, 0) = 0 [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6197] write(3, "1000", 4) = 4 [pid 6197] close(3) = 0 [pid 6197] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6197] write(1, "executing program\n", 18) = 18 [pid 6197] memfd_create("syzkaller", 0) = 3 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6194] <... mount resumed>) = 0 [pid 6194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6194] chdir("./file0") = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 274.124219][ T6194] [ 274.124219][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.124219][ T6194] [pid 6194] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 274.191249][ T6194] [ 274.191249][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.191249][ T6194] [pid 6196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 6194] <... lsetxattr resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6198 [pid 6194] exit_group(0) = ? [pid 6194] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6194, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- ./strace-static-x86_64: Process 6198 attached [pid 6198] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6198] chdir("./55" [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6198] <... chdir resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] newfstatat(3, "", [pid 6198] <... prctl resumed>) = 0 [pid 6198] setpgid(0, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6198] <... setpgid resumed>) = 0 [pid 5847] getdents64(3, [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6198] <... openat resumed>) = 3 [pid 5847] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6198] write(3, "1000", 4 [pid 5847] unlink("./55/binderfs") = 0 [pid 6198] <... write resumed>) = 4 [pid 6198] close(3 [pid 5847] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6198] <... close resumed>) = 0 [pid 6198] symlink("/dev/binderfs", "./binderfs") = 0 [ 274.240214][ T6194] [ 274.240214][ T6194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.240214][ T6194] [ 274.260459][ T112] [ 274.260459][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.260459][ T112] [pid 6198] write(1, "executing program\n", 18executing program ) = 18 [pid 6198] memfd_create("syzkaller", 0) = 3 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 274.314178][ T5847] [ 274.314178][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.314178][ T5847] [ 274.337406][ T5847] [ 274.337406][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.337406][ T5847] [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./55/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./55") = 0 [pid 5847] mkdir("./56", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6199 ./strace-static-x86_64: Process 6199 attached [pid 6199] set_robust_list(0x555584a2d760, 24) = 0 [pid 6199] chdir("./56") = 0 [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6199] setpgid(0, 0) = 0 [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6199] write(3, "1000", 4executing program ) = 4 [pid 6199] close(3) = 0 [pid 6199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6199] write(1, "executing program\n", 18) = 18 [pid 6199] memfd_create("syzkaller", 0) = 3 [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6196] <... write resumed>) = 16777216 [pid 6196] munmap(0x7feda9000000, 138412032) = 0 [pid 5847] <... close resumed>) = 0 [pid 6196] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6196] ioctl(4, LOOP_SET_FD, 3 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6200 attached , child_tidptr=0x555584a2d750) = 6200 [pid 6195] <... write resumed>) = 16777216 [pid 6200] set_robust_list(0x555584a2d760, 24 [pid 6195] munmap(0x7feda9000000, 138412032 [pid 6200] <... set_robust_list resumed>) = 0 [pid 6196] <... ioctl resumed>) = 0 [pid 6200] chdir("./56") = 0 [pid 6200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6196] close(3) = 0 [pid 6196] close(4) = 0 [pid 6200] <... prctl resumed>) = 0 [pid 6200] setpgid(0, 0 [pid 6196] mkdir("./file0", 0777) = 0 [pid 6196] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6200] <... setpgid resumed>) = 0 [pid 6200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6200] write(3, "1000", 4) = 4 [pid 6200] close(3) = 0 [pid 6200] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6200] write(1, "executing program\n", 18) = 18 [pid 6200] memfd_create("syzkaller", 0 [pid 6195] <... munmap resumed>) = 0 [pid 6200] <... memfd_create resumed>) = 3 [ 274.746015][ T6196] loop5: detected capacity change from 0 to 32768 [pid 6195] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6195] <... openat resumed>) = 4 [pid 6200] <... mmap resumed>) = 0x7feda9000000 [pid 6195] ioctl(4, LOOP_SET_FD, 3 [pid 6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6197] <... write resumed>) = 16777216 [pid 6197] munmap(0x7feda9000000, 138412032 [pid 6195] <... ioctl resumed>) = 0 [pid 6195] close(3) = 0 [ 274.806435][ T6196] [ 274.806435][ T6196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.806435][ T6196] [ 274.818730][ T6195] loop4: detected capacity change from 0 to 32768 [pid 6196] <... mount resumed>) = 0 [pid 6196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6196] chdir("./file0") = 0 [pid 6196] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6196] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6195] close(4) = 0 [pid 6195] mkdir("./file0", 0777 [pid 6197] <... munmap resumed>) = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6195] <... mkdir resumed>) = 0 [pid 6197] <... openat resumed>) = 4 [pid 6195] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 274.865936][ T6196] [ 274.865936][ T6196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.865936][ T6196] [pid 6197] ioctl(4, LOOP_SET_FD, 3 [pid 6196] <... lsetxattr resumed>) = 0 [pid 6196] exit_group(0) = ? [pid 6196] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6197] <... ioctl resumed>) = 0 [pid 5852] unlink("./55/binderfs" [pid 6197] close(3 [pid 5852] <... unlink resumed>) = 0 [pid 5852] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6197] <... close resumed>) = 0 [ 274.910301][ T6196] [ 274.910301][ T6196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.910301][ T6196] [ 274.910907][ T6197] loop3: detected capacity change from 0 to 32768 [ 274.938569][ T113] [ 274.938569][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.938569][ T113] [ 274.943462][ T6195] [ 274.943462][ T6195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.943462][ T6195] [pid 6197] close(4) = 0 [pid 6195] <... mount resumed>) = 0 [pid 6197] mkdir("./file0", 0777) = 0 [pid 6195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6197] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6195] <... openat resumed>) = 3 [ 274.970742][ T5852] [ 274.970742][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.970742][ T5852] [pid 6195] chdir("./file0") = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6195] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./55/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [ 275.020313][ T5852] [ 275.020313][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.020313][ T5852] [ 275.035111][ T6197] [ 275.035111][ T6197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.035111][ T6197] [ 275.047492][ T6195] [ 275.047492][ T6195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.047492][ T6195] [pid 5852] rmdir("./55") = 0 [pid 5852] mkdir("./56", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6197] <... mount resumed>) = 0 [pid 6197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6197] chdir("./file0") = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6195] <... lsetxattr resumed>) = 0 [ 275.081510][ T6195] [ 275.081510][ T6195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.081510][ T6195] [pid 6197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6195] exit_group(0 [pid 6197] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6195] <... exit_group resumed>) = ? [pid 6198] <... write resumed>) = 16777216 [pid 6198] munmap(0x7feda9000000, 138412032 [pid 6195] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6195, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 275.130193][ T112] [ 275.130193][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.130193][ T112] [ 275.141735][ T6197] [ 275.141735][ T6197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.141735][ T6197] [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6198] <... munmap resumed>) = 0 [pid 5851] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6198] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6198] <... openat resumed>) = 4 [pid 6198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6197] <... lsetxattr resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./56/binderfs" [pid 6197] exit_group(0 [pid 6198] close(3 [pid 5851] <... unlink resumed>) = 0 [pid 6197] <... exit_group resumed>) = ? [pid 6198] <... close resumed>) = 0 [pid 6198] close(4) = 0 [pid 6198] mkdir("./file0", 0777) = 0 [ 275.184772][ T6197] [ 275.184772][ T6197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.184772][ T6197] [ 275.203107][ T6198] loop2: detected capacity change from 0 to 32768 [ 275.211360][ T113] [ 275.211360][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.211360][ T113] [pid 6198] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6197] +++ exited with 0 +++ [pid 5851] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5850] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6198] <... mount resumed>) = 0 [pid 6198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6198] chdir("./file0") = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6198] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 275.266839][ T6198] [ 275.266839][ T6198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.266839][ T6198] [ 275.289137][ T5851] [ 275.289137][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.289137][ T5851] [ 275.292425][ T6198] [ 275.292425][ T6198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.292425][ T6198] [pid 5850] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./55/binderfs") = 0 [pid 5850] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6199] <... write resumed>) = 16777216 [pid 6198] <... lsetxattr resumed>) = 0 [ 275.321637][ T6198] [ 275.321637][ T6198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.321637][ T6198] [ 275.334177][ T5851] [ 275.334177][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.334177][ T5851] [ 275.345748][ T5850] [ 275.345748][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.345748][ T5850] [ 275.357549][ T5850] [ 275.357549][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.357549][ T5850] [pid 6200] <... write resumed>) = 16777216 [pid 6199] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 6200] munmap(0x7feda9000000, 138412032 [pid 6199] <... munmap resumed>) = 0 [pid 6198] exit_group(0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... umount2 resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6201 attached [pid 6200] <... munmap resumed>) = 0 [pid 6199] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6198] <... exit_group resumed>) = ? [pid 5851] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6201] set_robust_list(0x555584a2d760, 24 [pid 6200] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6201 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6200] <... openat resumed>) = 4 [pid 5851] newfstatat(AT_FDCWD, "./56/file0", [pid 5850] newfstatat(AT_FDCWD, "./55/file0", [pid 6201] <... set_robust_list resumed>) = 0 [pid 6200] ioctl(4, LOOP_SET_FD, 3 [pid 6199] <... openat resumed>) = 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6201] chdir("./56" [pid 6199] ioctl(4, LOOP_SET_FD, 3 [pid 6198] +++ exited with 0 +++ [pid 5851] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 275.376882][ T112] [ 275.376882][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.376882][ T112] [pid 5850] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6201] <... chdir resumed>) = 0 [pid 6200] <... ioctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6200] close(3 [pid 5850] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6200] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 6201] <... prctl resumed>) = 0 [pid 6200] close(4 [pid 6201] setpgid(0, 0 [pid 6200] <... close resumed>) = 0 [pid 5850] newfstatat(4, "", [pid 6201] <... setpgid resumed>) = 0 [pid 6200] mkdir("./file0", 0777 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6200] <... mkdir resumed>) = 0 [pid 5850] getdents64(4, [pid 6201] <... openat resumed>) = 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5849] <... restart_syscall resumed>) = 0 [pid 6201] write(3, "1000", 4 [pid 6200] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6201] <... write resumed>) = 4 [pid 5850] close(4) = 0 [pid 5849] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6201] close(3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] rmdir("./55/file0" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6201] <... close resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] getdents64(3, [pid 5849] <... openat resumed>) = 3 [pid 6201] symlink("/dev/binderfs", "./binderfs" [pid 5849] newfstatat(3, "", [pid 6201] <... symlink resumed>) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6201] write(1, "executing program\n", 18 [pid 6199] <... ioctl resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 5850] close(3 [pid 6199] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... close resumed>) = 0 [pid 6199] <... close resumed>) = 0 [pid 5851] getdents64(4, [pid 5850] rmdir("./55" executing program [pid 6199] close(4 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... rmdir resumed>) = 0 [pid 6201] <... write resumed>) = 18 [pid 6199] <... close resumed>) = 0 [pid 5851] getdents64(4, [pid 5850] mkdir("./56", 0777 [pid 5849] getdents64(3, [pid 6199] mkdir("./file0", 0777 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 6201] memfd_create("syzkaller", 0 [pid 6199] <... mkdir resumed>) = 0 [pid 5851] close(4 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6201] <... memfd_create resumed>) = 3 [pid 5849] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... close resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 6201] <... mmap resumed>) = 0x7feda9000000 [pid 5851] rmdir("./56/file0" [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5851] <... rmdir resumed>) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5851] getdents64(3, [pid 5850] close(3 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] close(3 [pid 5849] newfstatat(AT_FDCWD, "./55/binderfs", [pid 5851] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6199] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] rmdir("./56" [pid 5849] unlink("./55/binderfs" [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5851] mkdir("./57", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 275.432551][ T6199] loop1: detected capacity change from 0 to 32768 [ 275.432581][ T6200] loop0: detected capacity change from 0 to 32768 [ 275.453989][ T6200] [ 275.453989][ T6200] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.453989][ T6200] [pid 5851] close(3 [pid 6200] <... mount resumed>) = 0 [pid 5849] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6200] chdir("./file0") = 0 [pid 6200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 275.540407][ T6200] [ 275.540407][ T6200] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.540407][ T6200] [ 275.552592][ T5849] [ 275.552592][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.552592][ T5849] [ 275.564126][ T6199] [ 275.564126][ T6199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.564126][ T6199] [pid 6200] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6199] <... mount resumed>) = 0 [pid 6199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6199] chdir("./file0") = 0 [pid 6199] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6199] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6200] <... lsetxattr resumed>) = 0 [ 275.590457][ T6200] [ 275.590457][ T6200] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.590457][ T6200] [ 275.595475][ T6199] [ 275.595475][ T6199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.595475][ T6199] [ 275.612238][ T5849] [ 275.612238][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.612238][ T5849] [pid 6200] exit_group(0) = ? [pid 6200] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6200, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./56/binderfs") = 0 [pid 5847] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./55/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 275.640500][ T113] [ 275.640500][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.640500][ T113] [ 275.650018][ T6199] [ 275.650018][ T6199] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.650018][ T6199] [pid 6199] <... lsetxattr resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6199] exit_group(0 [pid 5849] getdents64(4, [pid 6199] <... exit_group resumed>) = ? [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6199] +++ exited with 0 +++ [pid 5849] close(4) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] rmdir("./55/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./55") = 0 [pid 5849] mkdir("./56", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5848] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./56/binderfs") = 0 [pid 5848] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... ioctl resumed>) = 0 [ 275.703276][ T5847] [ 275.703276][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.703276][ T5847] [ 275.717248][ T112] [ 275.717248][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.717248][ T112] [ 275.733968][ T5847] [ 275.733968][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.733968][ T5847] [ 275.750848][ T5848] [pid 5849] close(3 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./56/file0", [pid 5850] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6202 attached [pid 5847] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6202 [pid 5847] <... openat resumed>) = 4 [pid 6202] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] newfstatat(4, "", [pid 6202] chdir("./56" [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6202] <... chdir resumed>) = 0 [pid 5847] getdents64(4, [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6202] <... prctl resumed>) = 0 [pid 5847] getdents64(4, [pid 6202] setpgid(0, 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6202] <... setpgid resumed>) = 0 [pid 5847] close(4) = 0 [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] rmdir("./56/file0") = 0 [pid 6202] <... openat resumed>) = 3 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./56") = 0 [pid 6202] write(3, "1000", 4 [pid 5848] <... umount2 resumed>) = 0 [pid 5847] mkdir("./57", 0777 [pid 6202] <... write resumed>) = 4 [ 275.750848][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.750848][ T5848] [ 275.790831][ T5848] [ 275.790831][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.790831][ T5848] [pid 5848] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] close(3 [pid 5847] <... mkdir resumed>) = 0 [pid 6202] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6202] symlink("/dev/binderfs", "./binderfs" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 3 [pid 5848] newfstatat(AT_FDCWD, "./56/file0", [pid 6202] <... symlink resumed>) = 0 executing program [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6202] write(1, "executing program\n", 18) = 18 [pid 5848] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6202] memfd_create("syzkaller", 0) = 3 [pid 5848] <... openat resumed>) = 4 [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] newfstatat(4, "", [pid 6202] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./56/file0") = 0 [pid 5848] getdents64(3, [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5848] close(3) = 0 [pid 5847] close(3 [pid 5848] rmdir("./56") = 0 [pid 5848] mkdir("./57", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6203 attached , child_tidptr=0x555584a2d750) = 6203 [pid 6203] set_robust_list(0x555584a2d760, 24) = 0 [pid 6203] chdir("./57") = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6203] setpgid(0, 0) = 0 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6203] write(3, "1000", 4) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6203] write(1, "executing program\n", 18) = 18 [pid 6203] memfd_create("syzkaller", 0) = 3 [pid 6203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6204 ./strace-static-x86_64: Process 6204 attached [pid 6204] set_robust_list(0x555584a2d760, 24) = 0 [pid 6204] chdir("./56"executing program [pid 5848] <... close resumed>) = 0 [pid 6204] <... chdir resumed>) = 0 [pid 6204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6204] setpgid(0, 0) = 0 [pid 6204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6204] write(3, "1000", 4) = 4 [pid 6204] close(3) = 0 [pid 6204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6204] write(1, "executing program\n", 18) = 18 [pid 6204] memfd_create("syzkaller", 0) = 3 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6205 attached [pid 5847] <... close resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6205 [pid 6205] set_robust_list(0x555584a2d760, 24) = 0 [pid 6205] chdir("./57") = 0 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6205] write(3, "1000", 4) = 4 [pid 6205] close(3) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6205] write(1, "executing program\n", 18) = 18 [pid 6205] memfd_create("syzkaller", 0) = 3 [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 ./strace-static-x86_64: Process 6206 attached [pid 6206] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6206 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6206] chdir("./57") = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6206] setpgid(0, 0) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6206] write(3, "1000", 4) = 4 [pid 6206] close(3) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6206] write(1, "executing program\n", 18) = 18 [pid 6206] memfd_create("syzkaller", 0) = 3 [pid 6206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6201] <... write resumed>) = 16777216 [pid 6201] munmap(0x7feda9000000, 138412032) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6201] ioctl(4, LOOP_SET_FD, 3) = 0 [ 276.383266][ T6201] loop5: detected capacity change from 0 to 32768 [pid 6201] close(3) = 0 [pid 6201] close(4) = 0 [pid 6201] mkdir("./file0", 0777) = 0 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6201] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6201] <... mount resumed>) = 0 [pid 6201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6201] chdir("./file0") = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 276.467440][ T6201] [ 276.467440][ T6201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.467440][ T6201] [pid 6201] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 276.526369][ T6201] [ 276.526369][ T6201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.526369][ T6201] [pid 6206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6202] <... write resumed>) = 16777216 [pid 6202] munmap(0x7feda9000000, 138412032 [pid 6201] <... lsetxattr resumed>) = 0 [pid 6201] exit_group(0) = ? [pid 6201] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6202] <... munmap resumed>) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] <... restart_syscall resumed>) = 0 [pid 6202] <... openat resumed>) = 4 [ 276.570018][ T6201] [ 276.570018][ T6201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.570018][ T6201] [ 276.600492][ T112] [ 276.600492][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.600492][ T112] [pid 5852] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6202] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... openat resumed>) = 3 [pid 6202] <... ioctl resumed>) = 0 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6202] close(3 [pid 5852] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] close(4 [pid 5852] newfstatat(AT_FDCWD, "./56/binderfs", [pid 6202] <... close resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6202] mkdir("./file0", 0777 [pid 5852] unlink("./56/binderfs") = 0 [pid 6202] <... mkdir resumed>) = 0 [ 276.632351][ T6202] loop3: detected capacity change from 0 to 32768 [pid 5852] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6202] chdir("./file0") = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 276.684946][ T5852] [ 276.684946][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.684946][ T5852] [ 276.713347][ T6202] [ 276.713347][ T6202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.713347][ T6202] [ 276.724248][ T5852] [ 276.724248][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.724248][ T5852] [ 276.751251][ T6202] [ 276.751251][ T6202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.751251][ T6202] [pid 6202] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6202] <... lsetxattr resumed>) = 0 [pid 5852] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6202] exit_group(0) = ? [pid 6202] +++ exited with 0 +++ [pid 6203] <... write resumed>) = 16777216 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6202, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 6203] munmap(0x7feda9000000, 138412032 [pid 5850] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] newfstatat(3, "", [pid 5852] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] newfstatat(4, "", [pid 5850] getdents64(3, [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] getdents64(4, [pid 5850] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] getdents64(4, [pid 5850] newfstatat(AT_FDCWD, "./56/binderfs", [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] close(4 [pid 5850] unlink("./56/binderfs" [pid 5852] <... close resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5852] rmdir("./56/file0" [ 276.800160][ T6202] [ 276.800160][ T6202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.800160][ T6202] [ 276.830367][ T113] [ 276.830367][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.830367][ T113] [pid 5850] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 6203] <... munmap resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./56" [pid 6203] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... rmdir resumed>) = 0 [pid 6203] <... openat resumed>) = 4 [pid 6203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6204] <... write resumed>) = 16777216 [pid 5852] mkdir("./57", 0777 [pid 6203] close(3) = 0 [pid 6203] close(4) = 0 [pid 6203] mkdir("./file0", 0777) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 6203] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6204] munmap(0x7feda9000000, 138412032 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 276.858356][ T5850] [ 276.858356][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.858356][ T5850] [ 276.879995][ T5850] [ 276.879995][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.879995][ T5850] [ 276.892635][ T6203] loop4: detected capacity change from 0 to 32768 [pid 5850] <... umount2 resumed>) = 0 [pid 6206] <... write resumed>) = 16777216 [pid 6205] <... write resumed>) = 16777216 [pid 5852] close(3 [pid 5850] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6205] munmap(0x7feda9000000, 138412032 [pid 5850] <... openat resumed>) = 4 [pid 6206] munmap(0x7feda9000000, 138412032 [pid 6204] <... munmap resumed>) = 0 [pid 6205] <... munmap resumed>) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] newfstatat(4, "", [pid 6204] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 6205] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6204] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6205] <... openat resumed>) = 4 [pid 5850] close(4) = 0 [pid 5850] rmdir("./56/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./56") = 0 [pid 6205] ioctl(4, LOOP_SET_FD, 3 [pid 5850] mkdir("./57", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6204] <... ioctl resumed>) = 0 [pid 6204] close(3) = 0 [pid 6204] close(4) = 0 [pid 6204] mkdir("./file0", 0777) = 0 [pid 6206] <... munmap resumed>) = 0 [pid 6204] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6203] <... mount resumed>) = 0 [pid 6203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6203] chdir("./file0") = 0 [pid 6203] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 276.975669][ T6203] [ 276.975669][ T6203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.975669][ T6203] [ 276.991934][ T6204] loop2: detected capacity change from 0 to 32768 [ 277.005614][ T6205] loop1: detected capacity change from 0 to 32768 [pid 6203] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6205] <... ioctl resumed>) = 0 [pid 6205] close(3) = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6205] close(4) = 0 [pid 6205] mkdir("./file0", 0777) = 0 [ 277.031378][ T6203] [ 277.031378][ T6203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.031378][ T6203] [ 277.052723][ T6206] loop0: detected capacity change from 0 to 32768 [ 277.063302][ T6203] [ 277.063302][ T6203] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.063302][ T6203] [ 277.073560][ T6204] [pid 6205] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6206] mkdir("./file0", 0777) = 0 [pid 6206] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6203] <... lsetxattr resumed>) = 0 [pid 6203] exit_group(0) = ? [pid 6203] +++ exited with 0 +++ [pid 6206] <... mount resumed>) = 0 [pid 6206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6206] chdir("./file0") = 0 [pid 6206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 277.073560][ T6204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.073560][ T6204] [ 277.090669][ T6206] [ 277.090669][ T6206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.090669][ T6206] [ 277.110722][ T6205] [ 277.110722][ T6205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.110722][ T6205] [ 277.110912][ T113] [ 277.110912][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.110912][ T113] [pid 6206] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6204] <... mount resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 6204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6204] chdir("./file0") = 0 [pid 6205] <... mount resumed>) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6205] <... openat resumed>) = 3 [pid 6205] chdir("./file0") = 0 [pid 6205] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6205] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 277.127605][ T6206] [ 277.127605][ T6206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.127605][ T6206] [ 277.152212][ T6204] [ 277.152212][ T6204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.152212][ T6204] [ 277.153442][ T6205] [ 277.153442][ T6205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.153442][ T6205] [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./57/binderfs") = 0 [ 277.180408][ T6206] [ 277.180408][ T6206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.180408][ T6206] [ 277.190039][ T6204] [ 277.190039][ T6204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.190039][ T6204] [pid 5851] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6204] <... lsetxattr resumed>) = 0 [pid 6204] exit_group(0) = ? [pid 6204] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6204, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 6206] <... lsetxattr resumed>) = 0 [pid 6206] exit_group(0) = ? [ 277.230682][ T5851] [ 277.230682][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.230682][ T5851] [ 277.230983][ T113] [ 277.230983][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.230983][ T113] [ 277.263064][ T6205] [ 277.263064][ T6205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.263064][ T6205] [ 277.277943][ T112] [pid 6206] +++ exited with 0 +++ [pid 5849] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6206, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./56/binderfs") = 0 [ 277.277943][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.277943][ T112] [ 277.300665][ T5849] [ 277.300665][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.300665][ T5849] [ 277.300708][ T5851] [ 277.300708][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.300708][ T5851] [ 277.312562][ T5849] [ 277.312562][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5849] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6205] <... lsetxattr resumed>) = 0 [pid 5847] getdents64(3, [pid 6205] exit_group(0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6207 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6205] <... exit_group resumed>) = ? [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./57/binderfs"./strace-static-x86_64: Process 6207 attached [pid 6207] set_robust_list(0x555584a2d760, 24) = 0 [pid 6207] chdir("./57") = 0 [pid 6207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6207] setpgid(0, 0) = 0 [pid 6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6205] +++ exited with 0 +++ [pid 5847] <... unlink resumed>) = 0 [pid 5847] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 6207] <... openat resumed>) = 3 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6207] write(3, "1000", 4) = 4 [pid 6207] close(3) = 0 [pid 6207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6207] write(1, "executing program\n", 18) = 18 [pid 6207] memfd_create("syzkaller", 0) = 3 [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./57/binderfs") = 0 [pid 5848] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./56/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./56/file0" [pid 5850] <... close resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [ 277.312562][ T5849] [ 277.335479][ T113] [ 277.335479][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.335479][ T113] [ 277.352424][ T5847] [ 277.352424][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.352424][ T5847] [ 277.368425][ T5848] [ 277.368425][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.368425][ T5848] [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./56") = 0 [pid 5849] mkdir("./57", 0777 [pid 5851] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... mkdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] newfstatat(AT_FDCWD, "./57/file0", [pid 5849] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6208 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6208 attached ) = 4 [pid 5851] newfstatat(4, "", [pid 6208] set_robust_list(0x555584a2d760, 24) = 0 [pid 6208] chdir("./57") = 0 [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6208] setpgid(0, 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6208] <... setpgid resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6208] write(3, "1000", 4) = 4 [pid 6208] close(3) = 0 [pid 6208] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5851] getdents64(4, [pid 6208] write(1, "executing program\n", 18) = 18 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6208] memfd_create("syzkaller", 0 [pid 5851] getdents64(4, [pid 6208] <... memfd_create resumed>) = 3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] close(4) = 0 [pid 5851] rmdir("./57/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./57") = 0 [pid 5851] mkdir("./58", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 277.387618][ T5847] [ 277.387618][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.387618][ T5847] [ 277.420683][ T5848] [ 277.420683][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.420683][ T5848] [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./57/file0", [pid 5847] newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... openat resumed>) = 4 [pid 5847] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 5847] getdents64(4, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] getdents64(4, [pid 5848] close(4 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] rmdir("./57/file0") = 0 [pid 5847] getdents64(3, [pid 5848] rmdir("./57/file0" [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] close(3 [pid 5848] getdents64(3, [pid 5847] <... close resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] rmdir("./57" [pid 5848] close(3 [pid 5847] <... rmdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] mkdir("./58", 0777 [pid 5848] rmdir("./57") = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5848] mkdir("./58", 0777 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5847] <... ioctl resumed>) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] close(3 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6209 ./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x555584a2d760, 24) = 0 [pid 6209] chdir("./57") = 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6209] setpgid(0, 0) = 0 [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6209] write(3, "1000", 4) = 4 [pid 6209] close(3) = 0 [pid 6209] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6209] write(1, "executing program\n", 18 [pid 5851] <... close resumed>) = 0 [pid 6209] <... write resumed>) = 18 [pid 6209] memfd_create("syzkaller", 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6209] <... memfd_create resumed>) = 3 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6210 attached ) = 0x7feda9000000 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6210 [pid 6210] set_robust_list(0x555584a2d760, 24) = 0 [pid 6210] chdir("./58") = 0 [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6210] setpgid(0, 0) = 0 [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6210] write(3, "1000", 4) = 4 [pid 6210] close(3) = 0 [pid 6210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6210] write(1, "executing program\n", 18) = 18 [pid 6210] memfd_create("syzkaller", 0) = 3 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6211 attached [pid 6211] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6211 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6212 attached [pid 6211] <... set_robust_list resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6212 [pid 6212] set_robust_list(0x555584a2d760, 24 [pid 6211] chdir("./58" [pid 6212] <... set_robust_list resumed>) = 0 [pid 6211] <... chdir resumed>) = 0 [pid 6212] chdir("./58") = 0 [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6211] setpgid(0, 0) = 0 [pid 6212] setpgid(0, 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6212] <... setpgid resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6211] <... openat resumed>) = 3 [pid 6211] write(3, "1000", 4 [pid 6212] <... openat resumed>) = 3 [pid 6211] <... write resumed>) = 4 [pid 6212] write(3, "1000", 4 [pid 6211] close(3 [pid 6212] <... write resumed>) = 4 [pid 6211] <... close resumed>) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6212] close(3 [pid 6211] write(1, "executing program\n", 18executing program ) = 18 [pid 6212] <... close resumed>) = 0 [pid 6211] memfd_create("syzkaller", 0 [pid 6212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6211] <... memfd_create resumed>) = 3 executing program [pid 6212] write(1, "executing program\n", 18 [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6212] <... write resumed>) = 18 [pid 6211] <... mmap resumed>) = 0x7feda9000000 [pid 6212] memfd_create("syzkaller", 0) = 3 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6207] <... write resumed>) = 16777216 [pid 6207] munmap(0x7feda9000000, 138412032) = 0 [pid 6208] <... write resumed>) = 16777216 [pid 6207] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6208] munmap(0x7feda9000000, 138412032 [pid 6207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6207] close(3) = 0 [pid 6207] close(4) = 0 [pid 6207] mkdir("./file0", 0777 [pid 6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6207] <... mkdir resumed>) = 0 [pid 6207] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6208] <... munmap resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6207] <... mount resumed>) = 0 [pid 6208] <... openat resumed>) = 4 [pid 6207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6207] chdir("./file0" [pid 6208] ioctl(4, LOOP_SET_FD, 3 [pid 6207] <... chdir resumed>) = 0 [ 278.190405][ T6207] loop5: detected capacity change from 0 to 32768 [ 278.227882][ T6207] [ 278.227882][ T6207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.227882][ T6207] [pid 6208] <... ioctl resumed>) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6207] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6208] close(3) = 0 [ 278.270242][ T6208] loop3: detected capacity change from 0 to 32768 [ 278.300704][ T6207] [ 278.300704][ T6207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.300704][ T6207] [pid 6208] close(4) = 0 [pid 6208] mkdir("./file0", 0777) = 0 [pid 6207] <... lsetxattr resumed>) = 0 [pid 6208] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6207] exit_group(0) = ? [ 278.330095][ T6207] [ 278.330095][ T6207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.330095][ T6207] [ 278.357110][ T112] [ 278.357110][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.357110][ T112] [ 278.374989][ T6208] [pid 6207] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5852] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6208] <... mount resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6208] <... openat resumed>) = 3 [pid 6208] chdir("./file0" [pid 5852] <... openat resumed>) = 3 [pid 6208] <... chdir resumed>) = 0 [pid 5852] newfstatat(3, "", [pid 6208] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] getdents64(3, [ 278.374989][ T6208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.374989][ T6208] [pid 6208] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6209] <... write resumed>) = 16777216 [pid 5852] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6209] munmap(0x7feda9000000, 138412032 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./57/binderfs") = 0 [pid 5852] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6208] <... lsetxattr resumed>) = 0 [ 278.421073][ T6208] [ 278.421073][ T6208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.421073][ T6208] [ 278.454657][ T6208] [ 278.454657][ T6208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.454657][ T6208] [pid 6209] <... munmap resumed>) = 0 [pid 6208] exit_group(0 [pid 6209] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6209] ioctl(4, LOOP_SET_FD, 3 [pid 6208] <... exit_group resumed>) = ? [pid 6209] <... ioctl resumed>) = 0 [pid 6208] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 6209] close(3) = 0 [pid 6209] close(4) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6209] mkdir("./file0", 0777 [pid 5852] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6209] <... mkdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] newfstatat(AT_FDCWD, "./57/file0", [pid 5850] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 4 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5852] getdents64(4, [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 278.490856][ T113] [ 278.490856][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.490856][ T113] [ 278.502505][ T5852] [ 278.502505][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.502505][ T5852] [ 278.507039][ T6209] loop2: detected capacity change from 0 to 32768 [ 278.513572][ T5852] [ 278.513572][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.513572][ T5852] [pid 5852] getdents64(4, [pid 5850] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] close(4 [pid 5850] newfstatat(AT_FDCWD, "./57/binderfs", [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./57/file0" [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] <... write resumed>) = 16777216 [pid 5852] <... rmdir resumed>) = 0 [pid 5850] unlink("./57/binderfs" [pid 5852] getdents64(3, [pid 5850] <... unlink resumed>) = 0 [pid 6210] munmap(0x7feda9000000, 138412032 [pid 6209] <... mount resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(3 [pid 6209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./57" [pid 6209] <... openat resumed>) = 3 [pid 5852] <... rmdir resumed>) = 0 [ 278.574762][ T6209] [ 278.574762][ T6209] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.574762][ T6209] [ 278.606964][ T5850] [ 278.606964][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.606964][ T5850] [pid 6212] <... write resumed>) = 16777216 [pid 6210] <... munmap resumed>) = 0 [pid 6209] chdir("./file0" [pid 5852] mkdir("./58", 0777 [pid 6212] munmap(0x7feda9000000, 138412032 [pid 6210] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6209] <... chdir resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 6210] <... openat resumed>) = 4 [pid 6209] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 6209] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... openat resumed>) = 3 [pid 6209] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6210] <... ioctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 6210] close(3 [pid 5850] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./57/file0", [pid 6212] <... munmap resumed>) = 0 [pid 6210] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] close(4 [pid 5850] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6210] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] mkdir("./file0", 0777 [pid 5850] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] <... mkdir resumed>) = 0 [pid 6210] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [ 278.642470][ T5850] [ 278.642470][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.642470][ T5850] [ 278.660269][ T6210] loop4: detected capacity change from 0 to 32768 [ 278.667976][ T6209] [ 278.667976][ T6209] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.667976][ T6209] [ 278.679858][ T6209] [ 278.679858][ T6209] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.679858][ T6209] [pid 6212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./57/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./57") = 0 [pid 6211] <... write resumed>) = 16777216 [pid 5850] mkdir("./58", 0777) = 0 [pid 6209] <... lsetxattr resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6209] exit_group(0 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6209] <... exit_group resumed>) = ? [pid 5850] <... ioctl resumed>) = 0 [pid 6212] <... ioctl resumed>) = 0 [pid 6209] +++ exited with 0 +++ [pid 5850] close(3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6212] close(3 [pid 5849] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./57/binderfs") = 0 [ 278.727006][ T6212] loop0: detected capacity change from 0 to 32768 [ 278.736571][ T6210] [ 278.736571][ T6210] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.736571][ T6210] [pid 5849] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6212] <... close resumed>) = 0 [pid 6212] close(4 [pid 6211] munmap(0x7feda9000000, 138412032 [pid 6212] <... close resumed>) = 0 [pid 6212] mkdir("./file0", 0777) = 0 [pid 6212] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6210] <... mount resumed>) = 0 [pid 6210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6210] chdir("./file0") = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 278.773651][ T112] [ 278.773651][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.773651][ T112] [ 278.802686][ T6210] [ 278.802686][ T6210] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.802686][ T6210] [ 278.804609][ T6212] [ 278.804609][ T6212] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.804609][ T6212] [pid 6210] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6211] <... munmap resumed>) = 0 [pid 6211] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6212] <... mount resumed>) = 0 [ 278.820182][ T5849] [ 278.820182][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.820182][ T5849] [ 278.841068][ T6210] [ 278.841068][ T6210] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.841068][ T6210] [ 278.855409][ T5849] [ 278.855409][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.855409][ T5849] [pid 6211] ioctl(4, LOOP_SET_FD, 3 [pid 6212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6211] <... ioctl resumed>) = 0 [pid 6212] <... openat resumed>) = 3 [pid 6212] chdir("./file0") = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6212] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6210] <... lsetxattr resumed>) = 0 [pid 6210] exit_group(0) = ? [pid 6210] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6210, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, [pid 6211] close(3 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] <... close resumed>) = 0 [ 278.871651][ T6211] loop1: detected capacity change from 0 to 32768 [ 278.884918][ T6212] [ 278.884918][ T6212] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.884918][ T6212] [ 278.901137][ T112] [ 278.901137][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.901137][ T112] [ 278.920139][ T6212] [pid 6211] close(4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6211] mkdir("./file0", 0777 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./58/binderfs" [pid 6211] <... mkdir resumed>) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 6211] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./57/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./57/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./57") = 0 [pid 5849] mkdir("./58", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 278.920139][ T6212] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.920139][ T6212] [ 278.951984][ T5851] [ 278.951984][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.951984][ T5851] [ 278.964538][ T5851] [ 278.964538][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5849] close(3 [pid 6212] <... lsetxattr resumed>) = 0 [pid 6211] <... mount resumed>) = 0 [pid 6211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6212] exit_group(0 [pid 6211] <... openat resumed>) = 3 [pid 6212] <... exit_group resumed>) = ? [pid 6212] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6212, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6211] chdir("./file0" [pid 5851] <... umount2 resumed>) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6211] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6211] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] newfstatat(AT_FDCWD, "./58/file0", [pid 5847] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 278.964538][ T5851] [ 278.979726][ T6211] [ 278.979726][ T6211] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.979726][ T6211] [ 279.010373][ T113] [ 279.010373][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.010373][ T113] [pid 6211] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6211] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./58/binderfs") = 0 [pid 5847] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", [pid 5852] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 279.040670][ T6211] [ 279.040670][ T6211] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.040670][ T6211] [ 279.065216][ T6211] [ 279.065216][ T6211] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.065216][ T6211] [ 279.066407][ T5847] [ 279.066407][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.066407][ T5847] [pid 6211] <... lsetxattr resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4./strace-static-x86_64: Process 6213 attached [pid 6213] set_robust_list(0x555584a2d760, 24) = 0 [pid 6213] chdir("./58") = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6213] setpgid(0, 0) = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] <... close resumed>) = 0 [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6213] write(1, "executing program\n", 18executing program ) = 18 [pid 6213] memfd_create("syzkaller", 0 [pid 5851] rmdir("./58/file0" [pid 6213] <... memfd_create resumed>) = 3 [pid 6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6211] exit_group(0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6213 [pid 5851] <... rmdir resumed>) = 0 [pid 6211] <... exit_group resumed>) = ? [pid 6211] +++ exited with 0 +++ [pid 5851] getdents64(3, [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] close(3 [pid 5848] unlink("./58/binderfs" [pid 5851] <... close resumed>) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] rmdir("./58") = 0 [ 279.091120][ T112] [ 279.091120][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.091120][ T112] [ 279.091717][ T5847] [ 279.091717][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.091717][ T5847] [pid 5851] mkdir("./59", 0777 [pid 5850] <... close resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6214 [pid 5851] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6214 attached executing program [pid 5851] close(3 [pid 6214] set_robust_list(0x555584a2d760, 24) = 0 [pid 6214] chdir("./58") = 0 [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6214] setpgid(0, 0) = 0 [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6214] write(3, "1000", 4) = 4 [pid 6214] close(3) = 0 [pid 6214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6214] write(1, "executing program\n", 18) = 18 [pid 6214] memfd_create("syzkaller", 0) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... openat resumed>) = 4 [ 279.140660][ T5848] [ 279.140660][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.140660][ T5848] [ 279.161062][ T5848] [ 279.161062][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.161062][ T5848] [pid 5847] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", [pid 5847] newfstatat(4, "", [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 5847] getdents64(4, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 5847] getdents64(4, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4 [pid 5847] close(4 [pid 5848] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5848] rmdir("./58/file0" [pid 5847] rmdir("./58/file0" [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./58" [pid 5847] <... rmdir resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./59", 0777 [pid 5847] getdents64(3, [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./58") = 0 [pid 5847] mkdir("./59", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x555584a2d750) = 6215 ./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x555584a2d760, 24) = 0 [pid 6215] chdir("./58") = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] setpgid(0, 0) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6215] write(3, "1000", 4) = 4 [pid 6215] close(3) = 0 [pid 6215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6215] write(1, "executing program\n", 18) = 18 [pid 6215] memfd_create("syzkaller", 0) = 3 [pid 6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6216 attached [pid 6216] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6216 [pid 6216] <... set_robust_list resumed>) = 0 [pid 6216] chdir("./59" [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6216] <... chdir resumed>) = 0 [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6216] setpgid(0, 0) = 0 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6216] write(3, "1000", 4) = 4 [pid 6216] close(3) = 0 [pid 6216] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... close resumed>) = 0 [pid 6216] <... symlink resumed>) = 0 [pid 5848] <... close resumed>) = 0 executing program [pid 6216] write(1, "executing program\n", 18) = 18 [pid 6216] memfd_create("syzkaller", 0) = 3 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6217 attached ) = 0x7feda9000000 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6217 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6218 ./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x555584a2d760, 24) = 0 [pid 6218] chdir("./59") = 0 [pid 6218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6218] setpgid(0, 0) = 0 [pid 6218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6218] write(3, "1000", 4 [pid 6217] set_robust_list(0x555584a2d760, 24 [pid 6218] <... write resumed>) = 4 [pid 6217] <... set_robust_list resumed>) = 0 [pid 6218] close(3) = 0 [pid 6218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6217] chdir("./59") = 0 executing program [pid 6218] write(1, "executing program\n", 18) = 18 [pid 6217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6218] memfd_create("syzkaller", 0 [pid 6217] <... prctl resumed>) = 0 [pid 6218] <... memfd_create resumed>) = 3 [pid 6217] setpgid(0, 0 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6217] <... setpgid resumed>) = 0 [pid 6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6217] write(3, "1000", 4) = 4 [pid 6217] close(3) = 0 [pid 6217] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6217] write(1, "executing program\n", 18) = 18 [pid 6217] memfd_create("syzkaller", 0) = 3 [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6213] <... write resumed>) = 16777216 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6213] munmap(0x7feda9000000, 138412032) = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6213] ioctl(4, LOOP_SET_FD, 3 [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6213] <... ioctl resumed>) = 0 [pid 6213] close(3) = 0 [pid 6213] close(4) = 0 [pid 6213] mkdir("./file0", 0777) = 0 [ 279.893852][ T6213] loop5: detected capacity change from 0 to 32768 [ 279.921004][ T6213] [ 279.921004][ T6213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.921004][ T6213] [pid 6213] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6214] <... write resumed>) = 16777216 [pid 6213] <... mount resumed>) = 0 [pid 6214] munmap(0x7feda9000000, 138412032 [pid 6213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6213] chdir("./file0") = 0 [pid 6213] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6213] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6214] <... munmap resumed>) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 280.021122][ T6213] [ 280.021122][ T6213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.021122][ T6213] [ 280.054242][ T6213] [ 280.054242][ T6213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.054242][ T6213] [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6214] close(3) = 0 [pid 6214] close(4) = 0 [ 280.066814][ T6214] loop3: detected capacity change from 0 to 32768 [pid 6214] mkdir("./file0", 0777) = 0 [pid 6214] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6213] <... lsetxattr resumed>) = 0 [pid 6213] exit_group(0) = ? [pid 6213] +++ exited with 0 +++ [pid 6214] <... mount resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 6214] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6215] <... write resumed>) = 16777216 [pid 6214] chdir("./file0" [pid 5852] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6214] <... chdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6214] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 280.105371][ T6214] [ 280.105371][ T6214] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.105371][ T6214] [ 280.119738][ T113] [ 280.119738][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.119738][ T113] [pid 5852] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... openat resumed>) = 3 [pid 6214] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] newfstatat(3, "", [pid 6215] munmap(0x7feda9000000, 138412032 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./58/binderfs") = 0 [ 280.168223][ T6214] [ 280.168223][ T6214] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.168223][ T6214] [ 280.193617][ T6214] [ 280.193617][ T6214] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.193617][ T6214] [pid 5852] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6215] <... munmap resumed>) = 0 [pid 6214] <... lsetxattr resumed>) = 0 [pid 6215] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6214] exit_group(0 [pid 6215] ioctl(4, LOOP_SET_FD, 3 [pid 6214] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 6215] <... ioctl resumed>) = 0 [pid 5850] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6215] close(3) = 0 [pid 6215] close(4) = 0 [pid 6215] mkdir("./file0", 0777) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6215] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 280.220020][ T5852] [ 280.220020][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.220020][ T5852] [ 280.232915][ T5852] [ 280.232915][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.232915][ T5852] [ 280.244336][ T112] [ 280.244336][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.244336][ T112] [ 280.257685][ T6215] loop2: detected capacity change from 0 to 32768 [pid 6216] <... write resumed>) = 16777216 [pid 5850] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./58/binderfs") = 0 [pid 5850] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6216] munmap(0x7feda9000000, 138412032 [pid 6215] <... mount resumed>) = 0 [pid 6215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6215] chdir("./file0") = 0 [pid 6215] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 280.284863][ T6215] [ 280.284863][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.284863][ T6215] [ 280.308045][ T5850] [ 280.308045][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.308045][ T5850] [ 280.328295][ T6215] [pid 6215] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 6216] <... munmap resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6217] <... write resumed>) = 16777216 [pid 6216] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./58/file0" [pid 6216] <... openat resumed>) = 4 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [ 280.328295][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.328295][ T6215] [ 280.354780][ T5850] [ 280.354780][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.354780][ T5850] [ 280.367258][ T6215] [ 280.367258][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.367258][ T6215] [pid 5852] rmdir("./58" [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./59", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6218] <... write resumed>) = 16777216 [pid 6217] munmap(0x7feda9000000, 138412032 [pid 6216] <... ioctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6216] close(3 [ 280.383819][ T6216] loop4: detected capacity change from 0 to 32768 [pid 5850] close(4 [pid 6216] <... close resumed>) = 0 [pid 6216] close(4 [pid 5850] <... close resumed>) = 0 [pid 6216] <... close resumed>) = 0 [pid 5850] rmdir("./58/file0" [pid 6216] mkdir("./file0", 0777) = 0 [pid 6216] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./58") = 0 [pid 5850] mkdir("./59", 0777) = 0 [pid 6215] <... lsetxattr resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6215] exit_group(0) = ? [pid 6218] munmap(0x7feda9000000, 138412032 [pid 6216] <... mount resumed>) = 0 [pid 6216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6217] <... munmap resumed>) = 0 [pid 6216] chdir("./file0" [pid 6215] +++ exited with 0 +++ [pid 6216] <... chdir resumed>) = 0 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [ 280.425647][ T6216] [ 280.425647][ T6216] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.425647][ T6216] [ 280.443636][ T113] [ 280.443636][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.443636][ T113] [pid 6216] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6216] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6217] <... openat resumed>) = 4 [pid 5849] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./58/binderfs" [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... unlink resumed>) = 0 [pid 5849] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] <... ioctl resumed>) = 0 [pid 6217] close(3) = 0 [ 280.479476][ T6216] [ 280.479476][ T6216] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.479476][ T6216] [ 280.500918][ T6217] loop0: detected capacity change from 0 to 32768 [ 280.521272][ T5849] [ 280.521272][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6217] close(4 [pid 6218] <... munmap resumed>) = 0 [pid 6217] <... close resumed>) = 0 [pid 6217] mkdir("./file0", 0777) = 0 [pid 6217] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6216] <... lsetxattr resumed>) = 0 [ 280.521272][ T5849] [ 280.521275][ T6216] [ 280.521275][ T6216] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.521275][ T6216] [ 280.521480][ T5849] [ 280.521480][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.521480][ T5849] [ 280.568030][ T112] [ 280.568030][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.568030][ T112] [pid 6216] exit_group(0 [pid 6218] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6217] <... mount resumed>) = 0 [pid 6216] <... exit_group resumed>) = ? [pid 5849] <... umount2 resumed>) = 0 [pid 6218] <... openat resumed>) = 4 [pid 6217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6217] <... openat resumed>) = 3 [pid 5849] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] chdir("./file0" [pid 6216] +++ exited with 0 +++ [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] <... chdir resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./58/file0", [pid 6217] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6216, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5849] umount2("./58/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... restart_syscall resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(4, [pid 6218] <... ioctl resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6218] close(3 [pid 5849] getdents64(4, [pid 6218] <... close resumed>) = 0 [pid 6218] close(4 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6218] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] close(4 [pid 6218] mkdir("./file0", 0777) = 0 [pid 5851] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... close resumed>) = 0 [pid 6218] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] rmdir("./58/file0") = 0 [pid 5851] <... openat resumed>) = 3 [ 280.574979][ T6217] [ 280.574979][ T6217] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.574979][ T6217] [ 280.609752][ T6218] loop1: detected capacity change from 0 to 32768 [ 280.618861][ T6217] [ 280.618861][ T6217] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.618861][ T6217] [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] newfstatat(3, "", [pid 5849] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... close resumed>) = 0 [pid 5851] getdents64(3, [pid 5849] rmdir("./58") = 0 [pid 5849] mkdir("./59", 0777 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5851] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... ioctl resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./59/binderfs", [pid 5849] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6217] <... lsetxattr resumed>) = 0 [pid 5851] unlink("./59/binderfs") = 0 [pid 6217] exit_group(0 [pid 5851] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6217] <... exit_group resumed>) = ? [pid 6217] +++ exited with 0 +++ [pid 6218] <... mount resumed>) = 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 6218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6218] <... openat resumed>) = 3 [pid 6218] chdir("./file0") = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] <... restart_syscall resumed>) = 0 [ 280.654295][ T6217] [ 280.654295][ T6217] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.654295][ T6217] [ 280.672030][ T6218] [ 280.672030][ T6218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.672030][ T6218] [ 280.693374][ T113] [ 280.693374][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.693374][ T113] [pid 6218] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... close resumed>) = 0 [pid 5847] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 280.723384][ T6218] [ 280.723384][ T6218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.723384][ T6218] [ 280.751503][ T5851] [ 280.751503][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.751503][ T5851] [ 280.760015][ T6218] [ 280.760015][ T6218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.760015][ T6218] [pid 5847] unlink("./59/binderfs") = 0 [pid 5847] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6218] <... lsetxattr resumed>) = 0 [pid 6218] exit_group(0) = ? [pid 6218] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6218, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... close resumed>) = 0 ./strace-static-x86_64: Process 6219 attached [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6219 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", [pid 6219] set_robust_list(0x555584a2d760, 24 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6219] chdir("./59" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6219] <... chdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] unlink("./59/binderfs" [pid 6219] setpgid(0, 0 [pid 5848] <... unlink resumed>) = 0 [pid 6219] <... setpgid resumed>) = 0 [pid 5848] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 280.782066][ T5851] [ 280.782066][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.782066][ T5851] [ 280.794646][ T5847] [ 280.794646][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.794646][ T5847] [ 280.807293][ T113] [ 280.807293][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.807293][ T113] [ 280.819072][ T5847] [ 280.819072][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.819072][ T5847] [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6219] write(3, "1000", 4) = 4 [pid 6219] close(3) = 0 [pid 6219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6219] write(1, "executing program\n", 18executing program ./strace-static-x86_64: Process 6220 attached ) = 18 [pid 6219] memfd_create("syzkaller", 0 [pid 6220] set_robust_list(0x555584a2d760, 24 [pid 6219] <... memfd_create resumed>) = 3 [pid 6220] <... set_robust_list resumed>) = 0 [pid 6220] chdir("./59" [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6220 [pid 6220] <... chdir resumed>) = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6220] setpgid(0, 0) = 0 executing program [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6220] <... openat resumed>) = 3 [pid 6219] <... mmap resumed>) = 0x7feda9000000 [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 [pid 6220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6220] write(1, "executing program\n", 18) = 18 [pid 6220] memfd_create("syzkaller", 0) = 3 [pid 6220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./59/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./59") = 0 [pid 5848] mkdir("./60", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 280.834207][ T5848] [ 280.834207][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.834207][ T5848] [ 280.850581][ T5848] [ 280.850581][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.850581][ T5848] [pid 5851] <... umount2 resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./59/file0", [pid 5851] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(AT_FDCWD, "./59/file0", [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5851] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(4, "", [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5847] getdents64(4, [pid 5851] newfstatat(4, "", [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5851] getdents64(4, [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] close(4) = 0 [pid 5847] rmdir("./59/file0" [pid 5851] getdents64(4, [pid 5847] <... rmdir resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] getdents64(3, [pid 5851] close(4 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... close resumed>) = 0 [pid 5847] close(3 [pid 5851] rmdir("./59/file0" [pid 5847] <... close resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5847] rmdir("./59") = 0 [pid 5847] mkdir("./60", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5851] getdents64(3, [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6221 attached [pid 5851] close(3 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6221 [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./59" [pid 6221] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 6221] chdir("./59") = 0 [pid 5851] mkdir("./60", 0777 [pid 6221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... mkdir resumed>) = 0 [pid 6221] <... prctl resumed>) = 0 [pid 6221] setpgid(0, 0) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] ioctl(3, LOOP_CLR_FD [pid 6221] <... openat resumed>) = 3 [pid 5851] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 6221] write(3, "1000", 4) = 4 [pid 6221] close(3) = 0 [pid 6221] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6221] write(1, "executing program\n", 18) = 18 [pid 6221] memfd_create("syzkaller", 0) = 3 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6222 ./strace-static-x86_64: Process 6222 attached [pid 6222] set_robust_list(0x555584a2d760, 24) = 0 [pid 6222] chdir("./60") = 0 [pid 6222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6222] setpgid(0, 0) = 0 [pid 6222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6222] write(3, "1000", 4) = 4 [pid 6222] close(3) = 0 [pid 6222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6222] write(1, "executing program\n", 18) = 18 [pid 6222] memfd_create("syzkaller", 0) = 3 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6223 ./strace-static-x86_64: Process 6223 attached [pid 6223] set_robust_list(0x555584a2d760, 24) = 0 [pid 6223] chdir("./60") = 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6223] setpgid(0, 0) = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6223] write(3, "1000", 4) = 4 [pid 6223] close(3) = 0 [pid 6223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] <... close resumed>) = 0 executing program [pid 6223] write(1, "executing program\n", 18) = 18 [pid 6223] memfd_create("syzkaller", 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6223] <... memfd_create resumed>) = 3 [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6224 ./strace-static-x86_64: Process 6224 attached [pid 6224] set_robust_list(0x555584a2d760, 24) = 0 [pid 6224] chdir("./60") = 0 [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6224] setpgid(0, 0) = 0 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216executing program [pid 6224] <... openat resumed>) = 3 [pid 6224] write(3, "1000", 4) = 4 [pid 6224] close(3) = 0 [pid 6224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6224] write(1, "executing program\n", 18) = 18 [pid 6224] memfd_create("syzkaller", 0) = 3 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6219] <... write resumed>) = 16777216 [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6219] munmap(0x7feda9000000, 138412032) = 0 [pid 6220] <... write resumed>) = 16777216 [pid 6219] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6220] munmap(0x7feda9000000, 138412032 [pid 6219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6219] close(3) = 0 [pid 6219] close(4) = 0 [pid 6220] <... munmap resumed>) = 0 [pid 6219] mkdir("./file0", 0777) = 0 [ 281.630732][ T6219] loop3: detected capacity change from 0 to 32768 [pid 6219] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6220] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6220] ioctl(4, LOOP_SET_FD, 3 [pid 6224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6220] <... ioctl resumed>) = 0 [pid 6220] close(3) = 0 [pid 6220] close(4) = 0 [pid 6220] mkdir("./file0", 0777) = 0 [ 281.685223][ T6220] loop5: detected capacity change from 0 to 32768 [ 281.687230][ T6219] [ 281.687230][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.687230][ T6219] [pid 6220] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6219] <... mount resumed>) = 0 [pid 6219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6219] chdir("./file0") = 0 [pid 6219] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6219] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6221] <... write resumed>) = 16777216 [pid 6220] <... mount resumed>) = 0 [ 281.757993][ T6219] [ 281.757993][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.757993][ T6219] [ 281.773421][ T6220] [ 281.773421][ T6220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.773421][ T6220] [ 281.795121][ T6219] [ 281.795121][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.795121][ T6219] [pid 6221] munmap(0x7feda9000000, 138412032 [pid 6220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6220] chdir("./file0") = 0 [pid 6220] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6220] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6219] <... lsetxattr resumed>) = 0 [pid 6219] exit_group(0) = ? [pid 6221] <... munmap resumed>) = 0 [pid 6219] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 6221] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5850] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6221] ioctl(4, LOOP_SET_FD, 3 [ 281.831645][ T6220] [ 281.831645][ T6220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.831645][ T6220] [ 281.842488][ T112] [ 281.842488][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.842488][ T112] [ 281.857208][ T6220] [ 281.857208][ T6220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.857208][ T6220] [pid 5850] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6221] <... ioctl resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6220] <... lsetxattr resumed>) = 0 [pid 6220] exit_group(0) = ? [pid 6221] close(3 [pid 5850] getdents64(3, [pid 6221] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6221] close(4) = 0 [pid 5850] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6221] mkdir("./file0", 0777 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6221] <... mkdir resumed>) = 0 [pid 6220] +++ exited with 0 +++ [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6221] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] unlink("./59/binderfs") = 0 [ 281.881689][ T6221] loop2: detected capacity change from 0 to 32768 [ 281.900672][ T113] [ 281.900672][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.900672][ T113] [pid 5850] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./59/binderfs") = 0 [ 281.931673][ T5850] [ 281.931673][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.931673][ T5850] [ 281.946020][ T5852] [ 281.946020][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.946020][ T5852] [ 281.950333][ T5850] [ 281.950333][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.950333][ T5850] [pid 5852] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6221] <... mount resumed>) = 0 [pid 6223] <... write resumed>) = 16777216 [pid 6221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... umount2 resumed>) = 0 [ 281.991070][ T5852] [ 281.991070][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.991070][ T5852] [ 282.000268][ T6221] [ 282.000268][ T6221] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.000268][ T6221] [pid 6221] <... openat resumed>) = 3 [pid 5850] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6223] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6221] chdir("./file0") = 0 [pid 5850] newfstatat(AT_FDCWD, "./59/file0", [pid 6221] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6221] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 5850] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] close(4 [pid 5850] getdents64(4, [pid 5852] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6223] <... munmap resumed>) = 0 [pid 5852] rmdir("./59/file0" [pid 5850] close(4 [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... rmdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6223] <... openat resumed>) = 4 [pid 5850] rmdir("./59/file0" [ 282.031412][ T6221] [ 282.031412][ T6221] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.031412][ T6221] [ 282.050831][ T6221] [ 282.050831][ T6221] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.050831][ T6221] [pid 6223] ioctl(4, LOOP_SET_FD, 3 [pid 6222] <... write resumed>) = 16777216 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 6222] munmap(0x7feda9000000, 138412032 [pid 5852] <... close resumed>) = 0 [pid 6223] <... ioctl resumed>) = 0 [pid 5852] rmdir("./59" [pid 5850] <... rmdir resumed>) = 0 [pid 6223] close(3 [pid 5850] getdents64(3, [pid 6223] <... close resumed>) = 0 [pid 6223] close(4 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6223] <... close resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./60", 0777 [pid 6223] mkdir("./file0", 0777 [pid 6221] <... lsetxattr resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5850] close(3 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5850] <... close resumed>) = 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6223] <... mkdir resumed>) = 0 [pid 6221] exit_group(0 [pid 5852] <... ioctl resumed>) = 0 [pid 5850] rmdir("./59" [pid 6223] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6221] <... exit_group resumed>) = ? [pid 5852] close(3 [pid 6221] +++ exited with 0 +++ [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./60", 0777 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] <... mkdir resumed>) = 0 [ 282.081493][ T6223] loop0: detected capacity change from 0 to 32768 [ 282.100362][ T112] [ 282.100362][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.100362][ T112] [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5849] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6223] <... mount resumed>) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5849] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... ioctl resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6223] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 5850] close(3 [pid 6222] <... munmap resumed>) = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6223] chdir("./file0" [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6223] <... chdir resumed>) = 0 [ 282.132289][ T6223] [ 282.132289][ T6223] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.132289][ T6223] [ 282.160451][ T6222] loop1: detected capacity change from 0 to 32768 [pid 5849] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] unlink("./59/binderfs" [pid 6222] <... ioctl resumed>) = 0 [pid 6222] close(3) = 0 [pid 6222] close(4) = 0 [pid 6222] mkdir("./file0", 0777 [pid 5849] <... unlink resumed>) = 0 [pid 6223] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6222] <... mkdir resumed>) = 0 [ 282.192205][ T6223] [ 282.192205][ T6223] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.192205][ T6223] [ 282.197242][ T6222] [ 282.197242][ T6222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.197242][ T6222] [ 282.217513][ T5849] [ 282.217513][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.217513][ T5849] [ 282.228691][ T5849] [ 282.228691][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.228691][ T5849] [pid 6222] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6222] chdir("./file0") = 0 [pid 6222] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 282.250027][ T6223] [ 282.250027][ T6223] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.250027][ T6223] [ 282.263463][ T6222] [ 282.263463][ T6222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.263463][ T6222] [ 282.288956][ T113] [ 282.288956][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.288956][ T113] [pid 6222] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6224] <... write resumed>) = 16777216 [pid 6223] <... lsetxattr resumed>) = 0 [pid 6223] exit_group(0) = ? [pid 6224] munmap(0x7feda9000000, 138412032 [pid 6223] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./60/binderfs") = 0 [ 282.291406][ T6222] [ 282.291406][ T6222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.291406][ T6222] [pid 5847] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6224] <... munmap resumed>) = 0 [pid 6222] <... lsetxattr resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6224] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6224] ioctl(4, LOOP_SET_FD, 3 [pid 6222] exit_group(0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] <... exit_group resumed>) = ? [ 282.344021][ T5847] [ 282.344021][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.344021][ T5847] [ 282.367607][ T5847] [ 282.367607][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.367607][ T5847] [ 282.378614][ T113] [ 282.378614][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.378614][ T113] [pid 6222] +++ exited with 0 +++ [pid 5849] newfstatat(AT_FDCWD, "./59/file0", [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6222, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=37 /* 0.37 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] umount2("./59/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(3, "", [pid 5849] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, [pid 5849] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./60/binderfs") = 0 [pid 5848] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] newfstatat(4, "", [pid 6224] <... ioctl resumed>) = 0 [pid 6224] close(3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6224] <... close resumed>) = 0 [pid 6224] close(4 [pid 5849] getdents64(4, [pid 6224] <... close resumed>) = 0 [pid 6224] mkdir("./file0", 0777) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6224] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./59/file0" [pid 5847] <... umount2 resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5847] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] newfstatat(AT_FDCWD, "./60/file0", [pid 5849] close(3) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] rmdir("./59" [pid 5847] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] mkdir("./60", 0777 [pid 5847] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 5849] <... mkdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 282.395361][ T6224] loop4: detected capacity change from 0 to 32768 [ 282.422231][ T5848] [ 282.422231][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.422231][ T5848] [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] getdents64(4, [pid 5849] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5847] close(4 [pid 5849] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./60/file0") = 0 [pid 5852] <... close resumed>) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6224] <... mount resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] close(3) = 0 [pid 5847] rmdir("./60"./strace-static-x86_64: Process 6225 attached [ 282.446824][ T6224] [ 282.446824][ T6224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.446824][ T6224] [ 282.458173][ T5848] [ 282.458173][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.458173][ T5848] [pid 6224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6225 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./61", 0777 [pid 6224] <... openat resumed>) = 3 [pid 6224] chdir("./file0") = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... mkdir resumed>) = 0 [pid 6224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6224] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... openat resumed>) = 3 [pid 6225] set_robust_list(0x555584a2d760, 24 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6225] <... set_robust_list resumed>) = 0 [pid 6225] chdir("./60") = 0 [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... ioctl resumed>) = 0 [pid 6225] <... prctl resumed>) = 0 [pid 6225] setpgid(0, 0) = 0 executing program [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] close(3 [pid 6225] <... openat resumed>) = 3 [pid 6225] write(3, "1000", 4) = 4 [pid 6225] close(3) = 0 [pid 6225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6225] write(1, "executing program\n", 18) = 18 [pid 6225] memfd_create("syzkaller", 0) = 3 [pid 6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [ 282.501103][ T6224] [ 282.501103][ T6224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.501103][ T6224] [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6226 attached [pid 5848] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6226 [pid 6226] set_robust_list(0x555584a2d760, 24 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] <... set_robust_list resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./60/file0", [pid 6226] chdir("./60" [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6226] <... chdir resumed>) = 0 [pid 5848] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] <... openat resumed>) = 4 [pid 6226] setpgid(0, 0 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6226] <... setpgid resumed>) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./60/file0") = 0 [pid 6226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 282.541395][ T6224] [ 282.541395][ T6224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.541395][ T6224] [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 6226] <... openat resumed>) = 3 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./60" [pid 6224] <... lsetxattr resumed>) = 0 [pid 6224] exit_group(0) = ? [pid 6224] +++ exited with 0 +++ [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./61", 0777 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6224, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5851] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5851] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] <... ioctl resumed>) = 0 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] close(3 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6226] write(3, "1000", 4 [pid 5851] newfstatat(AT_FDCWD, "./60/binderfs", [pid 6226] <... write resumed>) = 4 [pid 6226] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6226] <... close resumed>) = 0 [pid 5851] unlink("./60/binderfs" [pid 6226] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... unlink resumed>) = 0 [pid 5851] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6226] <... symlink resumed>) = 0 executing program [pid 6226] write(1, "executing program\n", 18) = 18 [pid 6226] memfd_create("syzkaller", 0) = 3 [ 282.592887][ T112] [ 282.592887][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.592887][ T112] [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 282.650884][ T5851] [ 282.650884][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.650884][ T5851] [ 282.711271][ T5851] [ 282.711271][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.711271][ T5851] [pid 6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./60/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./60") = 0 [pid 5851] mkdir("./61", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6227 ./strace-static-x86_64: Process 6227 attached ./strace-static-x86_64: Process 6228 attached [pid 6227] set_robust_list(0x555584a2d760, 24) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6228 [pid 6228] set_robust_list(0x555584a2d760, 24 [pid 6227] chdir("./61" [pid 6228] <... set_robust_list resumed>) = 0 [pid 6228] chdir("./60" [pid 6227] <... chdir resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6228] setpgid(0, 0 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6228] <... setpgid resumed>) = 0 [pid 6227] <... prctl resumed>) = 0 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6227] setpgid(0, 0 [pid 6228] write(3, "1000", 4 [pid 6227] <... setpgid resumed>) = 0 [pid 6228] <... write resumed>) = 4 [pid 6228] close(3) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC executing program [pid 6228] write(1, "executing program\n", 18) = 18 [pid 6227] <... openat resumed>) = 3 [pid 6228] memfd_create("syzkaller", 0 [pid 6227] write(3, "1000", 4 [pid 6228] <... memfd_create resumed>) = 3 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] <... write resumed>) = 4 [pid 6227] close(3 [pid 6228] <... mmap resumed>) = 0x7feda9000000 [pid 6227] <... close resumed>) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] write(1, "executing program\n", 18executing program ) = 18 [pid 6227] memfd_create("syzkaller", 0) = 3 [pid 6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6227] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6229 attached , child_tidptr=0x555584a2d750) = 6229 [pid 6229] set_robust_list(0x555584a2d760, 24) = 0 [pid 6229] chdir("./61") = 0 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6229] setpgid(0, 0) = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6229] write(3, "1000", 4) = 4 [pid 6229] close(3) = 0 [pid 6229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6229] write(1, "executing program\n", 18executing program ) = 18 [pid 6229] memfd_create("syzkaller", 0) = 3 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6230 attached , child_tidptr=0x555584a2d750) = 6230 [pid 6230] set_robust_list(0x555584a2d760, 24) = 0 [pid 6230] chdir("./61") = 0 [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6230] setpgid(0, 0) = 0 [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6230] write(3, "1000", 4executing program ) = 4 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6230] close(3) = 0 [pid 6230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6230] write(1, "executing program\n", 18) = 18 [pid 6230] memfd_create("syzkaller", 0) = 3 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6225] <... write resumed>) = 16777216 [pid 6227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6225] munmap(0x7feda9000000, 138412032) = 0 [pid 6225] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6225] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6225] close(3) = 0 [pid 6225] close(4) = 0 [pid 6229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6225] mkdir("./file0", 0777) = 0 [ 283.253451][ T6225] loop5: detected capacity change from 0 to 32768 [ 283.322035][ T6225] [ 283.322035][ T6225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.322035][ T6225] [pid 6225] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6226] <... write resumed>) = 16777216 [pid 6225] <... mount resumed>) = 0 [pid 6226] munmap(0x7feda9000000, 138412032 [pid 6225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6226] <... munmap resumed>) = 0 [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6225] chdir("./file0" [pid 6226] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6225] <... chdir resumed>) = 0 [pid 6226] <... openat resumed>) = 4 [pid 6225] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6226] ioctl(4, LOOP_SET_FD, 3 [pid 6225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6226] <... ioctl resumed>) = 0 [pid 6225] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6226] close(3) = 0 [pid 6226] close(4) = 0 [pid 6226] mkdir("./file0", 0777) = 0 [ 283.432348][ T6226] loop3: detected capacity change from 0 to 32768 [ 283.460193][ T6225] [ 283.460193][ T6225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.460193][ T6225] [pid 6226] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6225] <... lsetxattr resumed>) = 0 [ 283.511111][ T6226] [ 283.511111][ T6226] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.511111][ T6226] [ 283.530183][ T6225] [ 283.530183][ T6225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.530183][ T6225] [pid 6226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6225] exit_group(0 [pid 6226] <... openat resumed>) = 3 [pid 6225] <... exit_group resumed>) = ? [pid 6226] chdir("./file0" [pid 6225] +++ exited with 0 +++ [pid 6226] <... chdir resumed>) = 0 [pid 6226] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6226] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5852] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 6228] <... write resumed>) = 16777216 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6228] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./60/binderfs") = 0 [ 283.564963][ T112] [ 283.564963][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.564963][ T112] [ 283.579774][ T6226] [ 283.579774][ T6226] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.579774][ T6226] [ 283.600016][ T6226] [ 283.600016][ T6226] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.600016][ T6226] [pid 5852] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6226] <... lsetxattr resumed>) = 0 [pid 6226] exit_group(0) = ? [pid 6228] <... munmap resumed>) = 0 [pid 6226] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6226, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./60/binderfs") = 0 [pid 5850] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 283.640440][ T113] [ 283.640440][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.640440][ T113] [ 283.655853][ T5852] [ 283.655853][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.655853][ T5852] [ 283.668043][ T6228] loop2: detected capacity change from 0 to 32768 [ 283.674686][ T5850] [ 283.674686][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.674686][ T5850] [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 6227] <... write resumed>) = 16777216 [pid 6229] <... write resumed>) = 16777216 [pid 6228] <... ioctl resumed>) = 0 [pid 6228] close(3 [pid 6227] munmap(0x7feda9000000, 138412032 [pid 6228] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6229] munmap(0x7feda9000000, 138412032 [pid 6228] close(4) = 0 [pid 5852] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6228] mkdir("./file0", 0777 [pid 5852] newfstatat(4, "", [pid 6228] <... mkdir resumed>) = 0 [pid 6228] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 283.692524][ T5852] [ 283.692524][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.692524][ T5852] [ 283.705861][ T5850] [ 283.705861][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.705861][ T5850] [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./60/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./60") = 0 [pid 5852] mkdir("./61", 0777) = 0 [pid 6229] <... munmap resumed>) = 0 [pid 6227] <... munmap resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6227] ioctl(4, LOOP_SET_FD, 3 [pid 6229] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6228] <... mount resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5850] <... umount2 resumed>) = 0 [pid 6228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] ioctl(3, LOOP_CLR_FD [pid 6228] <... openat resumed>) = 3 [pid 5852] <... ioctl resumed>) = 0 [pid 6228] chdir("./file0" [pid 5852] close(3 [pid 6229] <... openat resumed>) = 4 [ 283.756258][ T6228] [ 283.756258][ T6228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.756258][ T6228] [ 283.783109][ T6227] loop0: detected capacity change from 0 to 32768 [pid 6227] <... ioctl resumed>) = 0 [pid 5850] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6229] ioctl(4, LOOP_SET_FD, 3 [pid 6228] <... chdir resumed>) = 0 [pid 6229] <... ioctl resumed>) = 0 [pid 6227] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./60/file0", [pid 6227] <... close resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6227] close(4 [pid 5850] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6227] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] mkdir("./file0", 0777 [pid 5850] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] <... mkdir resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 6228] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6227] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] getdents64(4, [pid 6228] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./60/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./60") = 0 [pid 5850] mkdir("./61", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6229] close(3) = 0 [pid 6229] close(4) = 0 [pid 6229] mkdir("./file0", 0777) = 0 [ 283.800789][ T6229] loop1: detected capacity change from 0 to 32768 [ 283.815831][ T6228] [ 283.815831][ T6228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.815831][ T6228] [pid 6229] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6230] <... write resumed>) = 16777216 [pid 6230] munmap(0x7feda9000000, 138412032 [pid 6227] <... mount resumed>) = 0 [pid 6227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6227] chdir("./file0" [pid 6228] <... lsetxattr resumed>) = 0 [pid 6227] <... chdir resumed>) = 0 [ 283.860291][ T6227] [ 283.860291][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.860291][ T6227] [ 283.872755][ T6228] [ 283.872755][ T6228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.872755][ T6228] [ 283.893807][ T6229] [ 283.893807][ T6229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.893807][ T6229] [pid 6227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6227] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6228] exit_group(0) = ? [pid 6228] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./60/binderfs") = 0 [ 283.911998][ T113] [ 283.911998][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.911998][ T113] [ 283.916027][ T6227] [ 283.916027][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.916027][ T6227] [pid 5849] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6230] <... munmap resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 6229] <... mount resumed>) = 0 [pid 6229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6230] <... ioctl resumed>) = 0 [pid 6229] <... openat resumed>) = 3 [pid 6229] chdir("./file0" [pid 6230] close(3) = 0 [ 283.961193][ T6230] loop4: detected capacity change from 0 to 32768 [ 283.979831][ T6227] [ 283.979831][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.979831][ T6227] [ 283.991112][ T5849] [ 283.991112][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.991112][ T5849] [ 284.006715][ T5849] [pid 6230] close(4) = 0 [pid 6229] <... chdir resumed>) = 0 [pid 6230] mkdir("./file0", 0777) = 0 [pid 6230] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6229] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6227] <... lsetxattr resumed>) = 0 [pid 6229] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6227] exit_group(0) = ? [pid 6227] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 6229] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./61/binderfs") = 0 [ 284.006715][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.006715][ T5849] [ 284.017885][ T112] [ 284.017885][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.017885][ T112] [ 284.033734][ T6229] [ 284.033734][ T6229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.033734][ T6229] [ 284.047657][ T6230] [ 284.047657][ T6230] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.047657][ T6230] [ 284.058476][ T6229] [pid 5847] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6229] <... lsetxattr resumed>) = 0 [pid 6230] <... mount resumed>) = 0 [pid 6230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6230] chdir("./file0") = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... umount2 resumed>) = 0 [pid 6230] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6229] exit_group(0 [pid 5849] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6230] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6229] <... exit_group resumed>) = ? [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 284.058476][ T6229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.058476][ T6229] [ 284.058897][ T5847] [ 284.058897][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.058897][ T5847] [ 284.081835][ T113] [ 284.081835][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.081835][ T113] [ 284.098468][ T6230] [ 284.098468][ T6230] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.098468][ T6230] [ 284.107765][ T5847] [pid 6229] +++ exited with 0 +++ [pid 5852] <... close resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./60/file0", [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] umount2("./60/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(3, "", [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5849] <... openat resumed>) = 4 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./61/binderfs"./strace-static-x86_64: Process 6231 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6231 [pid 5849] newfstatat(4, "", [pid 5848] <... unlink resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6231] set_robust_list(0x555584a2d760, 24 [pid 5849] getdents64(4, [pid 6231] <... set_robust_list resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6231] chdir("./61" [pid 5849] getdents64(4, [pid 6231] <... chdir resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [ 284.107765][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.107765][ T5847] [ 284.129081][ T6230] [ 284.129081][ T6230] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.129081][ T6230] [ 284.150132][ T5848] [ 284.150132][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.150132][ T5848] [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6230] <... lsetxattr resumed>) = 0 [pid 5849] close(4 [pid 5847] <... umount2 resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 6231] <... prctl resumed>) = 0 [pid 5849] rmdir("./60/file0" [pid 5847] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6230] exit_group(0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... rmdir resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./61/file0", [pid 6231] setpgid(0, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6231] <... setpgid resumed>) = 0 [pid 5849] getdents64(3, [pid 5847] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6230] <... exit_group resumed>) = ? [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6230] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6230, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] close(3 [pid 5847] <... openat resumed>) = 4 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./60" [pid 5851] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(4, "", [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] mkdir("./61", 0777 [pid 5851] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] getdents64(4, [pid 6231] <... openat resumed>) = 3 [pid 5851] <... openat resumed>) = 3 [pid 5850] <... close resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6231] write(3, "1000", 4 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6231] <... write resumed>) = 4 [pid 5851] newfstatat(3, "", [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] getdents64(4, [pid 6231] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6231] <... close resumed>) = 0 [pid 5851] getdents64(3, [pid 5847] close(4 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5848] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6232 attached ) = -1 EINVAL (Invalid argument) [pid 5847] <... close resumed>) = 0 [pid 6232] set_robust_list(0x555584a2d760, 24 [pid 6231] <... symlink resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6232 [pid 5849] <... ioctl resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6232] <... set_robust_list resumed>) = 0 executing program [pid 6231] write(1, "executing program\n", 18 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] close(3 [pid 5848] <... openat resumed>) = 4 [pid 5847] rmdir("./61/file0" [pid 6232] chdir("./61" [pid 6231] <... write resumed>) = 18 [pid 5851] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 6231] memfd_create("syzkaller", 0 [pid 5851] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5847] getdents64(3, [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6231] <... memfd_create resumed>) = 3 [pid 5851] unlink("./61/binderfs" [pid 5848] close(4 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] <... close resumed>) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 5848] rmdir("./61/file0" [pid 5847] close(3 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6231] <... mmap resumed>) = 0x7feda9000000 [pid 5851] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... rmdir resumed>) = 0 [pid 6232] <... prctl resumed>) = 0 [pid 5848] getdents64(3, [pid 5847] <... close resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] rmdir("./61" [pid 6232] setpgid(0, 0 [pid 5848] close(3 [pid 6232] <... setpgid resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 284.153825][ T113] [ 284.153825][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.153825][ T113] [ 284.174024][ T5848] [ 284.174024][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.174024][ T5848] [pid 5848] rmdir("./61" [pid 5847] mkdir("./62", 0777 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6232] <... openat resumed>) = 3 [pid 5848] mkdir("./62", 0777 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] ioctl(3, LOOP_CLR_FDexecuting program [pid 6232] write(3, "1000", 4 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... ioctl resumed>) = 0 [pid 6232] <... write resumed>) = 4 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] close(3 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 6232] close(3) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6232] write(1, "executing program\n", 18) = 18 [pid 6232] memfd_create("syzkaller", 0) = 3 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 284.255137][ T5851] [ 284.255137][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.255137][ T5851] [ 284.301378][ T5851] [ 284.301378][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.301378][ T5851] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./61/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./61") = 0 [pid 5851] mkdir("./62", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6233 ./strace-static-x86_64: Process 6233 attached [pid 6233] set_robust_list(0x555584a2d760, 24) = 0 [pid 6233] chdir("./61" [pid 6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6233] <... chdir resumed>) = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6233] setpgid(0, 0) = 0 [pid 5847] <... close resumed>) = 0 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6233] <... openat resumed>) = 3 [pid 6233] write(3, "1000", 4./strace-static-x86_64: Process 6234 attached ) = 4 [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6233] close(3 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6234 [pid 6233] <... close resumed>) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6234] set_robust_list(0x555584a2d760, 24 [pid 6233] <... symlink resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6234] <... set_robust_list resumed>) = 0 executing program [pid 6233] write(1, "executing program\n", 18) = 18 [pid 6234] chdir("./62" [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6234] <... chdir resumed>) = 0 [pid 6233] memfd_create("syzkaller", 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6235 [pid 6234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] <... memfd_create resumed>) = 3 [pid 6234] <... prctl resumed>) = 0 [pid 6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6234] setpgid(0, 0 [pid 6233] <... mmap resumed>) = 0x7feda9000000 [pid 6234] <... setpgid resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6234] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6235 attached [pid 6234] close(3executing program [pid 6235] set_robust_list(0x555584a2d760, 24 [pid 6234] <... close resumed>) = 0 [pid 6235] <... set_robust_list resumed>) = 0 [pid 6234] symlink("/dev/binderfs", "./binderfs" [pid 6235] chdir("./62" [pid 6234] <... symlink resumed>) = 0 [pid 6235] <... chdir resumed>) = 0 [pid 6234] write(1, "executing program\n", 18 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6234] <... write resumed>) = 18 [pid 6235] <... prctl resumed>) = 0 [pid 6235] setpgid(0, 0 [pid 6234] memfd_create("syzkaller", 0) = 3 [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6235] <... setpgid resumed>) = 0 [pid 6234] <... mmap resumed>) = 0x7feda9000000 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] <... close resumed>) = 0 [pid 6235] write(3, "1000", 4 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 6235] <... write resumed>) = 4 [pid 6235] close(3) = 0 ./strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x555584a2d760, 24) = 0 [pid 6236] chdir("./62") = 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6236] setpgid(0, 0) = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6236 [pid 6236] <... openat resumed>) = 3 [pid 6236] write(3, "1000", 4) = 4 [pid 6236] close(3) = 0 [pid 6236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6236] write(1, "executing program\n", 18) = 18 [pid 6236] memfd_create("syzkaller", 0) = 3 [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6235] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6235] write(1, "executing program\n", 18) = 18 [pid 6235] memfd_create("syzkaller", 0) = 3 [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6231] <... write resumed>) = 16777216 [pid 6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6231] munmap(0x7feda9000000, 138412032) = 0 [pid 6231] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6231] ioctl(4, LOOP_SET_FD, 3 [pid 6236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6231] <... ioctl resumed>) = 0 [pid 6231] close(3) = 0 [pid 6231] close(4) = 0 [pid 6231] mkdir("./file0", 0777) = 0 [ 284.980949][ T6231] loop5: detected capacity change from 0 to 32768 [pid 6231] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6232] <... write resumed>) = 16777216 [pid 6232] munmap(0x7feda9000000, 138412032 [pid 6231] <... mount resumed>) = 0 [pid 6231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6231] chdir("./file0") = 0 [pid 6231] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 285.045241][ T6231] [ 285.045241][ T6231] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.045241][ T6231] [pid 6231] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6232] <... munmap resumed>) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 285.093808][ T6231] [ 285.093808][ T6231] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.093808][ T6231] [ 285.122393][ T6231] [ 285.122393][ T6231] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.122393][ T6231] [pid 6232] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6232] close(3) = 0 [pid 6232] close(4) = 0 [pid 6232] mkdir("./file0", 0777) = 0 [pid 6232] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6231] <... lsetxattr resumed>) = 0 [pid 6231] exit_group(0) = ? [pid 6231] +++ exited with 0 +++ [pid 6232] <... mount resumed>) = 0 [pid 6232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 6232] <... openat resumed>) = 3 [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6232] chdir("./file0" [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] getdents64(3, [pid 6232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 285.147005][ T6232] loop3: detected capacity change from 0 to 32768 [ 285.165730][ T6232] [ 285.165730][ T6232] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.165730][ T6232] [ 285.177149][ T113] [ 285.177149][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.177149][ T113] [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6232] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./61/binderfs") = 0 [ 285.214507][ T6232] [ 285.214507][ T6232] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.214507][ T6232] [ 285.238713][ T5852] [ 285.238713][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.238713][ T5852] [ 285.252239][ T6232] [ 285.252239][ T6232] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.252239][ T6232] [pid 5852] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6232] <... lsetxattr resumed>) = 0 [pid 6232] exit_group(0) = ? [pid 6232] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... umount2 resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5852] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] newfstatat(3, "", [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] newfstatat(AT_FDCWD, "./61/file0", [pid 5850] getdents64(3, [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 5850] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] newfstatat(AT_FDCWD, "./61/binderfs", [ 285.273440][ T5852] [ 285.273440][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.273440][ T5852] [ 285.296795][ T112] [ 285.296795][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.296795][ T112] [pid 5852] close(4) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] rmdir("./61/file0") = 0 [pid 5850] unlink("./61/binderfs" [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5852] close(3 [pid 5850] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./61" [pid 6234] <... write resumed>) = 16777216 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./62", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6233] <... write resumed>) = 16777216 [pid 6233] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = 0 [pid 6234] munmap(0x7feda9000000, 138412032 [pid 5850] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 285.357258][ T5850] [ 285.357258][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.357258][ T5850] [ 285.382166][ T5850] [ 285.382166][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.382166][ T5850] [pid 5850] newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./61/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./61" [pid 6234] <... munmap resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./62", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6233] <... munmap resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6233] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6234] <... openat resumed>) = 4 [pid 6233] ioctl(4, LOOP_SET_FD, 3 [pid 6234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6234] close(3) = 0 [pid 6235] <... write resumed>) = 16777216 [pid 6234] close(4 [pid 6233] <... ioctl resumed>) = 0 [pid 6235] munmap(0x7feda9000000, 138412032 [pid 6234] <... close resumed>) = 0 [pid 6233] close(3 [pid 6234] mkdir("./file0", 0777 [pid 6233] <... close resumed>) = 0 [pid 6234] <... mkdir resumed>) = 0 [pid 6233] close(4) = 0 [pid 6233] mkdir("./file0", 0777 [pid 6234] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6236] <... write resumed>) = 16777216 [pid 6233] <... mkdir resumed>) = 0 [pid 6233] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6235] <... munmap resumed>) = 0 [ 285.511394][ T6234] loop0: detected capacity change from 0 to 32768 [ 285.518083][ T6233] loop2: detected capacity change from 0 to 32768 [pid 6236] munmap(0x7feda9000000, 138412032 [pid 6235] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6235] ioctl(4, LOOP_SET_FD, 3 [pid 6234] <... mount resumed>) = 0 [pid 6235] <... ioctl resumed>) = 0 [pid 6234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6233] <... mount resumed>) = 0 [pid 6235] close(3 [pid 6234] <... openat resumed>) = 3 [pid 6235] <... close resumed>) = 0 [pid 6234] chdir("./file0" [pid 6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6235] close(4 [pid 6234] <... chdir resumed>) = 0 [pid 6233] <... openat resumed>) = 3 [pid 6234] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6235] <... close resumed>) = 0 [pid 6233] chdir("./file0" [pid 6235] mkdir("./file0", 0777 [pid 6234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6233] <... chdir resumed>) = 0 [pid 6235] <... mkdir resumed>) = 0 [pid 6234] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6233] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6235] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6233] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6236] <... munmap resumed>) = 0 [ 285.572161][ T6234] [ 285.572161][ T6234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.572161][ T6234] [ 285.585377][ T6233] [ 285.585377][ T6233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.585377][ T6233] [ 285.610298][ T6235] loop1: detected capacity change from 0 to 32768 [pid 6236] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6236] ioctl(4, LOOP_SET_FD, 3 [pid 6233] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6236] <... ioctl resumed>) = 0 [pid 6236] close(3) = 0 [pid 6236] close(4) = 0 [ 285.643839][ T6234] [ 285.643839][ T6234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.643839][ T6234] [ 285.646700][ T6236] loop4: detected capacity change from 0 to 32768 [ 285.658195][ T6235] [ 285.658195][ T6235] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.658195][ T6235] [ 285.671965][ T6233] [ 285.671965][ T6233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.671965][ T6233] [pid 6236] mkdir("./file0", 0777) = 0 [pid 6236] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6235] <... mount resumed>) = 0 [pid 6235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6235] chdir("./file0") = 0 [ 285.699004][ T6233] [ 285.699004][ T6233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.699004][ T6233] [ 285.710630][ T6234] [ 285.710630][ T6234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.710630][ T6234] [ 285.734330][ T6236] [ 285.734330][ T6236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.734330][ T6236] [pid 6235] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6235] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 6236] <... mount resumed>) = 0 [pid 6234] <... lsetxattr resumed>) = 0 [pid 6233] <... lsetxattr resumed>) = 0 [pid 6236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6236] chdir("./file0") = 0 [pid 6236] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 285.755281][ T6235] [ 285.755281][ T6235] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.755281][ T6235] [ 285.766790][ T113] [ 285.766790][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.766790][ T113] [ 285.781050][ T6235] [ 285.781050][ T6235] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.781050][ T6235] [ 285.783636][ T6236] [ 285.783636][ T6236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.783636][ T6236] [ 285.802608][ T112] [pid 6236] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6235] <... lsetxattr resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... close resumed>) = 0 [pid 6234] exit_group(0 [pid 6233] exit_group(0 [pid 6234] <... exit_group resumed>) = ? [pid 6234] +++ exited with 0 +++ [pid 6233] <... exit_group resumed>) = ? [pid 6233] +++ exited with 0 +++ [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6234, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6237 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6238 [pid 6235] exit_group(0) = ? [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6235] +++ exited with 0 +++ [pid 5849] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./61/binderfs") = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./62/binderfs") = 0 [pid 5848] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6237 attached [ 285.802608][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.802608][ T112] [ 285.807585][ T113] [ 285.807585][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.807585][ T113] [ 285.832893][ T6236] [ 285.832893][ T6236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.832893][ T6236] [ 285.845473][ T5849] [ 285.845473][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.845473][ T5849] [pid 5847] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6236] <... lsetxattr resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6237] set_robust_list(0x555584a2d760, 24) = 0 [pid 6237] chdir("./62"./strace-static-x86_64: Process 6238 attached ) = 0 [pid 6236] exit_group(0 [pid 5847] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6238] set_robust_list(0x555584a2d760, 24 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6236] <... exit_group resumed>) = ? [pid 5847] <... openat resumed>) = 3 [pid 6238] <... set_robust_list resumed>) = 0 [pid 6237] <... prctl resumed>) = 0 [pid 6236] +++ exited with 0 +++ [pid 5847] newfstatat(3, "", [pid 6238] chdir("./62" [pid 6237] setpgid(0, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 6238] <... chdir resumed>) = 0 [pid 6237] <... setpgid resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./62/binderfs") = 0 [pid 5851] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... umount2 resumed>) = 0 [ 285.855649][ T113] [ 285.855649][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.855649][ T113] [ 285.857811][ T5848] [ 285.857811][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.857811][ T5848] [ 285.877435][ T5849] [ 285.877435][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.877435][ T5849] [ 285.889738][ T5848] [ 285.889738][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.889738][ T5848] [ 285.900923][ T5851] [pid 5847] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6238] <... prctl resumed>) = 0 [pid 6237] <... openat resumed>) = 3 [pid 5849] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] setpgid(0, 0 [pid 6237] write(3, "1000", 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6238] <... setpgid resumed>) = 0 [pid 6237] <... write resumed>) = 4 [pid 5849] newfstatat(AT_FDCWD, "./61/file0", [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6237] close(3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./62/binderfs" [pid 6238] <... openat resumed>) = 3 [pid 6237] <... close resumed>) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 6238] write(3, "1000", 4 [pid 6237] symlink("/dev/binderfs", "./binderfs" [pid 5849] umount2("./61/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6238] <... write resumed>) = 4 [pid 6237] <... symlink resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] close(3 [pid 6237] write(1, "executing program\n", 18executing program [pid 6238] <... close resumed>) = 0 [pid 6237] <... write resumed>) = 18 [pid 5849] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6238] symlink("/dev/binderfs", "./binderfs"executing program [pid 6237] memfd_create("syzkaller", 0 [pid 6238] <... symlink resumed>) = 0 [pid 6238] write(1, "executing program\n", 18 [pid 5849] <... openat resumed>) = 4 [pid 6238] <... write resumed>) = 18 [pid 5849] newfstatat(4, "", [pid 6238] memfd_create("syzkaller", 0 [pid 6237] <... memfd_create resumed>) = 3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6238] <... memfd_create resumed>) = 3 [pid 5849] getdents64(4, [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6237] <... mmap resumed>) = 0x7feda9000000 [pid 5849] getdents64(4, [pid 5848] <... umount2 resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... close resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./62/file0", [pid 5849] rmdir("./61/file0" [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... rmdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", [pid 5849] getdents64(3, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(4, [pid 5849] close(3 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... close resumed>) = 0 [pid 5848] getdents64(4, [pid 5849] rmdir("./61" [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./62/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] mkdir("./62", 0777 [pid 5848] close(3 [pid 5851] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./62/file0", [pid 5848] rmdir("./62" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5851] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... rmdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... openat resumed>) = 3 [pid 5848] mkdir("./63", 0777 [pid 5851] <... openat resumed>) = 4 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5851] getdents64(4, [pid 5849] close(3 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./62/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 285.900923][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.900923][ T5851] [ 285.912479][ T5851] [ 285.912479][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.912479][ T5851] [ 285.923504][ T5847] [ 285.923504][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.923504][ T5847] [ 285.941499][ T5847] [ 285.941499][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.941499][ T5847] [pid 5851] close(3) = 0 [pid 5851] rmdir("./62") = 0 [pid 5851] mkdir("./63", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5851] close(3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] <... umount2 resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 5847] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./62/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./62") = 0 [pid 5847] mkdir("./63", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6239 attached [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6239 [pid 6239] set_robust_list(0x555584a2d760, 24) = 0 [pid 6239] chdir("./63") = 0 [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6239] setpgid(0, 0) = 0 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6239] write(3, "1000", 4) = 4 [pid 6239] close(3) = 0 [pid 6239] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6239] write(1, "executing program\n", 18) = 18 [pid 6239] memfd_create("syzkaller", 0) = 3 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6240 attached , child_tidptr=0x555584a2d750) = 6240 [pid 6240] set_robust_list(0x555584a2d760, 24) = 0 [pid 6240] chdir("./63" [pid 5849] <... close resumed>) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6241 attached [pid 6241] set_robust_list(0x555584a2d760, 24 [pid 6240] setpgid(0, 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6241 [pid 6241] <... set_robust_list resumed>) = 0 [pid 6240] <... setpgid resumed>) = 0 [pid 6241] chdir("./62" [pid 6240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6241] <... chdir resumed>) = 0 [pid 6240] <... openat resumed>) = 3 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6240] write(3, "1000", 4 [pid 6241] <... prctl resumed>) = 0 [pid 6240] <... write resumed>) = 4 [pid 6241] setpgid(0, 0) = 0 [pid 6240] close(3) = 0 [pid 6240] symlink("/dev/binderfs", "./binderfs" [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6240] <... symlink resumed>) = 0 executing program [pid 6241] <... openat resumed>) = 3 [pid 6240] write(1, "executing program\n", 18 [pid 6241] write(3, "1000", 4 [pid 6240] <... write resumed>) = 18 [pid 6241] <... write resumed>) = 4 [pid 6240] memfd_create("syzkaller", 0 [pid 6241] close(3 [pid 6240] <... memfd_create resumed>) = 3 [pid 6241] <... close resumed>) = 0 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6241] symlink("/dev/binderfs", "./binderfs" [pid 6240] <... mmap resumed>) = 0x7feda9000000 [pid 6241] <... symlink resumed>) = 0 [pid 6241] write(1, "executing program\n", 18executing program ) = 18 [pid 5847] <... close resumed>) = 0 [pid 6241] memfd_create("syzkaller", 0) = 3 [pid 6241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6242 attached , child_tidptr=0x555584a2d750) = 6242 [pid 6242] set_robust_list(0x555584a2d760, 24) = 0 [pid 6242] chdir("./63") = 0 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6242] write(3, "1000", 4) = 4 [pid 6242] close(3) = 0 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6242] write(1, "executing program\n", 18executing program ) = 18 [pid 6242] memfd_create("syzkaller", 0) = 3 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6238] <... write resumed>) = 16777216 [pid 6238] munmap(0x7feda9000000, 138412032) = 0 [pid 6237] <... write resumed>) = 16777216 [pid 6238] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6238] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6237] munmap(0x7feda9000000, 138412032 [pid 6238] close(3) = 0 [pid 6238] close(4) = 0 [pid 6238] mkdir("./file0", 0777) = 0 [ 286.772483][ T6238] loop3: detected capacity change from 0 to 32768 [ 286.795970][ T6238] [ 286.795970][ T6238] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.795970][ T6238] [pid 6238] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6237] <... munmap resumed>) = 0 [pid 6238] <... mount resumed>) = 0 [pid 6238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6238] chdir("./file0") = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6238] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6237] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6237] close(3) = 0 [pid 6237] close(4) = 0 [pid 6237] mkdir("./file0", 0777) = 0 [ 286.843667][ T6238] [ 286.843667][ T6238] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.843667][ T6238] [ 286.857606][ T6237] loop5: detected capacity change from 0 to 32768 [ 286.877564][ T6238] [ 286.877564][ T6238] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.877564][ T6238] [pid 6237] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6237] chdir("./file0") = 0 [pid 6237] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 286.895761][ T6237] [ 286.895761][ T6237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.895761][ T6237] [ 286.923219][ T6237] [ 286.923219][ T6237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.923219][ T6237] [pid 6237] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6238] <... lsetxattr resumed>) = 0 [pid 6238] exit_group(0) = ? [pid 6238] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6238, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5850] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 286.952186][ T112] [ 286.952186][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.952186][ T112] [ 286.965711][ T6237] [ 286.965711][ T6237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.965711][ T6237] [pid 5850] unlink("./62/binderfs") = 0 [pid 5850] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6237] <... lsetxattr resumed>) = 0 [pid 6237] exit_group(0) = ? [pid 6237] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./62/binderfs") = 0 [ 286.993482][ T113] [ 286.993482][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.993482][ T113] [ 287.010682][ T5850] [ 287.010682][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.010682][ T5850] [ 287.034470][ T5850] [ 287.034470][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5852] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./62/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./62") = 0 [pid 5850] mkdir("./63", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 287.034470][ T5850] [ 287.061570][ T5852] [ 287.061570][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.061570][ T5852] [pid 5850] close(3 [pid 6239] <... write resumed>) = 16777216 [pid 6239] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 287.096796][ T5852] [ 287.096796][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.096796][ T5852] [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./62/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./62") = 0 [pid 5852] mkdir("./63", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6239] <... munmap resumed>) = 0 [pid 6240] <... write resumed>) = 16777216 [pid 6239] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6240] munmap(0x7feda9000000, 138412032 [pid 6239] <... ioctl resumed>) = 0 [pid 6239] close(3) = 0 [pid 6239] close(4 [pid 6241] <... write resumed>) = 16777216 [pid 6239] <... close resumed>) = 0 [pid 6239] mkdir("./file0", 0777) = 0 [ 287.204090][ T6239] loop4: detected capacity change from 0 to 32768 [pid 6239] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6241] munmap(0x7feda9000000, 138412032 [pid 6240] <... munmap resumed>) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6239] chdir("./file0") = 0 [ 287.248495][ T6239] [ 287.248495][ T6239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.248495][ T6239] [pid 6239] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6239] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6241] <... munmap resumed>) = 0 [pid 6240] ioctl(4, LOOP_SET_FD, 3 [pid 6241] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6240] <... ioctl resumed>) = 0 [pid 6240] close(3 [pid 6241] <... openat resumed>) = 4 [pid 6240] <... close resumed>) = 0 [pid 6242] <... write resumed>) = 16777216 [pid 6241] ioctl(4, LOOP_SET_FD, 3 [pid 6240] close(4) = 0 [ 287.304672][ T6239] [ 287.304672][ T6239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.304672][ T6239] [ 287.320895][ T6240] loop1: detected capacity change from 0 to 32768 [ 287.343332][ T6239] [ 287.343332][ T6239] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.343332][ T6239] [pid 6240] mkdir("./file0", 0777) = 0 [pid 6240] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6242] munmap(0x7feda9000000, 138412032 [pid 6241] <... ioctl resumed>) = 0 [pid 6241] close(3) = 0 [pid 6241] close(4) = 0 [pid 6241] mkdir("./file0", 0777) = 0 [pid 6241] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6239] <... lsetxattr resumed>) = 0 [ 287.355107][ T6241] loop2: detected capacity change from 0 to 32768 [pid 6242] <... munmap resumed>) = 0 [pid 6239] exit_group(0 [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6239] <... exit_group resumed>) = ? [pid 6242] <... openat resumed>) = 4 [pid 6239] +++ exited with 0 +++ [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6240] <... mount resumed>) = 0 [pid 6242] <... ioctl resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6239, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5851] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6242] close(3 [pid 6240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6242] <... close resumed>) = 0 [pid 6241] <... mount resumed>) = 0 [pid 6242] close(4 [pid 6240] <... openat resumed>) = 3 [ 287.403702][ T6240] [ 287.403702][ T6240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.403702][ T6240] [ 287.403863][ T113] [ 287.403863][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.403863][ T113] [ 287.430737][ T6242] loop0: detected capacity change from 0 to 32768 [ 287.439752][ T6241] [ 287.439752][ T6241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.439752][ T6241] [pid 6242] <... close resumed>) = 0 [pid 6241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6242] mkdir("./file0", 0777 [pid 6240] chdir("./file0" [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... close resumed>) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 5851] unlink("./63/binderfs" [pid 6242] <... mkdir resumed>) = 0 [pid 6241] <... openat resumed>) = 3 [pid 6240] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] <... unlink resumed>) = 0 [pid 6242] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6241] chdir("./file0" [pid 6240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6241] <... chdir resumed>) = 0 [pid 6240] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6241] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6241] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6243 ./strace-static-x86_64: Process 6243 attached [ 287.499451][ T5851] [ 287.499451][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.499451][ T5851] [ 287.500783][ T6240] [ 287.500783][ T6240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.500783][ T6240] [ 287.510517][ T5851] [ 287.510517][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.510517][ T5851] [ 287.522250][ T6241] [ 287.522250][ T6241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.522250][ T6241] [ 287.545869][ T6242] [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 6243] set_robust_list(0x555584a2d760, 24) = 0 [pid 6243] chdir("./63") = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6244 [pid 6243] setpgid(0, 0) = 0 [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6243] write(3, "1000", 4) = 4 [pid 6243] close(3) = 0 [pid 6243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6243] write(1, "executing program\n", 18) = 18 [pid 6243] memfd_create("syzkaller", 0) = 3 [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 ./strace-static-x86_64: Process 6244 attached [pid 6244] set_robust_list(0x555584a2d760, 24) = 0 [pid 6242] <... mount resumed>) = 0 [pid 6244] chdir("./63" [pid 6242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6244] <... chdir resumed>) = 0 [pid 6242] <... openat resumed>) = 3 [pid 5851] <... umount2 resumed>) = 0 [ 287.545869][ T6242] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.545869][ T6242] [ 287.566800][ T6240] [ 287.566800][ T6240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.566800][ T6240] [ 287.577574][ T6241] [ 287.577574][ T6241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.577574][ T6241] [pid 6244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6242] chdir("./file0" [pid 6240] <... lsetxattr resumed>) = 0 [pid 5851] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6244] <... prctl resumed>) = 0 [pid 6242] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] setpgid(0, 0 [pid 6242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6240] exit_group(0 [pid 5851] newfstatat(AT_FDCWD, "./63/file0", [pid 6244] <... setpgid resumed>) = 0 [pid 6242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6240] <... exit_group resumed>) = ? [pid 6240] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6240, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6244] <... openat resumed>) = 3 [pid 6242] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6244] write(3, "1000", 4 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./63/binderfs") = 0 [pid 5848] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6244] <... write resumed>) = 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] close(3) = 0 [pid 5851] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] <... openat resumed>) = 4 [pid 6244] write(1, "executing program\n", 18) = 18 [pid 5851] newfstatat(4, "", [pid 6244] memfd_create("syzkaller", 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6244] <... memfd_create resumed>) = 3 [pid 5851] getdents64(4, [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 287.599646][ T112] [ 287.599646][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.599646][ T112] [ 287.618554][ T6242] [ 287.618554][ T6242] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.618554][ T6242] [ 287.638768][ T5848] [ 287.638768][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.638768][ T5848] [pid 6244] <... mmap resumed>) = 0x7feda9000000 [pid 5851] getdents64(4, [pid 6241] <... lsetxattr resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./63/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6242] <... lsetxattr resumed>) = 0 [pid 5851] close(3) = 0 [pid 6242] exit_group(0 [pid 5851] rmdir("./63" [pid 6241] exit_group(0 [pid 5851] <... rmdir resumed>) = 0 [pid 6241] <... exit_group resumed>) = ? [pid 6241] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... umount2 resumed>) = 0 [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6242] <... exit_group resumed>) = ? [pid 5851] mkdir("./64", 0777 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... mkdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(AT_FDCWD, "./63/file0", [pid 5851] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(3, [pid 5848] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] +++ exited with 0 +++ [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] <... openat resumed>) = 4 [pid 5851] <... ioctl resumed>) = 0 [pid 5849] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(4, "", [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [ 287.650151][ T6242] [ 287.650151][ T6242] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.650151][ T6242] [ 287.651800][ T113] [ 287.651800][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.651800][ T113] [ 287.673948][ T5848] [ 287.673948][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.673948][ T5848] [ 287.686062][ T112] [ 287.686062][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.686062][ T112] [pid 5851] close(3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5849] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5848] getdents64(4, [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] unlink("./62/binderfs" [pid 5848] getdents64(4, [pid 5849] <... unlink resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(4 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./63/file0" [pid 5847] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./63/binderfs") = 0 [pid 5848] getdents64(3, [pid 5847] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./63") = 0 [pid 5848] mkdir("./64", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 287.740841][ T5847] [ 287.740841][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.740841][ T5847] [ 287.751739][ T5849] [ 287.751739][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.751739][ T5849] [ 287.780971][ T5847] [ 287.780971][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.780971][ T5847] [ 287.792033][ T5849] [ 287.792033][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.792033][ T5849] [pid 5848] close(3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./62/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./62/file0") = 0 [pid 5847] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] close(3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 5849] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] rmdir("./62" [pid 5847] getdents64(4, [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4 [pid 5849] mkdir("./63", 0777 [pid 5847] <... close resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5847] rmdir("./63/file0") = 0 [pid 5847] getdents64(3, [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5847] close(3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./63" [pid 5849] <... ioctl resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5849] close(3 [pid 5847] mkdir("./64", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6245 ./strace-static-x86_64: Process 6245 attached [pid 6245] set_robust_list(0x555584a2d760, 24) = 0 [pid 6245] chdir("./64") = 0 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6245] write(3, "1000", 4) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] write(1, "executing program\n", 18executing program ) = 18 [pid 6245] memfd_create("syzkaller", 0) = 3 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6246 ./strace-static-x86_64: Process 6246 attached executing program [pid 6246] set_robust_list(0x555584a2d760, 24) = 0 [pid 6246] chdir("./64") = 0 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6246] setpgid(0, 0) = 0 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6246] write(3, "1000", 4) = 4 [pid 6246] close(3) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6246] write(1, "executing program\n", 18) = 18 [pid 6246] memfd_create("syzkaller", 0) = 3 [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... close resumed>) = 0 [pid 6243] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6243] munmap(0x7feda9000000, 138412032 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6247 ./strace-static-x86_64: Process 6247 attached ./strace-static-x86_64: Process 6248 attached [pid 6248] set_robust_list(0x555584a2d760, 24) = 0 [pid 6247] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6248 [pid 6247] <... set_robust_list resumed>) = 0 [pid 6248] chdir("./64" [pid 6247] chdir("./63" [pid 6248] <... chdir resumed>) = 0 [pid 6247] <... chdir resumed>) = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0 [pid 6247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6248] <... setpgid resumed>) = 0 [pid 6247] <... prctl resumed>) = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6247] setpgid(0, 0) = 0 [pid 6247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6248] <... openat resumed>) = 3 [pid 6247] <... openat resumed>) = 3 [pid 6248] write(3, "1000", 4 [pid 6247] write(3, "1000", 4 [pid 6248] <... write resumed>) = 4 [pid 6247] <... write resumed>) = 4 [pid 6248] close(3 [pid 6247] close(3 [pid 6248] <... close resumed>) = 0 [pid 6247] <... close resumed>) = 0 executing program [pid 6248] symlink("/dev/binderfs", "./binderfs" [pid 6247] symlink("/dev/binderfs", "./binderfs" [pid 6248] <... symlink resumed>) = 0 [pid 6248] write(1, "executing program\n", 18) = 18 [pid 6248] memfd_create("syzkaller", 0) = 3 [pid 6243] <... munmap resumed>) = 0 [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6247] <... symlink resumed>) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 executing program [pid 6243] ioctl(4, LOOP_SET_FD, 3 [pid 6247] write(1, "executing program\n", 18) = 18 [pid 6243] <... ioctl resumed>) = 0 [pid 6243] close(3 [pid 6247] memfd_create("syzkaller", 0 [pid 6243] <... close resumed>) = 0 [pid 6243] close(4 [pid 6247] <... memfd_create resumed>) = 3 [pid 6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6243] <... close resumed>) = 0 [pid 6243] mkdir("./file0", 0777) = 0 [ 288.270926][ T6243] loop3: detected capacity change from 0 to 32768 [pid 6243] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6243] chdir("./file0" [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6243] <... chdir resumed>) = 0 [ 288.328909][ T6243] [ 288.328909][ T6243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.328909][ T6243] [pid 6243] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6243] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6244] <... write resumed>) = 16777216 [pid 6244] munmap(0x7feda9000000, 138412032) = 0 [pid 6244] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 288.391902][ T6243] [ 288.391902][ T6243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.391902][ T6243] [ 288.420120][ T6243] [ 288.420120][ T6243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.420120][ T6243] [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6243] <... lsetxattr resumed>) = 0 [pid 6244] <... ioctl resumed>) = 0 [ 288.459182][ T6244] loop5: detected capacity change from 0 to 32768 [ 288.468315][ T112] [ 288.468315][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.468315][ T112] [pid 6244] close(3) = 0 [pid 6243] exit_group(0 [pid 6244] close(4 [pid 6243] <... exit_group resumed>) = ? [pid 6244] <... close resumed>) = 0 [pid 6247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6244] mkdir("./file0", 0777 [pid 6243] +++ exited with 0 +++ [pid 6244] <... mkdir resumed>) = 0 [pid 6244] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./63/binderfs") = 0 [pid 5850] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6244] <... mount resumed>) = 0 [pid 6244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] <... umount2 resumed>) = 0 [pid 6244] chdir("./file0") = 0 [ 288.546377][ T5850] [ 288.546377][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.546377][ T5850] [ 288.564748][ T6244] [ 288.564748][ T6244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.564748][ T6244] [ 288.580530][ T5850] [ 288.580530][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.580530][ T5850] [pid 5850] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6244] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] newfstatat(AT_FDCWD, "./63/file0", [pid 6244] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 288.618051][ T6244] [ 288.618051][ T6244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.618051][ T6244] [ 288.640031][ T6244] [ 288.640031][ T6244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.640031][ T6244] [ 288.662661][ T112] [pid 5850] getdents64(4, [pid 6244] <... lsetxattr resumed>) = 0 [pid 6244] exit_group(0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6244] <... exit_group resumed>) = ? [pid 5850] close(4 [pid 6244] +++ exited with 0 +++ [pid 5850] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6244, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5850] rmdir("./63/file0" [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3 [pid 5852] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./63" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... rmdir resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [ 288.662661][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.662661][ T112] [pid 5850] mkdir("./64", 0777 [pid 5852] newfstatat(3, "", [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 5850] <... openat resumed>) = 3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5852] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./63/binderfs") = 0 [pid 5852] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5852] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 288.790677][ T5852] [ 288.790677][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.790677][ T5852] [ 288.808945][ T5852] [ 288.808945][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.808945][ T5852] [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 6245] <... write resumed>) = 16777216 [pid 5852] rmdir("./63/file0" [pid 6245] munmap(0x7feda9000000, 138412032 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./63") = 0 [pid 5852] mkdir("./64", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6245] <... munmap resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6246] <... write resumed>) = 16777216 [pid 6245] close(3) = 0 [pid 6246] munmap(0x7feda9000000, 138412032 [pid 6245] close(4) = 0 [ 288.943056][ T6245] loop4: detected capacity change from 0 to 32768 [pid 6247] <... write resumed>) = 16777216 [pid 6245] mkdir("./file0", 0777 [pid 6247] munmap(0x7feda9000000, 138412032 [pid 6245] <... mkdir resumed>) = 0 [pid 6245] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6249 attached [pid 6247] <... munmap resumed>) = 0 [pid 6246] <... munmap resumed>) = 0 [pid 6249] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6249 [pid 6246] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6249] <... set_robust_list resumed>) = 0 [pid 6246] <... openat resumed>) = 4 [pid 6249] chdir("./64" [pid 6246] ioctl(4, LOOP_SET_FD, 3 [pid 6249] <... chdir resumed>) = 0 [pid 6247] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6247] ioctl(4, LOOP_SET_FD, 3 [pid 6248] <... write resumed>) = 16777216 [pid 6249] <... prctl resumed>) = 0 [pid 6249] setpgid(0, 0 [pid 6248] munmap(0x7feda9000000, 138412032 [pid 6246] <... ioctl resumed>) = 0 [pid 6246] close(3) = 0 [pid 6246] close(4) = 0 [pid 6246] mkdir("./file0", 0777 [pid 6249] <... setpgid resumed>) = 0 [pid 6246] <... mkdir resumed>) = 0 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6246] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6249] <... openat resumed>) = 3 [pid 6247] <... ioctl resumed>) = 0 [ 289.059166][ T6246] loop1: detected capacity change from 0 to 32768 [ 289.069526][ T6245] [ 289.069526][ T6245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.069526][ T6245] [ 289.069881][ T6247] loop2: detected capacity change from 0 to 32768 [ 289.107017][ T6246] [pid 6249] write(3, "1000", 4 [pid 6248] <... munmap resumed>) = 0 [pid 6247] close(3 [pid 6249] <... write resumed>) = 4 [pid 6248] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6249] close(3) = 0 [pid 6248] <... openat resumed>) = 4 [pid 6247] <... close resumed>) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs" [pid 6246] <... mount resumed>) = 0 [pid 6245] <... mount resumed>) = 0 [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 6247] close(4 [pid 6249] <... symlink resumed>) = 0 [pid 6248] <... ioctl resumed>) = 0 [pid 6247] <... close resumed>) = 0 [pid 6246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORYexecuting program [pid 6245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6249] write(1, "executing program\n", 18 [pid 6247] mkdir("./file0", 0777 [pid 6246] <... openat resumed>) = 3 [pid 6245] <... openat resumed>) = 3 [pid 6245] chdir("./file0" [pid 6249] <... write resumed>) = 18 [pid 6247] <... mkdir resumed>) = 0 [pid 6246] chdir("./file0" [pid 6247] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6246] <... chdir resumed>) = 0 [pid 6246] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 289.107017][ T6246] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.107017][ T6246] [ 289.132694][ T6248] loop0: detected capacity change from 0 to 32768 [ 289.148712][ T6247] [ 289.148712][ T6247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.148712][ T6247] [pid 6249] memfd_create("syzkaller", 0 [pid 6248] close(3 [pid 6246] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6245] <... chdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6249] <... memfd_create resumed>) = 3 [pid 6248] <... close resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6248] close(4 [pid 6245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6249] <... mmap resumed>) = 0x7feda9000000 [pid 6248] <... close resumed>) = 0 [pid 6245] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 6250 attached [pid 6248] mkdir("./file0", 0777) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6250 [pid 6248] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6250] set_robust_list(0x555584a2d760, 24) = 0 [pid 6250] chdir("./64") = 0 [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6250] setpgid(0, 0) = 0 [ 289.164463][ T6246] [ 289.164463][ T6246] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.164463][ T6246] [ 289.170723][ T6245] [ 289.170723][ T6245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.170723][ T6245] [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6250] write(3, "1000", 4 [pid 6247] <... mount resumed>) = 0 [pid 6246] <... lsetxattr resumed>) = 0 [pid 6250] <... write resumed>) = 4 [pid 6247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6246] exit_group(0 [pid 6250] close(3 [pid 6246] <... exit_group resumed>) = ? [pid 6250] <... close resumed>) = 0 [pid 6247] <... openat resumed>) = 3 [pid 6246] +++ exited with 0 +++ [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6247] chdir("./file0" [pid 6250] <... symlink resumed>) = 0 [pid 6247] <... chdir resumed>) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [ 289.212639][ T6248] [ 289.212639][ T6248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.212639][ T6248] [ 289.223137][ T6246] [ 289.223137][ T6246] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.223137][ T6246] [ 289.230422][ T112] [ 289.230422][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.230422][ T112] [ 289.240350][ T6245] [ 289.240350][ T6245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.240350][ T6245] executing program [pid 5848] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6250] write(1, "executing program\n", 18 [pid 6247] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6250] <... write resumed>) = 18 [pid 6247] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./64/binderfs") = 0 [pid 5848] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6250] memfd_create("syzkaller", 0 [pid 6245] <... lsetxattr resumed>) = 0 [pid 6250] <... memfd_create resumed>) = 3 [pid 6248] <... mount resumed>) = 0 [pid 6248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6248] chdir("./file0") = 0 [pid 6248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 289.264085][ T6247] [ 289.264085][ T6247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.264085][ T6247] [ 289.280370][ T113] [ 289.280370][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.280370][ T113] [ 289.287232][ T5848] [ 289.287232][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.287232][ T5848] [ 289.301633][ T6247] [ 289.301633][ T6247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.301633][ T6247] [ 289.304317][ T6248] [pid 6248] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6247] <... lsetxattr resumed>) = 0 [pid 6245] exit_group(0) = ? [pid 6245] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6250] <... mmap resumed>) = 0x7feda9000000 [pid 6247] exit_group(0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 6247] <... exit_group resumed>) = ? [pid 5851] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6247] +++ exited with 0 +++ [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./64/binderfs" [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6247, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=30 /* 0.30 s */} --- [pid 5851] <... unlink resumed>) = 0 [ 289.304317][ T6248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.304317][ T6248] [ 289.323431][ T112] [ 289.323431][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.323431][ T112] [ 289.328757][ T5848] [ 289.328757][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.328757][ T5848] [ 289.351166][ T6248] [ 289.351166][ T6248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.351166][ T6248] [pid 5851] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./63/binderfs") = 0 [pid 5849] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6248] <... lsetxattr resumed>) = 0 [pid 6248] exit_group(0) = ? [ 289.367084][ T5851] [ 289.367084][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.367084][ T5851] [ 289.387661][ T113] [ 289.387661][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.387661][ T113] [ 289.387892][ T5849] [ 289.387892][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.387892][ T5849] [ 289.409834][ T5851] [pid 6248] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6248, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./64/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./64") = 0 [pid 5848] mkdir("./65", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5847] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... openat resumed>) = 3 [pid 6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] newfstatat(AT_FDCWD, "./63/file0", [pid 5847] newfstatat(3, "", [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 289.409834][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.409834][ T5851] [ 289.430645][ T5849] [ 289.430645][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.430645][ T5849] [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5851] <... openat resumed>) = 4 [pid 5849] umount2("./63/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] newfstatat(4, "", [pid 5847] unlink("./64/binderfs" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... unlink resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] getdents64(4, [pid 5849] <... openat resumed>) = 4 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] newfstatat(4, "", [pid 5851] close(4) = 0 [pid 5851] rmdir("./64/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./64" [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 5851] mkdir("./65", 0777 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5849] close(4 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./63/file0" [pid 5851] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./63") = 0 [pid 5849] mkdir("./64", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 289.482576][ T5847] [ 289.482576][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.482576][ T5847] [ 289.504957][ T5847] [ 289.504957][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.504957][ T5847] [pid 5849] close(3 [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./64/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./64") = 0 [pid 5847] mkdir("./65", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6251 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x555584a2d760, 24 [pid 5848] <... close resumed>) = 0 [pid 6251] <... set_robust_list resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6251] chdir("./64" [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6252 ./strace-static-x86_64: Process 6252 attached [pid 6251] <... chdir resumed>) = 0 [pid 6252] set_robust_list(0x555584a2d760, 24 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6252] <... set_robust_list resumed>) = 0 [pid 6251] <... prctl resumed>) = 0 [pid 6252] chdir("./65" [pid 6251] setpgid(0, 0 [pid 6252] <... chdir resumed>) = 0 [pid 6251] <... setpgid resumed>) = 0 [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6252] setpgid(0, 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6252] <... setpgid resumed>) = 0 [pid 6251] <... openat resumed>) = 3 [pid 6251] write(3, "1000", 4 [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6251] <... write resumed>) = 4 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6252] <... openat resumed>) = 3 [pid 6252] write(3, "1000", 4) = 4 [pid 6252] close(3./strace-static-x86_64: Process 6253 attached ) = 0 [pid 6252] symlink("/dev/binderfs", "./binderfs" [pid 6253] set_robust_list(0x555584a2d760, 24 [pid 6252] <... symlink resumed>) = 0 executing program [pid 6251] close(3 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6253 [pid 6253] <... set_robust_list resumed>) = 0 [pid 6251] <... close resumed>) = 0 [pid 6252] write(1, "executing program\n", 18) = 18 [pid 6253] chdir("./65" [pid 6252] memfd_create("syzkaller", 0 [pid 6251] symlink("/dev/binderfs", "./binderfs" [pid 6253] <... chdir resumed>) = 0 [pid 6252] <... memfd_create resumed>) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6251] <... symlink resumed>) = 0 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6252] <... mmap resumed>) = 0x7feda9000000 [pid 6251] write(1, "executing program\n", 18 [pid 6253] <... prctl resumed>) = 0 executing program [pid 6251] <... write resumed>) = 18 [pid 6253] setpgid(0, 0) = 0 [pid 6251] memfd_create("syzkaller", 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] <... memfd_create resumed>) = 3 [pid 6253] write(3, "1000", 4 [pid 6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6253] <... write resumed>) = 4 [pid 6253] close(3) = 0 [pid 6251] <... mmap resumed>) = 0x7feda9000000 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6253] write(1, "executing program\n", 18) = 18 [pid 6253] memfd_create("syzkaller", 0) = 3 [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... close resumed>) = 0 [pid 6250] <... write resumed>) = 16777216 executing program [pid 6250] munmap(0x7feda9000000, 138412032 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6254 attached , child_tidptr=0x555584a2d750) = 6254 [pid 6254] set_robust_list(0x555584a2d760, 24) = 0 [pid 6254] chdir("./65") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6254] write(3, "1000", 4) = 4 [pid 6254] close(3) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6254] write(1, "executing program\n", 18) = 18 [pid 6254] memfd_create("syzkaller", 0) = 3 [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6249] <... write resumed>) = 16777216 [pid 6250] <... munmap resumed>) = 0 [pid 6249] munmap(0x7feda9000000, 138412032 [pid 6250] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6250] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6249] <... munmap resumed>) = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6250] close(3 [pid 6249] <... openat resumed>) = 4 [pid 6249] ioctl(4, LOOP_SET_FD, 3 [pid 6250] <... close resumed>) = 0 [pid 6249] <... ioctl resumed>) = 0 [pid 6250] close(4) = 0 [ 290.041767][ T6250] loop5: detected capacity change from 0 to 32768 [ 290.070496][ T6249] loop3: detected capacity change from 0 to 32768 [pid 6250] mkdir("./file0", 0777 [pid 6249] close(3) = 0 [pid 6249] close(4 [pid 6250] <... mkdir resumed>) = 0 [pid 6249] <... close resumed>) = 0 [pid 6249] mkdir("./file0", 0777 [pid 6250] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6249] <... mkdir resumed>) = 0 [pid 6249] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 290.108579][ T6249] [ 290.108579][ T6249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.108579][ T6249] [ 290.108644][ T6250] [ 290.108644][ T6250] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.108644][ T6250] [pid 6249] chdir("./file0") = 0 [pid 6249] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6249] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6250] <... mount resumed>) = 0 [pid 6250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6250] chdir("./file0") = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6250] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6249] <... lsetxattr resumed>) = 0 [ 290.163436][ T6249] [ 290.163436][ T6249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.163436][ T6249] [ 290.184463][ T6250] [ 290.184463][ T6250] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.184463][ T6250] [ 290.192990][ T6249] [ 290.192990][ T6249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.192990][ T6249] [pid 6249] exit_group(0) = ? [pid 6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6249] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6250] <... lsetxattr resumed>) = 0 [pid 5850] newfstatat(3, "", [ 290.239989][ T112] [ 290.239989][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.239989][ T112] [ 290.249994][ T6250] [ 290.249994][ T6250] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.249994][ T6250] [pid 6250] exit_group(0) = ? [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./64/binderfs" [pid 6250] +++ exited with 0 +++ [pid 5850] <... unlink resumed>) = 0 [pid 5850] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./64/binderfs") = 0 [ 290.287035][ T113] [ 290.287035][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.287035][ T113] [ 290.304260][ T5850] [ 290.304260][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.304260][ T5850] [ 290.331605][ T5850] [ 290.331605][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.331605][ T5850] [ 290.331667][ T5852] [ 290.331667][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.331667][ T5852] [pid 5852] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./64/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./64") = 0 [pid 5850] mkdir("./65", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 290.402154][ T5852] [ 290.402154][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.402154][ T5852] [pid 5850] close(3 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./64/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./64") = 0 [pid 5852] mkdir("./65", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6251] <... write resumed>) = 16777216 [pid 6251] munmap(0x7feda9000000, 138412032 [pid 6254] <... write resumed>) = 16777216 [pid 5850] <... close resumed>) = 0 [pid 6252] <... write resumed>) = 16777216 [pid 6252] munmap(0x7feda9000000, 138412032 [pid 6254] munmap(0x7feda9000000, 138412032 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6255 attached [pid 6251] <... munmap resumed>) = 0 [pid 6255] set_robust_list(0x555584a2d760, 24) = 0 [pid 6251] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6255 [pid 6255] chdir("./65") = 0 [pid 6251] <... openat resumed>) = 4 [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6251] ioctl(4, LOOP_SET_FD, 3 [pid 6255] <... prctl resumed>) = 0 [pid 6255] setpgid(0, 0) = 0 [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6255] write(3, "1000", 4) = 4 [pid 6255] close(3) = 0 [pid 6255] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6255] write(1, "executing program\n", 18) = 18 [pid 6255] memfd_create("syzkaller", 0) = 3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6254] <... munmap resumed>) = 0 [pid 6252] <... munmap resumed>) = 0 [pid 6251] <... ioctl resumed>) = 0 [pid 6251] close(3) = 0 [pid 6254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6251] close(4 [pid 6252] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 6251] <... close resumed>) = 0 [pid 6251] mkdir("./file0", 0777 [pid 6254] <... openat resumed>) = 4 [pid 6254] ioctl(4, LOOP_SET_FD, 3 [pid 6251] <... mkdir resumed>) = 0 [pid 6254] <... ioctl resumed>) = 0 [pid 6251] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6253] <... write resumed>) = 16777216 [pid 6252] <... ioctl resumed>) = 0 [pid 6253] munmap(0x7feda9000000, 138412032 [pid 6252] close(3) = 0 [pid 6252] close(4) = 0 [pid 6252] mkdir("./file0", 0777) = 0 [ 290.751952][ T6251] loop2: detected capacity change from 0 to 32768 [ 290.769524][ T6252] loop1: detected capacity change from 0 to 32768 [ 290.781800][ T6254] loop0: detected capacity change from 0 to 32768 [pid 6252] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6254] close(3) = 0 [pid 6254] close(4) = 0 [pid 6254] mkdir("./file0", 0777) = 0 [pid 6254] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6252] <... mount resumed>) = 0 [pid 6252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6252] chdir("./file0") = 0 [pid 6252] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6252] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6253] <... munmap resumed>) = 0 [pid 6253] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 290.813069][ T6252] [ 290.813069][ T6252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.813069][ T6252] [ 290.835580][ T6251] [ 290.835580][ T6251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.835580][ T6251] [ 290.840041][ T6252] [ 290.840041][ T6252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.840041][ T6252] [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 6251] <... mount resumed>) = 0 [pid 6251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6251] chdir("./file0") = 0 [pid 6253] <... ioctl resumed>) = 0 [ 290.875440][ T6254] [ 290.875440][ T6254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.875440][ T6254] [ 290.893890][ T6253] loop4: detected capacity change from 0 to 32768 [ 290.895074][ T6252] [ 290.895074][ T6252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.895074][ T6252] [pid 6251] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6252] <... lsetxattr resumed>) = 0 [pid 6254] <... mount resumed>) = 0 [pid 6253] close(3 [pid 6251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6254] chdir("./file0") = 0 [pid 6253] <... close resumed>) = 0 [pid 6252] exit_group(0 [pid 6251] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6254] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6254] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6253] close(4 [pid 6252] <... exit_group resumed>) = ? [pid 5852] <... close resumed>) = 0 [pid 6252] +++ exited with 0 +++ [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6256 ./strace-static-x86_64: Process 6256 attached [pid 6256] set_robust_list(0x555584a2d760, 24) = 0 [pid 6256] chdir("./65") = 0 [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6252, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=35 /* 0.35 s */} --- [pid 6253] <... close resumed>) = 0 [pid 6256] setpgid(0, 0 [pid 6253] mkdir("./file0", 0777 [pid 6256] <... setpgid resumed>) = 0 [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6253] <... mkdir resumed>) = 0 [pid 5848] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6256] <... openat resumed>) = 3 [pid 6256] write(3, "1000", 4) = 4 executing program [pid 6256] close(3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6256] <... close resumed>) = 0 [pid 6256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6256] write(1, "executing program\n", 18 [pid 5848] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6256] <... write resumed>) = 18 [pid 6256] memfd_create("syzkaller", 0 [pid 5848] <... openat resumed>) = 3 [pid 6256] <... memfd_create resumed>) = 3 [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] newfstatat(3, "", [pid 6256] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 290.934171][ T112] [ 290.934171][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.934171][ T112] [ 290.951284][ T6251] [ 290.951284][ T6251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.951284][ T6251] [ 290.951622][ T6254] [ 290.951622][ T6254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.951622][ T6254] [ 290.970384][ T6251] [ 290.970384][ T6251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.970384][ T6251] [pid 5848] getdents64(3, [pid 6253] <... mount resumed>) = 0 [pid 6251] <... lsetxattr resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6251] exit_group(0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6251] <... exit_group resumed>) = ? [pid 5848] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6253] <... openat resumed>) = 3 [pid 6253] chdir("./file0" [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6253] <... chdir resumed>) = 0 [pid 5848] unlink("./65/binderfs" [pid 6253] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5848] <... unlink resumed>) = 0 [pid 6253] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 291.008879][ T6253] [ 291.008879][ T6253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.008879][ T6253] [ 291.009581][ T6254] [ 291.009581][ T6254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.009581][ T6254] [ 291.030616][ T113] [ 291.030616][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.030616][ T113] [ 291.050827][ T6253] [ 291.050827][ T6253] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5848] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6254] <... lsetxattr resumed>) = 0 [pid 6254] exit_group(0 [pid 6251] +++ exited with 0 +++ [pid 6254] <... exit_group resumed>) = ? [pid 6254] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5847] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [pid 5849] <... openat resumed>) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] newfstatat(3, "", [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5847] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(AT_FDCWD, "./65/binderfs", [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./65/binderfs" [pid 5849] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5847] <... unlink resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... umount2 resumed>) = 0 [ 291.050827][ T6253] [ 291.062537][ T112] [ 291.062537][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.062537][ T112] [ 291.063208][ T6253] [ 291.063208][ T6253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.063208][ T6253] [ 291.085539][ T5848] [ 291.085539][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.085539][ T5848] [ 291.096415][ T5848] [ 291.096415][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.096415][ T5848] [pid 5847] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] unlink("./64/binderfs" [pid 5848] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6253] <... lsetxattr resumed>) = 0 [pid 6253] exit_group(0 [pid 5849] <... unlink resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(AT_FDCWD, "./65/file0", [pid 6253] <... exit_group resumed>) = ? [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6253] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5848] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", [pid 5851] <... restart_syscall resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(4, [pid 5847] <... umount2 resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 291.131803][ T5847] [ 291.131803][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.131803][ T5847] [ 291.143389][ T113] [ 291.143389][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.143389][ T113] [ 291.154555][ T5847] [ 291.154555][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.154555][ T5847] [pid 5851] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./65/binderfs" [pid 5847] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... unlink resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./65/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./65") = 0 [pid 5847] mkdir("./66", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 6256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] close(4 [pid 5847] close(3 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./65/file0") = 0 [ 291.180145][ T5849] [ 291.180145][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.180145][ T5849] [ 291.200238][ T5849] [ 291.200238][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.200238][ T5849] [ 291.211386][ T5851] [ 291.211386][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.211386][ T5851] [pid 5849] <... umount2 resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./64/file0", [pid 5848] rmdir("./65") = 0 [pid 5848] mkdir("./66", 0777 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5849] umount2("./64/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... umount2 resumed>) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5851] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... openat resumed>) = 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 291.251666][ T5851] [ 291.251666][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.251666][ T5851] [pid 5849] newfstatat(4, "", [pid 5848] <... ioctl resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./65/file0", [pid 5848] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./65/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5849] getdents64(4, [pid 5851] <... close resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] rmdir("./65") = 0 [pid 5851] mkdir("./66", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] getdents64(4, [pid 5851] <... openat resumed>) = 3 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5849] close(4 [pid 5851] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./64/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./64") = 0 [pid 5849] mkdir("./65", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6257 ./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x555584a2d760, 24 [pid 5848] <... close resumed>) = 0 [pid 6257] <... set_robust_list resumed>) = 0 [pid 6257] chdir("./66") = 0 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6257] write(3, "1000", 4) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] write(1, "executing program\n", 18executing program ) = 18 [pid 6257] memfd_create("syzkaller", 0) = 3 [pid 6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6258 attached [pid 6258] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6258 [pid 6258] <... set_robust_list resumed>) = 0 [pid 6258] chdir("./66") = 0 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6258] setpgid(0, 0 [pid 6255] <... write resumed>) = 16777216 [pid 6258] <... setpgid resumed>) = 0 [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] munmap(0x7feda9000000, 138412032 [pid 6258] <... openat resumed>) = 3 [pid 5851] <... close resumed>) = 0 [pid 6258] write(3, "1000", 4) = 4 [pid 6258] close(3) = 0 [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6258] <... symlink resumed>) = 0 [pid 6258] write(1, "executing program\n", 18 [pid 6256] <... write resumed>) = 16777216 executing program [pid 6255] <... munmap resumed>) = 0 [pid 6258] <... write resumed>) = 18 ./strace-static-x86_64: Process 6259 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6259 [pid 6259] set_robust_list(0x555584a2d760, 24) = 0 [pid 6259] chdir("./66") = 0 [pid 6258] memfd_create("syzkaller", 0 [pid 6256] munmap(0x7feda9000000, 138412032 [pid 6255] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... close resumed>) = 0 [pid 6259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6258] <... memfd_create resumed>) = 3 [pid 6259] <... prctl resumed>) = 0 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] setpgid(0, 0 [pid 6258] <... mmap resumed>) = 0x7feda9000000 [pid 6259] <... setpgid resumed>) = 0 [pid 6255] <... openat resumed>) = 4 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6260 attached [pid 6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 6260] set_robust_list(0x555584a2d760, 24 [pid 6259] <... openat resumed>) = 3 [pid 6255] <... ioctl resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6260 [pid 6260] <... set_robust_list resumed>) = 0 [pid 6259] write(3, "1000", 4 [pid 6260] chdir("./65" [pid 6259] <... write resumed>) = 4 [pid 6260] <... chdir resumed>) = 0 [pid 6259] close(3 [pid 6256] <... munmap resumed>) = 0 [pid 6255] close(3 [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 6259] <... close resumed>) = 0 [pid 6259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6260] <... prctl resumed>) = 0 [pid 6260] setpgid(0, 0 [pid 6259] write(1, "executing program\n", 18 [pid 6260] <... setpgid resumed>) = 0 [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6259] <... write resumed>) = 18 [pid 6259] memfd_create("syzkaller", 0 [pid 6260] <... openat resumed>) = 3 [pid 6259] <... memfd_create resumed>) = 3 [pid 6260] write(3, "1000", 4) = 4 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6260] close(3 [pid 6259] <... mmap resumed>) = 0x7feda9000000 [pid 6260] <... close resumed>) = 0 [pid 6255] <... close resumed>) = 0 [pid 6260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6255] close(4 [pid 6256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6260] write(1, "executing program\n", 18 [ 291.712604][ T6255] loop3: detected capacity change from 0 to 32768 [pid 6255] <... close resumed>) = 0 [pid 6256] <... openat resumed>) = 4 [pid 6255] mkdir("./file0", 0777) = 0 executing program [pid 6256] ioctl(4, LOOP_SET_FD, 3 [pid 6260] <... write resumed>) = 18 [pid 6260] memfd_create("syzkaller", 0) = 3 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6256] <... ioctl resumed>) = 0 [pid 6255] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6256] close(3) = 0 [pid 6256] close(4) = 0 [pid 6256] mkdir("./file0", 0777) = 0 [pid 6256] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 291.772372][ T6256] loop5: detected capacity change from 0 to 32768 [ 291.807029][ T6255] [ 291.807029][ T6255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.807029][ T6255] [pid 6257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6255] <... mount resumed>) = 0 [pid 6255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6255] chdir("./file0") = 0 [pid 6255] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 291.846069][ T6256] [ 291.846069][ T6256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.846069][ T6256] [ 291.876262][ T6255] [ 291.876262][ T6255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.876262][ T6255] [ 291.891360][ T6255] [pid 6255] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6256] <... mount resumed>) = 0 [pid 6255] <... lsetxattr resumed>) = 0 [pid 6256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6256] chdir("./file0" [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6256] <... chdir resumed>) = 0 [pid 6255] exit_group(0 [pid 6256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6255] <... exit_group resumed>) = ? [pid 6256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6256] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6255] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5850] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 291.891360][ T6255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.891360][ T6255] [ 291.908328][ T112] [ 291.908328][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.908328][ T112] [ 291.921840][ T6256] [ 291.921840][ T6256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.921840][ T6256] [ 291.943190][ T6256] [pid 5850] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 6256] <... lsetxattr resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6256] exit_group(0 [pid 5850] unlink("./65/binderfs" [pid 6256] <... exit_group resumed>) = ? [pid 5850] <... unlink resumed>) = 0 [pid 6256] +++ exited with 0 +++ [pid 5850] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./65/binderfs") = 0 [ 291.943190][ T6256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.943190][ T6256] [ 291.970395][ T113] [ 291.970395][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.970395][ T113] [ 291.981676][ T5850] [ 291.981676][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.981676][ T5850] [pid 5852] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(AT_FDCWD, "./65/file0", [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] newfstatat(AT_FDCWD, "./65/file0", [ 292.014897][ T5850] [ 292.014897][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.014897][ T5850] [ 292.027614][ T5852] [ 292.027614][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.027614][ T5852] [ 292.050164][ T5852] [ 292.050164][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.050164][ T5852] [pid 5852] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... openat resumed>) = 4 [pid 5850] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] newfstatat(4, "", [pid 5850] <... openat resumed>) = 4 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] newfstatat(4, "", [pid 5852] getdents64(4, [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5852] getdents64(4, [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] getdents64(4, [pid 5852] close(4 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] <... close resumed>) = 0 [pid 5850] close(4 [pid 5852] rmdir("./65/file0" [pid 5850] <... close resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5850] rmdir("./65/file0" [pid 5852] getdents64(3, [pid 5850] <... rmdir resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] getdents64(3, [pid 5852] close(3) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] rmdir("./65" [pid 5850] close(3 [pid 5852] <... rmdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5852] mkdir("./66", 0777 [pid 5850] rmdir("./65" [pid 5852] <... mkdir resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] mkdir("./66", 0777 [pid 5852] <... openat resumed>) = 3 [pid 5850] <... mkdir resumed>) = 0 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6257] <... write resumed>) = 16777216 [pid 6257] munmap(0x7feda9000000, 138412032) = 0 [pid 6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6257] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6257] close(3) = 0 [pid 6257] close(4) = 0 [pid 6257] mkdir("./file0", 0777 [pid 6258] <... write resumed>) = 16777216 [pid 6257] <... mkdir resumed>) = 0 [pid 6257] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6258] munmap(0x7feda9000000, 138412032) = 0 [ 292.381471][ T6257] loop0: detected capacity change from 0 to 32768 [ 292.408499][ T6257] [ 292.408499][ T6257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.408499][ T6257] [pid 6257] <... mount resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6257] chdir("./file0" [pid 6258] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6257] <... chdir resumed>) = 0 [pid 6258] <... openat resumed>) = 4 [pid 6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6258] ioctl(4, LOOP_SET_FD, 3 [pid 6257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6257] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 6261 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6261 [pid 6261] set_robust_list(0x555584a2d760, 24) = 0 [pid 6261] chdir("./66") = 0 [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6261] setpgid(0, 0) = 0 [pid 5850] <... close resumed>) = 0 [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6261] write(3, "1000", 4) = 4 [pid 6261] close(3) = 0 [pid 6261] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6262 attached executing program ) = 0 [pid 6258] <... ioctl resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6262 [pid 6262] set_robust_list(0x555584a2d760, 24 [pid 6261] write(1, "executing program\n", 18 [pid 6262] <... set_robust_list resumed>) = 0 [pid 6261] <... write resumed>) = 18 [pid 6262] chdir("./66" [pid 6261] memfd_create("syzkaller", 0 [pid 6262] <... chdir resumed>) = 0 [pid 6261] <... memfd_create resumed>) = 3 [pid 6262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6262] <... prctl resumed>) = 0 [pid 6262] setpgid(0, 0) = 0 [pid 6258] close(3 [pid 6262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6258] <... close resumed>) = 0 [ 292.475086][ T6257] [ 292.475086][ T6257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.475086][ T6257] [ 292.487076][ T6258] loop1: detected capacity change from 0 to 32768 [ 292.510328][ T6257] [ 292.510328][ T6257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.510328][ T6257] executing program [pid 6262] <... openat resumed>) = 3 [pid 6258] close(4) = 0 [pid 6262] write(3, "1000", 4 [pid 6258] mkdir("./file0", 0777 [pid 6262] <... write resumed>) = 4 [pid 6262] close(3) = 0 [pid 6262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6258] <... mkdir resumed>) = 0 [pid 6262] write(1, "executing program\n", 18 [pid 6258] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6262] <... write resumed>) = 18 [pid 6262] memfd_create("syzkaller", 0) = 3 [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6257] <... lsetxattr resumed>) = 0 [pid 6257] exit_group(0) = ? [pid 6258] <... mount resumed>) = 0 [pid 6257] +++ exited with 0 +++ [pid 6258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6258] <... openat resumed>) = 3 [pid 6258] chdir("./file0" [pid 5847] <... restart_syscall resumed>) = 0 [pid 6258] <... chdir resumed>) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 292.544088][ T6258] [ 292.544088][ T6258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.544088][ T6258] [ 292.561115][ T113] [ 292.561115][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.561115][ T113] [pid 5847] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6258] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./66/binderfs") = 0 [pid 5847] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] <... write resumed>) = 16777216 [pid 6258] <... lsetxattr resumed>) = 0 [pid 6259] munmap(0x7feda9000000, 138412032 [pid 6258] exit_group(0) = ? [pid 6258] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6258, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6259] <... munmap resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] getdents64(3, [pid 6259] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 292.597343][ T6258] [ 292.597343][ T6258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.597343][ T6258] [ 292.609168][ T6258] [ 292.609168][ T6258] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.609168][ T6258] [ 292.609536][ T5847] [ 292.609536][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.609536][ T5847] [ 292.630615][ T112] [ 292.630615][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.630615][ T112] [pid 6259] ioctl(4, LOOP_SET_FD, 3 [pid 5848] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6259] <... ioctl resumed>) = 0 [pid 5848] unlink("./66/binderfs" [pid 6259] close(3 [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6259] <... close resumed>) = 0 [ 292.676265][ T6259] loop4: detected capacity change from 0 to 32768 [ 292.676774][ T5847] [ 292.676774][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.676774][ T5847] [ 292.701431][ T5848] [ 292.701431][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.701431][ T5848] [ 292.723982][ T5848] [pid 6260] <... write resumed>) = 16777216 [pid 6259] close(4) = 0 [pid 6259] mkdir("./file0", 0777) = 0 [pid 6259] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6260] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 292.723982][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.723982][ T5848] [ 292.765000][ T6259] [ 292.765000][ T6259] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.765000][ T6259] [pid 5847] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6260] <... munmap resumed>) = 0 [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", [pid 6260] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6260] <... openat resumed>) = 4 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 5848] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, [pid 5848] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] close(4 [pid 5848] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] <... close resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 5847] rmdir("./66/file0" [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... rmdir resumed>) = 0 [pid 5848] getdents64(4, [pid 5847] getdents64(3, [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(4 [pid 5847] close(3 [pid 5848] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5848] rmdir("./66/file0" [pid 5847] rmdir("./66" [pid 6259] <... mount resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 5847] mkdir("./67", 0777 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./66" [pid 6259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5848] mkdir("./67", 0777 [pid 6259] <... openat resumed>) = 3 [pid 5848] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6259] chdir("./file0" [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6259] <... chdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... openat resumed>) = 3 [pid 6259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 6259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 292.786699][ T6260] loop2: detected capacity change from 0 to 32768 [pid 5848] close(3 [pid 6259] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6260] <... ioctl resumed>) = 0 [pid 6260] close(3) = 0 [pid 6260] close(4) = 0 [pid 6260] mkdir("./file0", 0777) = 0 [pid 6260] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [ 292.841009][ T6259] [ 292.841009][ T6259] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.841009][ T6259] [ 292.880694][ T6260] [ 292.880694][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.880694][ T6260] [pid 6262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6260] <... mount resumed>) = 0 [pid 6260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6260] chdir("./file0") = 0 [pid 6260] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 292.905403][ T6259] [ 292.905403][ T6259] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.905403][ T6259] [ 292.931677][ T6260] [ 292.931677][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.931677][ T6260] [pid 6260] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6259] <... lsetxattr resumed>) = 0 [pid 6259] exit_group(0) = ? [pid 6259] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=30 /* 0.30 s */} --- [pid 5851] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 292.953806][ T113] [ 292.953806][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.953806][ T113] [ 292.978597][ T6260] [ 292.978597][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.978597][ T6260] [pid 5851] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6260] <... lsetxattr resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 6260] exit_group(0) = ? [pid 6260] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(AT_FDCWD, "./66/binderfs", [pid 5849] newfstatat(3, "", [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] unlink("./66/binderfs" [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... unlink resumed>) = 0 [pid 5849] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./65/binderfs") = 0 [ 293.030367][ T112] [ 293.030367][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.030367][ T112] [ 293.060786][ T5851] [ 293.060786][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.060786][ T5851] [ 293.071050][ T5849] [ 293.071050][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5849] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [ 293.071050][ T5849] [ 293.090524][ T5851] [ 293.090524][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.090524][ T5851] [ 293.093669][ T5849] [ 293.093669][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.093669][ T5849] [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6263 attached [pid 5851] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6263] set_robust_list(0x555584a2d760, 24 [pid 5849] newfstatat(AT_FDCWD, "./65/file0", [pid 6263] <... set_robust_list resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6263] chdir("./67" [pid 5849] umount2("./65/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6263] <... chdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./65/file0") = 0 [pid 6263] <... prctl resumed>) = 0 [pid 5849] getdents64(3, [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6263 [pid 6263] setpgid(0, 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6263] <... setpgid resumed>) = 0 [pid 5849] close(3 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... close resumed>) = 0 [pid 6263] <... openat resumed>) = 3 [pid 5851] newfstatat(AT_FDCWD, "./66/file0", [pid 5849] rmdir("./65" [pid 5847] <... close resumed>) = 0 [pid 6263] write(3, "1000", 4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6263] <... write resumed>) = 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] mkdir("./66", 0777 [pid 6263] close(3 [pid 5851] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... mkdir resumed>) = 0 [pid 6263] <... close resumed>) = 0 ./strace-static-x86_64: Process 6264 attached [pid 6263] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... openat resumed>) = 4 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6264 [pid 6264] set_robust_list(0x555584a2d760, 24 [pid 6263] <... symlink resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 6264] <... set_robust_list resumed>) = 0 [pid 6263] write(1, "executing program\n", 18 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... openat resumed>) = 3 executing program [pid 6264] chdir("./67" [pid 6263] <... write resumed>) = 18 [pid 5851] getdents64(4, [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6264] <... chdir resumed>) = 0 [pid 6263] memfd_create("syzkaller", 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... ioctl resumed>) = 0 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6263] <... memfd_create resumed>) = 3 [pid 5851] getdents64(4, [pid 5849] close(3 [pid 6264] <... prctl resumed>) = 0 [pid 6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6264] setpgid(0, 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6264] <... setpgid resumed>) = 0 [pid 5851] close(4 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./66/file0" [pid 6264] <... openat resumed>) = 3 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, [pid 6264] write(3, "1000", 4 [pid 6263] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6264] <... write resumed>) = 4 [pid 6261] <... write resumed>) = 16777216 [pid 5851] close(3 [pid 6264] close(3) = 0 [pid 6261] munmap(0x7feda9000000, 138412032 [pid 5851] <... close resumed>) = 0 [pid 6264] symlink("/dev/binderfs", "./binderfs" [pid 5851] rmdir("./66" [pid 6264] <... symlink resumed>) = 0 [pid 6264] write(1, "executing program\n", 18executing program ) = 18 [pid 6264] memfd_create("syzkaller", 0 [pid 5851] <... rmdir resumed>) = 0 [pid 6264] <... memfd_create resumed>) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] mkdir("./67", 0777) = 0 [pid 6264] <... mmap resumed>) = 0x7feda9000000 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6261] <... munmap resumed>) = 0 [pid 6261] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6261] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6261] close(3) = 0 [pid 6261] close(4) = 0 [pid 6261] mkdir("./file0", 0777) = 0 [ 293.301058][ T6261] loop5: detected capacity change from 0 to 32768 [pid 6261] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6262] <... write resumed>) = 16777216 [pid 6261] <... mount resumed>) = 0 [pid 6261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6261] chdir("./file0") = 0 [pid 6261] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 293.399882][ T6261] [ 293.399882][ T6261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.399882][ T6261] [pid 6261] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 293.450997][ T6261] [ 293.450997][ T6261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.450997][ T6261] [ 293.470195][ T6261] [ 293.470195][ T6261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.470195][ T6261] [ 293.498040][ T113] [pid 6262] munmap(0x7feda9000000, 138412032 [pid 6263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6262] <... munmap resumed>) = 0 [pid 6261] <... lsetxattr resumed>) = 0 [pid 6261] exit_group(0) = ? [pid 6261] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./66/binderfs") = 0 [pid 5852] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6262] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 293.498040][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.498040][ T113] [ 293.540501][ T5852] [ 293.540501][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.540501][ T5852] [pid 6262] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... close resumed>) = 0 [pid 6262] close(3 [pid 5851] <... close resumed>) = 0 [pid 6262] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6262] close(4 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6262] <... close resumed>) = 0 [pid 6262] mkdir("./file0", 0777 [pid 5852] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6262] <... mkdir resumed>) = 0 [pid 6262] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"./strace-static-x86_64: Process 6265 attached [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 293.553308][ T6262] loop3: detected capacity change from 0 to 32768 [ 293.564669][ T5852] [ 293.564669][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.564669][ T5852] [pid 5852] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6265] set_robust_list(0x555584a2d760, 24./strace-static-x86_64: Process 6266 attached ) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6266 [pid 6266] set_robust_list(0x555584a2d760, 24) = 0 [pid 6265] chdir("./66" [pid 5852] newfstatat(4, "", [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6265 [pid 6266] chdir("./67" [pid 6265] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6266] <... chdir resumed>) = 0 [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] getdents64(4, [pid 6265] <... prctl resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6265] setpgid(0, 0 [pid 5852] getdents64(4, [pid 6265] <... setpgid resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... close resumed>) = 0 [pid 6265] <... openat resumed>) = 3 [pid 5852] rmdir("./66/file0" [pid 6266] <... prctl resumed>) = 0 [pid 6265] write(3, "1000", 4 [pid 5852] <... rmdir resumed>) = 0 [pid 6266] setpgid(0, 0 [pid 6265] <... write resumed>) = 4 [pid 5852] getdents64(3, [pid 6266] <... setpgid resumed>) = 0 [pid 6265] close(3 [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6265] <... close resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6266] <... openat resumed>) = 3 [pid 6265] symlink("/dev/binderfs", "./binderfs" [pid 6266] write(3, "1000", 4executing program [pid 6265] <... symlink resumed>) = 0 [pid 6266] <... write resumed>) = 4 [pid 6265] write(1, "executing program\n", 18 [pid 6266] close(3) = 0 [pid 6265] <... write resumed>) = 18 executing program [pid 6266] symlink("/dev/binderfs", "./binderfs" [pid 5852] close(3 [pid 6265] memfd_create("syzkaller", 0 [pid 5852] <... close resumed>) = 0 [pid 6266] <... symlink resumed>) = 0 [pid 5852] rmdir("./66" [pid 6266] write(1, "executing program\n", 18 [pid 6265] <... memfd_create resumed>) = 3 [pid 6266] <... write resumed>) = 18 [pid 6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./67", 0777) = 0 [pid 6265] <... mmap resumed>) = 0x7feda9000000 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6266] memfd_create("syzkaller", 0 [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6266] <... memfd_create resumed>) = 3 [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 293.628092][ T6262] [ 293.628092][ T6262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.628092][ T6262] [pid 6262] <... mount resumed>) = 0 [pid 6262] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6262] chdir("./file0") = 0 [pid 6262] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6262] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [ 293.730636][ T6262] [ 293.730636][ T6262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.730636][ T6262] [ 293.770188][ T6262] [ 293.770188][ T6262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.770188][ T6262] [pid 6262] exit_group(0) = ? [pid 6262] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6262, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 293.803015][ T112] [ 293.803015][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.803015][ T112] [pid 5850] unlink("./66/binderfs") = 0 [pid 5850] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6263] <... write resumed>) = 16777216 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6267 attached [pid 5850] <... umount2 resumed>) = 0 [ 293.883100][ T5850] [ 293.883100][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.883100][ T5850] [ 293.910635][ T5850] [ 293.910635][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.910635][ T5850] [pid 6266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6267] set_robust_list(0x555584a2d760, 24 [pid 6265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6263] munmap(0x7feda9000000, 138412032 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6267 [pid 5850] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6267] <... set_robust_list resumed>) = 0 [pid 6267] chdir("./67") = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6263] <... munmap resumed>) = 0 [pid 5850] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6267] <... prctl resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6267] setpgid(0, 0 [pid 5850] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6267] <... setpgid resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6267] <... openat resumed>) = 3 [pid 6267] write(3, "1000", 4 [pid 5850] <... close resumed>) = 0 [pid 6267] <... write resumed>) = 4 [pid 6267] close(3 [pid 5850] rmdir("./66/file0" [pid 6267] <... close resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6267] symlink("/dev/binderfs", "./binderfs" [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6267] <... symlink resumed>) = 0 [pid 5850] close(3) = 0 [pid 6263] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] rmdir("./66" [pid 6263] <... openat resumed>) = 4 [pid 5850] <... rmdir resumed>) = 0 [pid 6263] ioctl(4, LOOP_SET_FD, 3 [pid 5850] mkdir("./67", 0777executing program [pid 6267] write(1, "executing program\n", 18 [pid 5850] <... mkdir resumed>) = 0 [pid 6267] <... write resumed>) = 18 [pid 6267] memfd_create("syzkaller", 0) = 3 [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6264] <... write resumed>) = 16777216 [pid 6263] <... ioctl resumed>) = 0 [pid 6264] munmap(0x7feda9000000, 138412032 [pid 6263] close(3 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6263] <... close resumed>) = 0 [pid 6263] close(4 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 6263] <... close resumed>) = 0 [pid 6263] mkdir("./file0", 0777) = 0 [ 294.015760][ T6263] loop1: detected capacity change from 0 to 32768 [pid 6263] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6264] <... munmap resumed>) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6263] <... mount resumed>) = 0 [pid 6264] close(3 [pid 6263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6264] <... close resumed>) = 0 [pid 6263] <... openat resumed>) = 3 [pid 6264] close(4 [pid 6263] chdir("./file0" [pid 6264] <... close resumed>) = 0 [pid 6263] <... chdir resumed>) = 0 [pid 6264] mkdir("./file0", 0777 [pid 6263] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6264] <... mkdir resumed>) = 0 [pid 6263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6264] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 294.091663][ T6263] [ 294.091663][ T6263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.091663][ T6263] [ 294.111263][ T6264] loop0: detected capacity change from 0 to 32768 [ 294.166431][ T6263] [ 294.166431][ T6263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.166431][ T6263] [ 294.192661][ T6264] [ 294.192661][ T6264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.192661][ T6264] [ 294.211228][ T6263] [pid 6263] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6264] <... mount resumed>) = 0 [pid 6264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./file0") = 0 [ 294.211228][ T6263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.211228][ T6263] [pid 6264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6264] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6263] <... lsetxattr resumed>) = 0 [pid 6263] exit_group(0) = ? [pid 6263] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./67/binderfs") = 0 [pid 5848] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6264] <... lsetxattr resumed>) = 0 [ 294.256763][ T6264] [ 294.256763][ T6264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.256763][ T6264] [ 294.275723][ T112] [ 294.275723][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.275723][ T112] [ 294.290119][ T6264] [ 294.290119][ T6264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.290119][ T6264] [pid 6264] exit_group(0) = ? [pid 6264] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5847] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./67/binderfs") = 0 [pid 5847] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... close resumed>) = 0 [ 294.315872][ T112] [ 294.315872][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.315872][ T112] [ 294.330334][ T5848] [ 294.330334][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.330334][ T5848] [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6268 attached [pid 6265] <... write resumed>) = 16777216 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6268 [pid 6268] set_robust_list(0x555584a2d760, 24) = 0 [pid 6268] chdir("./67") = 0 [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6268] setpgid(0, 0) = 0 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6268] write(3, "1000", 4) = 4 [pid 6268] close(3) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6268] write(1, "executing program\n", 18executing program [pid 6265] munmap(0x7feda9000000, 138412032 [pid 6268] <... write resumed>) = 18 [pid 5847] <... umount2 resumed>) = 0 [pid 6268] memfd_create("syzkaller", 0 [pid 5847] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6268] <... memfd_create resumed>) = 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6268] <... mmap resumed>) = 0x7feda9000000 [pid 5847] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 294.362733][ T5847] [ 294.362733][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.362733][ T5847] [ 294.373939][ T5848] [ 294.373939][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.373939][ T5848] [ 294.380276][ T5847] [ 294.380276][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.380276][ T5847] [pid 5848] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./67/file0" [pid 5847] <... openat resumed>) = 4 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] newfstatat(4, "", [pid 5848] getdents64(3, [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] getdents64(4, [pid 5848] close(3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6265] <... munmap resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] close(4 [pid 6266] <... write resumed>) = 16777216 [pid 5848] rmdir("./67" [pid 6266] munmap(0x7feda9000000, 138412032 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5848] mkdir("./68", 0777 [pid 5847] rmdir("./67/file0" [pid 6265] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6265] <... openat resumed>) = 4 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] getdents64(3, [pid 6265] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] close(3 [pid 5848] <... ioctl resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5848] close(3 [pid 5847] rmdir("./67" [pid 6265] <... ioctl resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6265] close(3) = 0 [pid 6265] close(4) = 0 [pid 6265] mkdir("./file0", 0777) = 0 [pid 6266] <... munmap resumed>) = 0 [pid 5847] mkdir("./68", 0777 [pid 6266] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... mkdir resumed>) = 0 [pid 6265] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6266] <... openat resumed>) = 4 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6266] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... openat resumed>) = 3 [ 294.475675][ T6265] loop2: detected capacity change from 0 to 32768 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6266] <... ioctl resumed>) = 0 [pid 6266] close(3) = 0 [pid 6266] close(4) = 0 [pid 6266] mkdir("./file0", 0777) = 0 [ 294.524709][ T6266] loop4: detected capacity change from 0 to 32768 [ 294.561667][ T6265] [ 294.561667][ T6265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.561667][ T6265] [pid 6266] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6265] <... mount resumed>) = 0 [pid 6265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6265] chdir("./file0") = 0 [pid 6265] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6265] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6266] <... mount resumed>) = 0 [pid 6266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6266] chdir("./file0") = 0 [ 294.611201][ T6266] [ 294.611201][ T6266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.611201][ T6266] [ 294.627803][ T6265] [ 294.627803][ T6265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.627803][ T6265] [pid 6266] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6266] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6265] <... lsetxattr resumed>) = 0 [pid 6265] exit_group(0) = ? [ 294.681144][ T6265] [ 294.681144][ T6265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.681144][ T6265] [ 294.696408][ T6266] [ 294.696408][ T6266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.696408][ T6266] [ 294.711005][ T113] [ 294.711005][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.711005][ T113] [pid 6265] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5849] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./66/binderfs") = 0 [pid 5849] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 294.740051][ T6266] [ 294.740051][ T6266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.740051][ T6266] [pid 6268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6266] <... lsetxattr resumed>) = 0 [pid 6266] exit_group(0 [pid 5848] <... close resumed>) = 0 [pid 6266] <... exit_group resumed>) = ? [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6269 attached [pid 6266] +++ exited with 0 +++ [pid 6269] set_robust_list(0x555584a2d760, 24 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6266, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6269 [pid 6269] <... set_robust_list resumed>) = 0 [pid 6269] chdir("./68") = 0 [pid 6269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6269] setpgid(0, 0) = 0 [pid 6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6269] write(3, "1000", 4) = 4 [pid 6269] close(3) = 0 [pid 6269] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6269] write(1, "executing program\n", 18) = 18 [pid 6269] memfd_create("syzkaller", 0) = 3 [pid 6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./67/binderfs") = 0 [ 294.780794][ T112] [ 294.780794][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.780794][ T112] [ 294.780859][ T5849] [ 294.780859][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.780859][ T5849] [ 294.815526][ T5849] [ 294.815526][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.815526][ T5849] [pid 5851] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6270 attached [pid 5849] <... umount2 resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6270 [pid 6270] set_robust_list(0x555584a2d760, 24 [pid 5849] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6270] <... set_robust_list resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./66/file0", [pid 6270] chdir("./68" [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./66/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 6270] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(4, [pid 6270] <... prctl resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6270] setpgid(0, 0 [pid 6267] <... write resumed>) = 16777216 [pid 6270] <... setpgid resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] newfstatat(AT_FDCWD, "./67/file0", [pid 5849] close(4 [pid 6270] <... openat resumed>) = 3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... close resumed>) = 0 [pid 6270] write(3, "1000", 4) = 4 [pid 5851] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] rmdir("./66/file0" [pid 6270] close(3 [pid 6267] munmap(0x7feda9000000, 138412032 [pid 6270] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... rmdir resumed>) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs" [pid 5851] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(3, [pid 6270] <... symlink resumed>) = 0 executing program [pid 6270] write(1, "executing program\n", 18 [pid 5851] <... openat resumed>) = 4 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6270] <... write resumed>) = 18 [pid 5851] newfstatat(4, "", [pid 5849] close(3 [pid 6270] memfd_create("syzkaller", 0) = 3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... close resumed>) = 0 [ 294.860326][ T5851] [ 294.860326][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.860326][ T5851] [ 294.882130][ T5851] [ 294.882130][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.882130][ T5851] [pid 5851] getdents64(4, [pid 5849] rmdir("./66" [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... rmdir resumed>) = 0 [pid 5851] getdents64(4, [pid 5849] mkdir("./67", 0777 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5851] close(4 [pid 6270] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./67/file0" [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5851] getdents64(3, [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 5849] close(3 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./67") = 0 [pid 6267] <... munmap resumed>) = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] mkdir("./68", 0777 [pid 6267] <... openat resumed>) = 4 [pid 5851] <... mkdir resumed>) = 0 [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6267] <... ioctl resumed>) = 0 [pid 6267] close(3) = 0 [pid 6267] close(4) = 0 [ 294.997138][ T6267] loop5: detected capacity change from 0 to 32768 [pid 6267] mkdir("./file0", 0777) = 0 [ 295.067222][ T6267] [ 295.067222][ T6267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.067222][ T6267] [pid 6267] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6267] chdir("./file0") = 0 [pid 6267] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6267] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6267] <... lsetxattr resumed>) = 0 [ 295.154101][ T6267] [ 295.154101][ T6267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.154101][ T6267] [ 295.186038][ T6267] [ 295.186038][ T6267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.186038][ T6267] [pid 6267] exit_group(0 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6268] <... write resumed>) = 16777216 [pid 6267] <... exit_group resumed>) = ? [pid 6267] +++ exited with 0 +++ [pid 6268] munmap(0x7feda9000000, 138412032 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./67/binderfs") = 0 [ 295.223359][ T113] [ 295.223359][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.223359][ T113] [pid 5852] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6268] <... munmap resumed>) = 0 [pid 6268] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] <... close resumed>) = 0 [pid 6268] <... openat resumed>) = 4 [pid 5851] <... close resumed>) = 0 [ 295.277439][ T5852] [ 295.277439][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.277439][ T5852] [ 295.307764][ T5852] [ 295.307764][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.307764][ T5852] [pid 6268] ioctl(4, LOOP_SET_FD, 3 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6271 ./strace-static-x86_64: Process 6271 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6272 [pid 6271] set_robust_list(0x555584a2d760, 24) = 0 [pid 6271] chdir("./67") = 0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6271] setpgid(0, 0) = 0 [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6271] write(3, "1000", 4) = 4 [pid 6271] close(3) = 0 ./strace-static-x86_64: Process 6272 attached [pid 6271] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6268] <... ioctl resumed>) = 0 [pid 6271] write(1, "executing program\n", 18) = 18 [pid 6271] memfd_create("syzkaller", 0) = 3 [pid 6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6272] set_robust_list(0x555584a2d760, 24 [pid 6268] close(3 [pid 6272] <... set_robust_list resumed>) = 0 [pid 6268] <... close resumed>) = 0 [pid 6272] chdir("./68" [pid 6268] close(4 [pid 6272] <... chdir resumed>) = 0 [pid 6268] <... close resumed>) = 0 [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6268] mkdir("./file0", 0777 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6268] <... mkdir resumed>) = 0 [pid 5852] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6272] <... prctl resumed>) = 0 [pid 6268] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] setpgid(0, 0 [pid 5852] <... openat resumed>) = 4 [pid 6272] <... setpgid resumed>) = 0 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6272] write(3, "1000", 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./67/file0") = 0 [ 295.330034][ T6268] loop3: detected capacity change from 0 to 32768 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./67") = 0 [pid 5852] mkdir("./68", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6272] <... write resumed>) = 4 [pid 6272] close(3) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6272] write(1, "executing program\n", 18 [pid 6268] <... mount resumed>) = 0 [pid 6272] <... write resumed>) = 18 [pid 6268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 295.376944][ T6268] [ 295.376944][ T6268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.376944][ T6268] [pid 6272] memfd_create("syzkaller", 0 [pid 6268] chdir("./file0") = 0 [pid 6268] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6272] <... memfd_create resumed>) = 3 [pid 6268] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 295.452761][ T6268] [ 295.452761][ T6268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.452761][ T6268] [ 295.489988][ T6268] [ 295.489988][ T6268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.489988][ T6268] [pid 6268] <... lsetxattr resumed>) = 0 [pid 6268] exit_group(0) = ? [pid 6268] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6268, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5850] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 295.530696][ T112] [ 295.530696][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.530696][ T112] [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./67/binderfs") = 0 [pid 5850] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... close resumed>) = 0 [pid 6269] <... write resumed>) = 16777216 [pid 6269] munmap(0x7feda9000000, 138412032 [pid 6270] <... write resumed>) = 16777216 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6273 attached [pid 6270] munmap(0x7feda9000000, 138412032 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6273 [pid 5850] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6273] set_robust_list(0x555584a2d760, 24 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6273] <... set_robust_list resumed>) = 0 [ 295.620322][ T5850] [ 295.620322][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.620322][ T5850] [ 295.642854][ T5850] [ 295.642854][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.642854][ T5850] [pid 5850] newfstatat(AT_FDCWD, "./67/file0", [pid 6273] chdir("./68" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./67/file0" [pid 6273] <... chdir resumed>) = 0 [pid 6270] <... munmap resumed>) = 0 [pid 6269] <... munmap resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] getdents64(3, [pid 6273] <... prctl resumed>) = 0 [pid 6270] <... openat resumed>) = 4 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6273] setpgid(0, 0 [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 5850] close(3 [pid 6273] <... setpgid resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./67") = 0 [pid 5850] mkdir("./68", 0777 [pid 6269] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] <... mkdir resumed>) = 0 [pid 6269] <... openat resumed>) = 4 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6269] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... openat resumed>) = 3 [pid 6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6270] <... ioctl resumed>) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6273] <... openat resumed>) = 3 [pid 6270] close(3) = 0 [pid 6270] close(4) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(3 [pid 6273] write(3, "1000", 4 [pid 6270] mkdir("./file0", 0777 [pid 6273] <... write resumed>) = 4 [pid 6273] close(3 [pid 6270] <... mkdir resumed>) = 0 [pid 6273] <... close resumed>) = 0 [pid 6270] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6273] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6273] write(1, "executing program\n", 18) = 18 [pid 6273] memfd_create("syzkaller", 0) = 3 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6269] <... ioctl resumed>) = 0 [pid 6269] close(3) = 0 [pid 6269] close(4) = 0 [pid 6269] mkdir("./file0", 0777) = 0 [ 295.726443][ T6270] loop0: detected capacity change from 0 to 32768 [ 295.731670][ T6269] loop1: detected capacity change from 0 to 32768 [pid 6269] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6270] <... mount resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6270] chdir("./file0") = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 295.786556][ T6270] [ 295.786556][ T6270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.786556][ T6270] [ 295.822962][ T6269] [ 295.822962][ T6269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.822962][ T6269] [pid 6270] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6269] <... mount resumed>) = 0 [pid 6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6269] chdir("./file0") = 0 [pid 6269] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 295.847366][ T6270] [ 295.847366][ T6270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.847366][ T6270] [ 295.873194][ T6269] [ 295.873194][ T6269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.873194][ T6269] [pid 6269] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6269] exit_group(0) = ? [pid 6269] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6270] <... lsetxattr resumed>) = 0 [pid 5848] unlink("./68/binderfs") = 0 [ 295.902457][ T6269] [ 295.902457][ T6269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.902457][ T6269] [ 295.909988][ T6270] [ 295.909988][ T6270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.909988][ T6270] [ 295.929068][ T113] [ 295.929068][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.929068][ T113] [pid 5848] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6270] exit_group(0) = ? [pid 6270] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 295.971652][ T112] [ 295.971652][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.971652][ T112] [ 295.982509][ T5848] [ 295.982509][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.982509][ T5848] [pid 5847] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./68/binderfs") = 0 [ 296.013560][ T5848] [ 296.013560][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.013560][ T5848] [ 296.040276][ T5847] [ 296.040276][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.040276][ T5847] [pid 5847] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./68/file0" [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6274 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./68"./strace-static-x86_64: Process 6274 attached ) = 0 [pid 5848] mkdir("./69", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6274] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6274] chdir("./68" [pid 5847] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6274] <... chdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 296.062883][ T5847] [ 296.062883][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.062883][ T5847] [pid 6274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] newfstatat(AT_FDCWD, "./68/file0", [pid 6274] <... prctl resumed>) = 0 [pid 6274] setpgid(0, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6274] <... setpgid resumed>) = 0 [pid 5847] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6274] <... openat resumed>) = 3 [pid 5847] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6274] write(3, "1000", 4 [pid 5847] newfstatat(4, "", [pid 6274] <... write resumed>) = 4 [pid 6274] close(3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6274] <... close resumed>) = 0 [pid 5847] getdents64(4, [pid 6274] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6274] <... symlink resumed>) = 0 executing program [pid 5847] getdents64(4, [pid 6274] write(1, "executing program\n", 18 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6274] <... write resumed>) = 18 [pid 5847] close(4) = 0 [pid 6274] memfd_create("syzkaller", 0 [pid 5847] rmdir("./68/file0" [pid 6274] <... memfd_create resumed>) = 3 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, [pid 6274] <... mmap resumed>) = 0x7feda9000000 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3 [pid 6271] <... write resumed>) = 16777216 [pid 5847] <... close resumed>) = 0 [pid 6271] munmap(0x7feda9000000, 138412032 [pid 5847] rmdir("./68") = 0 [pid 5847] mkdir("./69", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6271] <... munmap resumed>) = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6271] ioctl(4, LOOP_SET_FD, 3 [pid 6272] <... write resumed>) = 16777216 [pid 6271] <... ioctl resumed>) = 0 [pid 6271] close(3) = 0 [pid 6271] close(4) = 0 [pid 6271] mkdir("./file0", 0777) = 0 [pid 6272] munmap(0x7feda9000000, 138412032 [ 296.249521][ T6271] loop2: detected capacity change from 0 to 32768 [pid 6271] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6272] <... munmap resumed>) = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6271] <... mount resumed>) = 0 [pid 6271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 296.306431][ T6271] [ 296.306431][ T6271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.306431][ T6271] [pid 6271] chdir("./file0") = 0 [pid 6271] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6271] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6272] close(3 [pid 5848] <... close resumed>) = 0 [pid 6272] <... close resumed>) = 0 [pid 6272] close(4) = 0 [pid 6272] mkdir("./file0", 0777 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6272] <... mkdir resumed>) = 0 [pid 6272] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"./strace-static-x86_64: Process 6275 attached [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6275 [pid 6275] set_robust_list(0x555584a2d760, 24) = 0 [pid 6275] chdir("./69") = 0 [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6275] setpgid(0, 0) = 0 [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6275] write(3, "1000", 4) = 4 [pid 6275] close(3executing program ) = 0 [pid 6275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6275] write(1, "executing program\n", 18) = 18 [ 296.356715][ T6271] [ 296.356715][ T6271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.356715][ T6271] [ 296.369050][ T6272] loop4: detected capacity change from 0 to 32768 [ 296.391692][ T6271] [ 296.391692][ T6271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.391692][ T6271] [pid 6275] memfd_create("syzkaller", 0) = 3 [pid 6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6271] <... lsetxattr resumed>) = 0 [pid 6271] exit_group(0) = ? [pid 6274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6271] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./67/binderfs") = 0 [ 296.439229][ T6272] [ 296.439229][ T6272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.439229][ T6272] [ 296.451233][ T113] [ 296.451233][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.451233][ T113] [pid 5849] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6272] <... mount resumed>) = 0 [pid 6272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6272] chdir("./file0") = 0 [pid 6272] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6272] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... close resumed>) = 0 [ 296.491375][ T5849] [ 296.491375][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.491375][ T5849] [ 296.526806][ T6272] [ 296.526806][ T6272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.526806][ T6272] [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6276 ./strace-static-x86_64: Process 6276 attached [ 296.539674][ T5849] [ 296.539674][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.539674][ T5849] [ 296.561285][ T6272] [ 296.561285][ T6272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.561285][ T6272] [ 296.586483][ T112] [pid 6276] set_robust_list(0x555584a2d760, 24 [pid 5849] <... umount2 resumed>) = 0 [pid 6272] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6272] exit_group(0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6272] <... exit_group resumed>) = ? [pid 5849] newfstatat(AT_FDCWD, "./67/file0", [pid 6276] <... set_robust_list resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./67/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6276] chdir("./69" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... chdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... openat resumed>) = 4 [pid 6276] <... prctl resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 6276] setpgid(0, 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6276] <... setpgid resumed>) = 0 [pid 5849] getdents64(4, [pid 6276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6273] <... write resumed>) = 16777216 [pid 6272] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6276] <... openat resumed>) = 3 [pid 6276] write(3, "1000", 4 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6272, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 6276] <... write resumed>) = 4 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6276] close(3 [pid 5851] <... restart_syscall resumed>) = 0 [pid 6276] <... close resumed>) = 0 [pid 6273] munmap(0x7feda9000000, 138412032 [pid 5849] getdents64(4, executing program [pid 6276] symlink("/dev/binderfs", "./binderfs" [pid 5851] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5851] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6276] <... symlink resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./68/binderfs" [pid 6276] write(1, "executing program\n", 18 [pid 5851] <... unlink resumed>) = 0 [pid 6276] <... write resumed>) = 18 [pid 5851] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6276] memfd_create("syzkaller", 0) = 3 [ 296.586483][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.586483][ T112] [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] rmdir("./67/file0" [pid 6273] <... munmap resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./67") = 0 [pid 5849] mkdir("./68", 0777) = 0 [pid 6273] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6273] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6273] <... ioctl resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 6273] close(3 [pid 5849] close(3 [pid 6273] <... close resumed>) = 0 [pid 6273] close(4) = 0 [pid 6273] mkdir("./file0", 0777) = 0 [ 296.630569][ T5851] [ 296.630569][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.630569][ T5851] [ 296.654374][ T6273] loop5: detected capacity change from 0 to 32768 [ 296.666119][ T5851] [ 296.666119][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.666119][ T5851] [pid 6273] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./68/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./68") = 0 [pid 5851] mkdir("./69", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 6273] <... mount resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5851] close(3 [pid 6273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 296.760573][ T6273] [ 296.760573][ T6273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.760573][ T6273] [pid 6273] chdir("./file0") = 0 [pid 6273] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 296.841142][ T6273] [ 296.841142][ T6273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.841142][ T6273] [ 296.882851][ T6273] [ 296.882851][ T6273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.882851][ T6273] [pid 6273] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6273] exit_group(0) = ? [pid 6273] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./68/binderfs") = 0 [pid 5852] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6277 attached [pid 6274] <... write resumed>) = 16777216 [pid 6277] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6277 [pid 6277] <... set_robust_list resumed>) = 0 [ 296.930606][ T112] [ 296.930606][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.930606][ T112] [pid 6277] chdir("./68") = 0 [pid 6277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6277] setpgid(0, 0) = 0 [pid 6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6277] write(3, "1000", 4 [pid 6274] munmap(0x7feda9000000, 138412032 [pid 6277] <... write resumed>) = 4 [pid 6277] close(3) = 0 [pid 6277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6274] <... munmap resumed>) = 0 [pid 6277] write(1, "executing program\n", 18executing program ) = 18 [pid 6274] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6277] memfd_create("syzkaller", 0 [pid 6274] <... openat resumed>) = 4 [ 296.985545][ T5852] [ 296.985545][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 296.985545][ T5852] [ 297.021498][ T5852] [ 297.021498][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.021498][ T5852] [pid 6277] <... memfd_create resumed>) = 3 [pid 6274] ioctl(4, LOOP_SET_FD, 3 [pid 6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6274] <... ioctl resumed>) = 0 [pid 6277] <... mmap resumed>) = 0x7feda9000000 [pid 6274] close(3) = 0 [pid 6274] close(4) = 0 [pid 6274] mkdir("./file0", 0777) = 0 [ 297.033400][ T6274] loop3: detected capacity change from 0 to 32768 [pid 6274] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./68/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./68") = 0 [pid 5852] mkdir("./69", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6275] <... write resumed>) = 16777216 [pid 5851] <... close resumed>) = 0 [pid 6274] <... mount resumed>) = 0 [pid 6274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 297.099523][ T6274] [ 297.099523][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.099523][ T6274] [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6278 attached [pid 6275] munmap(0x7feda9000000, 138412032 [pid 6274] <... openat resumed>) = 3 [pid 6274] chdir("./file0" [pid 6278] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6278 [pid 6278] <... set_robust_list resumed>) = 0 [pid 6274] <... chdir resumed>) = 0 [pid 6278] chdir("./69" [pid 6274] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6278] <... chdir resumed>) = 0 [pid 6274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6274] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6278] <... prctl resumed>) = 0 [pid 6278] setpgid(0, 0 [pid 6275] <... munmap resumed>) = 0 [pid 6278] <... setpgid resumed>) = 0 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6278] write(3, "1000", 4) = 4 executing program [pid 6278] close(3) = 0 [pid 6278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6278] write(1, "executing program\n", 18) = 18 [pid 6278] memfd_create("syzkaller", 0 [pid 6275] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6278] <... memfd_create resumed>) = 3 [pid 6275] <... openat resumed>) = 4 [pid 6278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 297.188678][ T6274] [ 297.188678][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.188678][ T6274] [ 297.225027][ T6274] [ 297.225027][ T6274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.225027][ T6274] [pid 6275] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6274] <... lsetxattr resumed>) = 0 [pid 6275] close(3) = 0 [pid 6274] exit_group(0 [pid 6275] close(4) = 0 [pid 6274] <... exit_group resumed>) = ? [pid 6275] mkdir("./file0", 0777) = 0 [pid 6274] +++ exited with 0 +++ [pid 6275] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6274, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [ 297.250558][ T6275] loop1: detected capacity change from 0 to 32768 [ 297.288722][ T112] [ 297.288722][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.288722][ T112] [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./68/binderfs") = 0 [ 297.346241][ T5850] [ 297.346241][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.346241][ T5850] [ 297.376609][ T5850] [ 297.376609][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.376609][ T5850] [ 297.380095][ T6275] [ 297.380095][ T6275] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5850] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6279 attached [pid 6275] <... mount resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6279] set_robust_list(0x555584a2d760, 24 [ 297.380095][ T6275] [pid 6275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... openat resumed>) = 4 [pid 6279] <... set_robust_list resumed>) = 0 [pid 6275] <... openat resumed>) = 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6279 [pid 5850] newfstatat(4, "", [pid 6279] chdir("./69" [pid 6275] chdir("./file0") = 0 [pid 6279] <... chdir resumed>) = 0 [pid 6276] <... write resumed>) = 16777216 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6275] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6276] munmap(0x7feda9000000, 138412032 [pid 6275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] getdents64(4, [pid 6275] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6279] <... prctl resumed>) = 0 [pid 5850] getdents64(4, [pid 6279] setpgid(0, 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6279] <... setpgid resumed>) = 0 [pid 5850] close(4 [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... close resumed>) = 0 [pid 6279] <... openat resumed>) = 3 [pid 5850] rmdir("./68/file0" [pid 6279] write(3, "1000", 4 [pid 5850] <... rmdir resumed>) = 0 [pid 6279] <... write resumed>) = 4 [pid 5850] getdents64(3, [pid 6279] close(3 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6279] <... close resumed>) = 0 [pid 5850] close(3 [pid 6279] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... close resumed>) = 0 [pid 6279] <... symlink resumed>) = 0 executing program [pid 6279] write(1, "executing program\n", 18 [pid 5850] rmdir("./68" [pid 6279] <... write resumed>) = 18 [pid 5850] <... rmdir resumed>) = 0 [pid 6279] memfd_create("syzkaller", 0) = 3 [pid 5850] mkdir("./69", 0777 [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] <... mkdir resumed>) = 0 [pid 6279] <... mmap resumed>) = 0x7feda9000000 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6276] <... munmap resumed>) = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 297.471852][ T6275] [ 297.471852][ T6275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.471852][ T6275] [ 297.503829][ T6275] [ 297.503829][ T6275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.503829][ T6275] [pid 6276] ioctl(4, LOOP_SET_FD, 3 [pid 6275] <... lsetxattr resumed>) = 0 [pid 6276] <... ioctl resumed>) = 0 [pid 6275] exit_group(0) = ? [pid 6275] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6276] close(3) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 6276] close(4 [pid 5848] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6276] <... close resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", [pid 6276] mkdir("./file0", 0777 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6276] <... mkdir resumed>) = 0 [pid 5848] getdents64(3, [pid 6276] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 297.524500][ T6276] loop0: detected capacity change from 0 to 32768 [ 297.545807][ T113] [ 297.545807][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.545807][ T113] [pid 5848] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./69/binderfs") = 0 [pid 5848] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6276] <... mount resumed>) = 0 [pid 6276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 297.613339][ T6276] [ 297.613339][ T6276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.613339][ T6276] [ 297.633060][ T5848] [ 297.633060][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.633060][ T5848] [pid 6276] chdir("./file0") = 0 [pid 6276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 297.666992][ T5848] [ 297.666992][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.666992][ T5848] [ 297.682224][ T6276] [ 297.682224][ T6276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.682224][ T6276] [ 297.710487][ T6276] [pid 6276] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6276] <... lsetxattr resumed>) = 0 [ 297.710487][ T6276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.710487][ T6276] [pid 5848] getdents64(4, [pid 6276] exit_group(0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./69/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./69") = 0 [pid 5848] mkdir("./70", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6276] <... exit_group resumed>) = ? [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6277] <... write resumed>) = 16777216 [pid 6276] +++ exited with 0 +++ [pid 6277] munmap(0x7feda9000000, 138412032 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6276, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5847] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./69/binderfs") = 0 [ 297.749742][ T112] [ 297.749742][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.749742][ T112] [pid 5847] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6280 attached [pid 6280] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6280 [pid 6280] <... set_robust_list resumed>) = 0 [pid 6280] chdir("./69") = 0 [pid 6277] <... munmap resumed>) = 0 [pid 6280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6277] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6280] <... prctl resumed>) = 0 [pid 6280] setpgid(0, 0 [pid 6277] <... openat resumed>) = 4 [pid 6280] <... setpgid resumed>) = 0 [pid 6277] ioctl(4, LOOP_SET_FD, 3 [ 297.803935][ T5847] [ 297.803935][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.803935][ T5847] [ 297.842523][ T5847] [ 297.842523][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.842523][ T5847] [pid 6280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6280] write(3, "1000", 4) = 4 [pid 6280] close(3 [pid 6277] <... ioctl resumed>) = 0 [pid 6280] <... close resumed>) = 0 [pid 6277] close(3) = 0 [pid 6280] symlink("/dev/binderfs", "./binderfs" [pid 6277] close(4 [pid 6280] <... symlink resumed>) = 0 [pid 6277] <... close resumed>) = 0 executing program [pid 6280] write(1, "executing program\n", 18 [pid 6277] mkdir("./file0", 0777 [pid 6280] <... write resumed>) = 18 [pid 6280] memfd_create("syzkaller", 0 [pid 6277] <... mkdir resumed>) = 0 [pid 6280] <... memfd_create resumed>) = 3 [pid 6277] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 297.860921][ T6277] loop2: detected capacity change from 0 to 32768 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6277] <... mount resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./69/file0", [pid 6277] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6277] <... openat resumed>) = 3 [pid 5847] getdents64(4, [pid 6277] chdir("./file0" [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6277] <... chdir resumed>) = 0 [pid 6277] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 297.911070][ T6277] [ 297.911070][ T6277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.911070][ T6277] [pid 5847] close(4) = 0 [pid 5847] rmdir("./69/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./69" [pid 6277] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... rmdir resumed>) = 0 [ 297.977216][ T6277] [ 297.977216][ T6277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 297.977216][ T6277] [pid 5847] mkdir("./70", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6278] <... write resumed>) = 16777216 [pid 6277] <... lsetxattr resumed>) = 0 [ 298.018356][ T6277] [ 298.018356][ T6277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.018356][ T6277] [pid 6278] munmap(0x7feda9000000, 138412032 [pid 6277] exit_group(0) = ? [pid 6277] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6278] <... munmap resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", [pid 5848] <... close resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] getdents64(3, ./strace-static-x86_64: Process 6281 attached [pid 6281] set_robust_list(0x555584a2d760, 24 [pid 6278] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6281 [pid 6281] <... set_robust_list resumed>) = 0 [ 298.065916][ T112] [ 298.065916][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.065916][ T112] [pid 5849] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6281] chdir("./70" [pid 6278] <... openat resumed>) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] <... chdir resumed>) = 0 [pid 6278] ioctl(4, LOOP_SET_FD, 3 [pid 5849] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6281] <... prctl resumed>) = 0 [pid 5849] unlink("./68/binderfs" [pid 6281] setpgid(0, 0 [pid 5849] <... unlink resumed>) = 0 [pid 6281] <... setpgid resumed>) = 0 [pid 5849] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6278] <... ioctl resumed>) = 0 [pid 6278] close(3) = 0 [pid 6278] close(4 [pid 6281] <... openat resumed>) = 3 [pid 6278] <... close resumed>) = 0 [pid 6278] mkdir("./file0", 0777 [pid 6281] write(3, "1000", 4 [pid 6278] <... mkdir resumed>) = 0 [pid 6278] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6281] <... write resumed>) = 4 [pid 6281] close(3) = 0 [pid 6281] symlink("/dev/binderfs", "./binderfs") = 0 [ 298.128098][ T6278] loop4: detected capacity change from 0 to 32768 [ 298.138211][ T5849] [ 298.138211][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.138211][ T5849] [pid 6281] write(1, "executing program\n", 18executing program ) = 18 [pid 6281] memfd_create("syzkaller", 0) = 3 [pid 6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6279] <... write resumed>) = 16777216 [pid 6279] munmap(0x7feda9000000, 138412032) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 298.174269][ T5849] [ 298.174269][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.174269][ T5849] [ 298.211761][ T6278] [ 298.211761][ T6278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.211761][ T6278] [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = 0 [pid 6278] <... mount resumed>) = 0 [pid 5849] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6278] <... openat resumed>) = 3 [pid 6278] chdir("./file0") = 0 [pid 5849] newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./68/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 6278] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] rmdir("./68/file0" [pid 6278] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] <... rmdir resumed>) = 0 [pid 6278] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6279] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 6279] close(3 [pid 5849] <... close resumed>) = 0 [pid 6279] <... close resumed>) = 0 [pid 5849] rmdir("./68" [pid 6279] close(4 [pid 5849] <... rmdir resumed>) = 0 [pid 6279] <... close resumed>) = 0 [pid 5849] mkdir("./69", 0777) = 0 [pid 6279] mkdir("./file0", 0777 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6279] <... mkdir resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6279] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 298.255419][ T6279] loop5: detected capacity change from 0 to 32768 [ 298.279502][ T6278] [ 298.279502][ T6278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.279502][ T6278] [pid 5849] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6282 attached [pid 6282] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6282 [pid 6282] <... set_robust_list resumed>) = 0 [pid 6282] chdir("./70") = 0 [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6282] setpgid(0, 0) = 0 [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6282] write(3, "1000", 4) = 4 [pid 6282] close(3) = 0 [pid 6282] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6282] write(1, "executing program\n", 18) = 18 [pid 6282] memfd_create("syzkaller", 0) = 3 [pid 6279] <... mount resumed>) = 0 [pid 6282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 298.315613][ T6278] [ 298.315613][ T6278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.315613][ T6278] [ 298.355256][ T6279] [ 298.355256][ T6279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.355256][ T6279] [pid 6279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6282] <... mmap resumed>) = 0x7feda9000000 [pid 6279] <... openat resumed>) = 3 [pid 6278] <... lsetxattr resumed>) = 0 [pid 6279] chdir("./file0" [pid 6278] exit_group(0) = ? [pid 6279] <... chdir resumed>) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6279] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6278] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6278, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5851] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./69/binderfs") = 0 [ 298.389225][ T113] [ 298.389225][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.389225][ T113] [ 298.412431][ T6279] [ 298.412431][ T6279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.412431][ T6279] [pid 5851] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 298.447195][ T6279] [ 298.447195][ T6279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.447195][ T6279] [ 298.481654][ T5851] [ 298.481654][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.481654][ T5851] [ 298.492809][ T112] [pid 6281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6279] <... lsetxattr resumed>) = 0 [pid 6279] exit_group(0) = ? [pid 6279] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5852] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./69/binderfs") = 0 [ 298.492809][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.492809][ T112] [ 298.504998][ T5851] [ 298.504998][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.504998][ T5851] [ 298.534917][ T5852] [ 298.534917][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.534917][ T5852] [pid 5852] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./69/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./69") = 0 [pid 5851] mkdir("./70", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 298.570102][ T5852] [ 298.570102][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.570102][ T5852] [pid 5851] close(3 [pid 5849] <... close resumed>) = 0 [pid 6280] <... write resumed>) = 16777216 [pid 5852] <... umount2 resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6280] munmap(0x7feda9000000, 138412032 [pid 5852] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6283 [pid 5852] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6283 attached [pid 6283] set_robust_list(0x555584a2d760, 24 [pid 5852] <... openat resumed>) = 4 [pid 6283] <... set_robust_list resumed>) = 0 [pid 6283] chdir("./69" [pid 5852] newfstatat(4, "", [pid 6283] <... chdir resumed>) = 0 [pid 6283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6283] <... prctl resumed>) = 0 [pid 5852] getdents64(4, [pid 6283] setpgid(0, 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6283] <... setpgid resumed>) = 0 [pid 5852] getdents64(4, [pid 6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./69/file0"executing program [pid 6283] <... openat resumed>) = 3 [pid 5852] <... rmdir resumed>) = 0 [pid 6283] write(3, "1000", 4) = 4 [pid 6283] close(3) = 0 [pid 6283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6283] write(1, "executing program\n", 18) = 18 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./69" [pid 6283] memfd_create("syzkaller", 0 [pid 5852] <... rmdir resumed>) = 0 [pid 6283] <... memfd_create resumed>) = 3 [pid 5852] mkdir("./70", 0777 [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... mkdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6280] <... munmap resumed>) = 0 [pid 6282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6280] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6280] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6280] close(3) = 0 [pid 6280] close(4) = 0 [pid 6280] mkdir("./file0", 0777) = 0 [ 298.744245][ T6280] loop3: detected capacity change from 0 to 32768 [pid 6280] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6280] chdir("./file0") = 0 [pid 6280] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 298.794730][ T6280] [ 298.794730][ T6280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.794730][ T6280] [ 298.833733][ T6280] [ 298.833733][ T6280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.833733][ T6280] [pid 6280] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6284 attached [pid 6284] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6284 [pid 6284] <... set_robust_list resumed>) = 0 [pid 6284] chdir("./70") = 0 [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6284] setpgid(0, 0) = 0 [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6284] write(3, "1000", 4 [pid 6281] <... write resumed>) = 16777216 [pid 6284] <... write resumed>) = 4 [pid 6281] munmap(0x7feda9000000, 138412032 [pid 6284] close(3) = 0 [pid 6284] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6284] write(1, "executing program\n", 18) = 18 [pid 6284] memfd_create("syzkaller", 0) = 3 [pid 6284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6280] <... lsetxattr resumed>) = 0 [pid 6280] exit_group(0) = ? [ 298.910104][ T6280] [ 298.910104][ T6280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.910104][ T6280] [ 298.945787][ T113] [ 298.945787][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 298.945787][ T113] [pid 6281] <... munmap resumed>) = 0 [pid 6280] +++ exited with 0 +++ [pid 6281] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6280, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} --- [pid 6281] <... openat resumed>) = 4 [pid 6281] ioctl(4, LOOP_SET_FD, 3 [pid 5850] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./69/binderfs") = 0 [pid 5850] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6281] <... ioctl resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6281] close(3) = 0 [pid 6281] close(4) = 0 [pid 6281] mkdir("./file0", 0777) = 0 [ 298.995245][ T6281] loop1: detected capacity change from 0 to 32768 [ 299.016382][ T5850] [ 299.016382][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.016382][ T5850] [ 299.036523][ T6281] [ 299.036523][ T6281] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6281] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6285 attached [pid 6285] set_robust_list(0x555584a2d760, 24) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6285 [pid 6285] chdir("./70") = 0 [pid 6285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6281] <... mount resumed>) = 0 [pid 6285] setpgid(0, 0) = 0 [pid 6281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6281] <... openat resumed>) = 3 [pid 6285] <... openat resumed>) = 3 [pid 6281] chdir("./file0" [pid 6285] write(3, "1000", 4 [pid 6281] <... chdir resumed>) = 0 [pid 6285] <... write resumed>) = 4 [pid 6281] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6285] close(3) = 0 [pid 6285] symlink("/dev/binderfs", "./binderfs" [pid 6281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 299.036523][ T6281] [ 299.061473][ T5850] [ 299.061473][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.061473][ T5850] [pid 6281] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6285] <... symlink resumed>) = 0 [pid 6285] write(1, "executing program\n", 18executing program ) = 18 [pid 6285] memfd_create("syzkaller", 0) = 3 [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6281] <... lsetxattr resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [ 299.103746][ T6281] [ 299.103746][ T6281] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.103746][ T6281] [ 299.130558][ T6281] [ 299.130558][ T6281] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.130558][ T6281] [pid 5850] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6281] exit_group(0 [pid 5850] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6281] <... exit_group resumed>) = ? [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./69/file0") = 0 [pid 6281] +++ exited with 0 +++ [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5850] close(3 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./69") = 0 [pid 5850] mkdir("./70", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6282] <... write resumed>) = 16777216 [pid 5848] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 299.164684][ T113] [ 299.164684][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.164684][ T113] [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, [pid 6282] munmap(0x7feda9000000, 138412032 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./70/binderfs") = 0 [pid 5848] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6282] <... munmap resumed>) = 0 [pid 6282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6282] close(3) = 0 [pid 6282] close(4) = 0 [pid 6282] mkdir("./file0", 0777) = 0 [pid 6282] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 299.267992][ T5848] [ 299.267992][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.267992][ T5848] [ 299.296712][ T6282] loop0: detected capacity change from 0 to 32768 [ 299.303459][ T5848] [ 299.303459][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.303459][ T5848] [pid 5848] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./70/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./70") = 0 [pid 5848] mkdir("./71", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6282] <... mount resumed>) = 0 [pid 6283] <... write resumed>) = 16777216 [ 299.380809][ T6282] [ 299.380809][ T6282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.380809][ T6282] [pid 6282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5848] <... openat resumed>) = 3 [pid 6282] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 6282] chdir("./file0") = 0 [pid 5848] close(3 [pid 6282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6282] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6283] munmap(0x7feda9000000, 138412032 [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6286 ./strace-static-x86_64: Process 6286 attached [pid 6286] set_robust_list(0x555584a2d760, 24) = 0 [pid 6286] chdir("./70") = 0 [pid 6283] <... munmap resumed>) = 0 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6286] setpgid(0, 0) = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] write(3, "1000", 4 [pid 6283] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6286] <... write resumed>) = 4 [pid 6283] <... openat resumed>) = 4 [pid 6286] close(3 [ 299.440490][ T6282] [ 299.440490][ T6282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.440490][ T6282] [ 299.472498][ T6282] [ 299.472498][ T6282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.472498][ T6282] [pid 6283] ioctl(4, LOOP_SET_FD, 3 [pid 6286] <... close resumed>) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6286] write(1, "executing program\n", 18 [pid 6282] <... lsetxattr resumed>) = 0 [pid 6286] <... write resumed>) = 18 [pid 6286] memfd_create("syzkaller", 0) = 3 [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6282] exit_group(0 [pid 6286] <... mmap resumed>) = 0x7feda9000000 [pid 6282] <... exit_group resumed>) = ? [pid 6282] +++ exited with 0 +++ [pid 6283] <... ioctl resumed>) = 0 [pid 6283] close(3) = 0 [pid 6283] close(4) = 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6282, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 6283] mkdir("./file0", 0777) = 0 [pid 5847] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./70/binderfs") = 0 [ 299.511568][ T6283] loop2: detected capacity change from 0 to 32768 [ 299.537909][ T112] [ 299.537909][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.537909][ T112] [ 299.602010][ T5847] [ 299.602010][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.602010][ T5847] [ 299.618130][ T6283] [ 299.618130][ T6283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.618130][ T6283] [pid 5847] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6283] <... mount resumed>) = 0 [pid 6283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6283] chdir("./file0") = 0 [pid 6283] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6283] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./70/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 299.657761][ T5847] [ 299.657761][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.657761][ T5847] [ 299.662754][ T6283] [ 299.662754][ T6283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.662754][ T6283] [pid 5847] close(3) = 0 [pid 5847] rmdir("./70") = 0 [pid 5847] mkdir("./71", 0777) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... openat resumed>) = 3 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6287 ./strace-static-x86_64: Process 6287 attached [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 6287] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] close(3 [pid 6283] <... lsetxattr resumed>) = 0 [pid 6283] exit_group(0) = ? [pid 6287] chdir("./71" [pid 6283] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6284] <... write resumed>) = 16777216 [pid 6287] <... chdir resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6287] <... prctl resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6287] setpgid(0, 0 [pid 5849] newfstatat(AT_FDCWD, "./69/binderfs", [pid 6287] <... setpgid resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./69/binderfs" [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... unlink resumed>) = 0 [pid 5849] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6287] <... openat resumed>) = 3 [pid 6284] munmap(0x7feda9000000, 138412032 [pid 6287] write(3, "1000", 4) = 4 [pid 6287] close(3) = 0 [ 299.713403][ T6283] [ 299.713403][ T6283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.713403][ T6283] [ 299.750291][ T113] [ 299.750291][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.750291][ T113] [pid 6287] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6287] write(1, "executing program\n", 18executing program ) = 18 [pid 6287] memfd_create("syzkaller", 0) = 3 [pid 6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6284] <... munmap resumed>) = 0 [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 299.804470][ T5849] [ 299.804470][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.804470][ T5849] [ 299.833196][ T5849] [ 299.833196][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.833196][ T5849] [pid 6284] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./69/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 6284] <... ioctl resumed>) = 0 [pid 6284] close(3) = 0 [pid 6284] close(4) = 0 [pid 6284] mkdir("./file0", 0777) = 0 [pid 6284] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./69/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./69") = 0 [pid 5849] mkdir("./70", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 299.857267][ T6284] loop4: detected capacity change from 0 to 32768 [ 299.894704][ T6284] [ 299.894704][ T6284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.894704][ T6284] [pid 5849] close(3 [pid 6284] <... mount resumed>) = 0 [pid 6284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6284] chdir("./file0") = 0 [pid 6284] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 299.967906][ T6284] [ 299.967906][ T6284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 299.967906][ T6284] [pid 6284] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6285] <... write resumed>) = 16777216 [ 300.010124][ T6284] [ 300.010124][ T6284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.010124][ T6284] [pid 6285] munmap(0x7feda9000000, 138412032 [pid 6284] <... lsetxattr resumed>) = 0 [pid 6284] exit_group(0) = ? [pid 6284] +++ exited with 0 +++ [pid 6285] <... munmap resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5847] <... close resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6285] <... openat resumed>) = 4 [pid 6285] ioctl(4, LOOP_SET_FD, 3 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6288 attached [pid 6288] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6288 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, [pid 6288] chdir("./71" [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6285] <... ioctl resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6285] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6285] <... close resumed>) = 0 [pid 5851] unlink("./70/binderfs" [pid 6288] <... chdir resumed>) = 0 [pid 6285] close(4 [pid 5851] <... unlink resumed>) = 0 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6288] <... prctl resumed>) = 0 [pid 6288] setpgid(0, 0 [pid 6285] <... close resumed>) = 0 [pid 6288] <... setpgid resumed>) = 0 [ 300.060353][ T112] [ 300.060353][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.060353][ T112] [ 300.092990][ T6285] loop5: detected capacity change from 0 to 32768 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6288] write(3, "1000", 4) = 4 [pid 6288] close(3) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6288] write(1, "executing program\n", 18 [pid 6285] mkdir("./file0", 0777executing program [pid 6288] <... write resumed>) = 18 [pid 6288] memfd_create("syzkaller", 0 [pid 6285] <... mkdir resumed>) = 0 [pid 6288] <... memfd_create resumed>) = 3 [pid 6288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 300.114759][ T5851] [ 300.114759][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.114759][ T5851] [ 300.150559][ T6285] [ 300.150559][ T6285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.150559][ T6285] [pid 6285] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6285] <... mount resumed>) = 0 [pid 6285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6285] chdir("./file0") = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 300.172067][ T5851] [ 300.172067][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.172067][ T5851] [pid 6285] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6289 [pid 6289] <... set_robust_list resumed>) = 0 [pid 6289] chdir("./70") = 0 [pid 6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6289] setpgid(0, 0) = 0 [pid 6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] <... umount2 resumed>) = 0 [pid 6289] write(3, "1000", 4) = 4 [pid 6289] close(3) = 0 [pid 6289] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6289] write(1, "executing program\n", 18) = 18 [pid 6289] memfd_create("syzkaller", 0) = 3 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6285] <... lsetxattr resumed>) = 0 [ 300.212659][ T6285] [ 300.212659][ T6285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.212659][ T6285] [ 300.250110][ T6285] [ 300.250110][ T6285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.250110][ T6285] [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6285] exit_group(0 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6285] <... exit_group resumed>) = ? [pid 5851] close(4 [pid 6285] +++ exited with 0 +++ [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./70/file0" [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6285, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, [pid 5852] <... restart_syscall resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5852] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] rmdir("./70" [pid 5852] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] <... rmdir resumed>) = 0 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] mkdir("./71", 0777 [pid 5852] getdents64(3, [pid 6286] <... write resumed>) = 16777216 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... mkdir resumed>) = 0 [pid 6286] munmap(0x7feda9000000, 138412032 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5852] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5851] <... ioctl resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 300.287716][ T113] [ 300.287716][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.287716][ T113] [pid 5851] close(3 [pid 5852] unlink("./70/binderfs") = 0 [pid 5852] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6286] <... munmap resumed>) = 0 [pid 6288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6286] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 300.370891][ T5852] [ 300.370891][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.370891][ T5852] [ 300.400831][ T5852] [ 300.400831][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.400831][ T5852] [pid 6286] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6286] close(3) = 0 [pid 6286] close(4) = 0 [pid 6286] mkdir("./file0", 0777 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./70/file0", [pid 6286] <... mkdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [ 300.425294][ T6286] loop3: detected capacity change from 0 to 32768 [pid 5852] rmdir("./70/file0" [pid 6286] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./70") = 0 [pid 5852] mkdir("./71", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6286] <... mount resumed>) = 0 [pid 6286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6286] chdir("./file0") = 0 [ 300.539431][ T6286] [ 300.539431][ T6286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.539431][ T6286] [pid 6286] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 300.603358][ T6286] [ 300.603358][ T6286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.603358][ T6286] [ 300.625589][ T6286] [ 300.625589][ T6286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.625589][ T6286] [pid 6286] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6287] <... write resumed>) = 16777216 [pid 6286] <... lsetxattr resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 6286] exit_group(0 [pid 6287] munmap(0x7feda9000000, 138412032 [pid 6286] <... exit_group resumed>) = ? [pid 6286] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6286, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./70/binderfs"./strace-static-x86_64: Process 6290 attached ) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6290 [pid 5850] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6290] set_robust_list(0x555584a2d760, 24) = 0 [pid 6290] chdir("./71") = 0 [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6290] setpgid(0, 0) = 0 [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 300.670472][ T113] [ 300.670472][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.670472][ T113] [pid 6290] write(3, "1000", 4 [pid 6287] <... munmap resumed>) = 0 [pid 6290] <... write resumed>) = 4 [pid 6290] close(3 [pid 6287] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6290] <... close resumed>) = 0 [pid 6287] <... openat resumed>) = 4 [pid 6290] symlink("/dev/binderfs", "./binderfs" [pid 6287] ioctl(4, LOOP_SET_FD, 3 [pid 6290] <... symlink resumed>) = 0 executing program [pid 6290] write(1, "executing program\n", 18 [pid 6287] <... ioctl resumed>) = 0 [pid 6290] <... write resumed>) = 18 [pid 6287] close(3) = 0 [pid 6287] close(4) = 0 [pid 6287] mkdir("./file0", 0777) = 0 [pid 6290] memfd_create("syzkaller", 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6290] <... memfd_create resumed>) = 3 [pid 6287] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 300.713168][ T5850] [ 300.713168][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.713168][ T5850] [ 300.727728][ T6287] loop1: detected capacity change from 0 to 32768 [ 300.751003][ T5850] [ 300.751003][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.751003][ T5850] [pid 5850] <... openat resumed>) = 4 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./70/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./70" [pid 6290] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./71", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6287] <... mount resumed>) = 0 [pid 6287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6287] chdir("./file0") = 0 [pid 6287] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 300.795758][ T6287] [ 300.795758][ T6287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.795758][ T6287] [pid 6287] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6291 attached , child_tidptr=0x555584a2d750) = 6291 [pid 6291] set_robust_list(0x555584a2d760, 24) = 0 [pid 6291] chdir("./71") = 0 [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6291] setpgid(0, 0) = 0 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6291] write(3, "1000", 4) = 4 [pid 6291] close(3) = 0 [pid 6287] <... lsetxattr resumed>) = 0 [ 300.855882][ T6287] [ 300.855882][ T6287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.855882][ T6287] [ 300.890094][ T6287] [ 300.890094][ T6287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.890094][ T6287] [pid 6291] symlink("/dev/binderfs", "./binderfs" [pid 6287] exit_group(0 [pid 6291] <... symlink resumed>) = 0 [pid 6287] <... exit_group resumed>) = ? [pid 6291] write(1, "executing program\n", 18 [pid 6287] +++ exited with 0 +++ executing program [pid 6291] <... write resumed>) = 18 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6291] memfd_create("syzkaller", 0) = 3 [pid 6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./71/binderfs") = 0 [ 300.923497][ T112] [ 300.923497][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.923497][ T112] [pid 5848] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6288] <... write resumed>) = 16777216 [pid 6288] munmap(0x7feda9000000, 138412032) = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, [pid 6288] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [ 300.972244][ T5848] [ 300.972244][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.972244][ T5848] [ 300.992180][ T5848] [ 300.992180][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.992180][ T5848] [pid 6289] <... write resumed>) = 16777216 [pid 5848] getdents64(4, [pid 6288] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./71/file0") = 0 [pid 5848] getdents64(3, [pid 6289] munmap(0x7feda9000000, 138412032 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./71") = 0 [pid 5848] mkdir("./72", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6288] <... ioctl resumed>) = 0 [pid 6288] close(3) = 0 [pid 6288] close(4) = 0 [pid 6288] mkdir("./file0", 0777) = 0 [ 301.039111][ T6288] loop0: detected capacity change from 0 to 32768 [pid 6288] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6289] <... munmap resumed>) = 0 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6289] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6288] <... mount resumed>) = 0 [pid 6288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6288] chdir("./file0") = 0 [pid 6288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6288] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 301.122051][ T6288] [ 301.122051][ T6288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.122051][ T6288] [ 301.155583][ T6288] [ 301.155583][ T6288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.155583][ T6288] [pid 6289] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6289] close(3) = 0 [pid 6289] close(4) = 0 [pid 6289] mkdir("./file0", 0777) = 0 [ 301.167251][ T6289] loop2: detected capacity change from 0 to 32768 [pid 6289] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6292 attached [pid 6288] <... lsetxattr resumed>) = 0 [pid 6292] set_robust_list(0x555584a2d760, 24 [pid 6288] exit_group(0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6292 [pid 6292] <... set_robust_list resumed>) = 0 [pid 6288] <... exit_group resumed>) = ? [pid 6292] chdir("./71" [pid 6288] +++ exited with 0 +++ [pid 6292] <... chdir resumed>) = 0 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 6292] <... prctl resumed>) = 0 [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6292] setpgid(0, 0) = 0 [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6292] write(3, "1000", 4) = 4 [pid 6292] close(3) = 0 [pid 6292] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6292] write(1, "executing program\n", 18) = 18 [pid 6292] memfd_create("syzkaller", 0) = 3 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 6292] <... mmap resumed>) = 0x7feda9000000 [pid 5847] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./71/binderfs") = 0 [ 301.202174][ T6288] [ 301.202174][ T6288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.202174][ T6288] [ 301.227954][ T113] [ 301.227954][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.227954][ T113] [ 301.228015][ T6289] [ 301.228015][ T6289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.228015][ T6289] [pid 5847] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6289] <... mount resumed>) = 0 [pid 6289] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6289] chdir("./file0") = 0 [pid 6289] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 301.299443][ T5847] [ 301.299443][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.299443][ T5847] [ 301.330265][ T5847] [ 301.330265][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.330265][ T5847] [pid 6289] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... close resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6293 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6293 attached [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6293] set_robust_list(0x555584a2d760, 24 [pid 5847] close(4 [pid 6293] <... set_robust_list resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6293] chdir("./72" [pid 5847] rmdir("./71/file0" [pid 6293] <... chdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] getdents64(3, [pid 6293] <... prctl resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6293] setpgid(0, 0 [pid 5847] close(3 [pid 6293] <... setpgid resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] rmdir("./71") = 0 [pid 5847] mkdir("./72", 0777 [pid 6293] <... openat resumed>) = 3 [pid 5847] <... mkdir resumed>) = 0 [pid 6293] write(3, "1000", 4) = 4 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6293] close(3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6293] <... close resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 6293] symlink("/dev/binderfs", "./binderfs" [pid 5847] close(3 [pid 6293] <... symlink resumed>) = 0 [ 301.370529][ T6289] [ 301.370529][ T6289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.370529][ T6289] [ 301.410294][ T6289] [ 301.410294][ T6289] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.410294][ T6289] executing program [pid 6293] write(1, "executing program\n", 18 [pid 6289] <... lsetxattr resumed>) = 0 [pid 6289] exit_group(0 [pid 6293] <... write resumed>) = 18 [pid 6293] memfd_create("syzkaller", 0) = 3 [pid 6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6289] <... exit_group resumed>) = ? [pid 6289] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./70/binderfs") = 0 [ 301.481080][ T112] [ 301.481080][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.481080][ T112] [ 301.514181][ T5849] [ 301.514181][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.514181][ T5849] [pid 5849] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./70/file0", [pid 6290] <... write resumed>) = 16777216 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./70/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 301.570235][ T5849] [ 301.570235][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.570235][ T5849] [pid 5849] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6290] munmap(0x7feda9000000, 138412032 [pid 5849] <... openat resumed>) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./70/file0") = 0 [pid 6290] <... munmap resumed>) = 0 [pid 5849] getdents64(3, [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 6290] <... openat resumed>) = 4 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./70" [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./71", 0777 [pid 6290] <... ioctl resumed>) = 0 [pid 6290] close(3) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 6290] close(4) = 0 [pid 6290] mkdir("./file0", 0777 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6290] <... mkdir resumed>) = 0 [pid 6290] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... openat resumed>) = 3 [ 301.670334][ T6290] loop4: detected capacity change from 0 to 32768 [pid 6291] <... write resumed>) = 16777216 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 6291] munmap(0x7feda9000000, 138412032 [pid 5849] close(3 [pid 5847] <... close resumed>) = 0 [pid 6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6290] <... mount resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6294 attached [pid 6290] <... openat resumed>) = 3 [pid 6294] set_robust_list(0x555584a2d760, 24 [pid 6290] chdir("./file0" [pid 6294] <... set_robust_list resumed>) = 0 [pid 6290] <... chdir resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6294 [pid 6294] chdir("./72" [ 301.719673][ T6290] [ 301.719673][ T6290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.719673][ T6290] [pid 6290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6294] <... chdir resumed>) = 0 [pid 6290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6290] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6294] <... prctl resumed>) = 0 [pid 6294] setpgid(0, 0) = 0 [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6294] write(3, "1000", 4) = 4 [pid 6294] close(3) = 0 [pid 6294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6294] write(1, "executing program\n", 18) = 18 [pid 6294] memfd_create("syzkaller", 0) = 3 [pid 6291] <... munmap resumed>) = 0 [pid 6291] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6291] <... openat resumed>) = 4 [ 301.782381][ T6290] [ 301.782381][ T6290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.782381][ T6290] [pid 6291] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6290] <... lsetxattr resumed>) = 0 [pid 6290] exit_group(0) = ? [pid 6291] close(3 [pid 6290] +++ exited with 0 +++ [pid 6291] <... close resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6290, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 6291] close(4) = 0 [pid 6291] mkdir("./file0", 0777 [ 301.830227][ T6290] [ 301.830227][ T6290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.830227][ T6290] [ 301.842396][ T6291] loop5: detected capacity change from 0 to 32768 [ 301.864327][ T113] [ 301.864327][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.864327][ T113] [pid 5851] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6291] <... mkdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6291] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./71/binderfs") = 0 [ 301.894249][ T6291] [ 301.894249][ T6291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.894249][ T6291] [ 301.930882][ T5851] [ 301.930882][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.930882][ T5851] [pid 5851] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6291] <... mount resumed>) = 0 [pid 6291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6291] chdir("./file0") = 0 [pid 6291] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 301.943317][ T5851] [ 301.943317][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.943317][ T5851] [ 301.967544][ T6291] [ 301.967544][ T6291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.967544][ T6291] [pid 6291] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./71/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./71") = 0 [pid 5851] mkdir("./72", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6291] <... lsetxattr resumed>) = 0 [pid 6291] exit_group(0 [pid 5849] <... close resumed>) = 0 [pid 6291] <... exit_group resumed>) = ? [pid 6291] +++ exited with 0 +++ [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- ./strace-static-x86_64: Process 6295 attached [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6295 [pid 5852] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6295] set_robust_list(0x555584a2d760, 24 [pid 5852] <... openat resumed>) = 3 [pid 6295] <... set_robust_list resumed>) = 0 [pid 5852] newfstatat(3, "", [pid 6295] chdir("./71" [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6295] <... chdir resumed>) = 0 [pid 5852] getdents64(3, [pid 6295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6295] <... prctl resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6295] setpgid(0, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 302.002882][ T6291] [ 302.002882][ T6291] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.002882][ T6291] [ 302.040422][ T112] [ 302.040422][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.040422][ T112] [pid 6295] <... setpgid resumed>) = 0 [pid 5852] unlink("./71/binderfs") = 0 [pid 5852] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6295] write(3, "1000", 4) = 4 [pid 6295] close(3) = 0 [pid 6295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6295] write(1, "executing program\n", 18executing program ) = 18 [pid 6295] memfd_create("syzkaller", 0) = 3 [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6292] <... write resumed>) = 16777216 [ 302.110395][ T5852] [ 302.110395][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.110395][ T5852] [pid 6292] munmap(0x7feda9000000, 138412032) = 0 [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6292] <... openat resumed>) = 4 [pid 6292] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6292] close(3) = 0 [pid 6292] close(4) = 0 [pid 6292] mkdir("./file0", 0777) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6292] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./71/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./71") = 0 [ 302.160419][ T5852] [ 302.160419][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.160419][ T5852] [ 302.180361][ T6292] loop3: detected capacity change from 0 to 32768 [pid 5852] mkdir("./72", 0777) = 0 [pid 6293] <... write resumed>) = 16777216 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6293] munmap(0x7feda9000000, 138412032 [pid 6292] <... mount resumed>) = 0 [pid 6292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6292] chdir("./file0" [pid 6293] <... munmap resumed>) = 0 [pid 6292] <... chdir resumed>) = 0 [ 302.248751][ T6292] [ 302.248751][ T6292] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.248751][ T6292] [pid 6293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6293] <... openat resumed>) = 4 [pid 6292] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6293] ioctl(4, LOOP_SET_FD, 3 [pid 6292] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6293] <... ioctl resumed>) = 0 [ 302.318642][ T6292] [ 302.318642][ T6292] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.318642][ T6292] [ 302.330605][ T6293] loop1: detected capacity change from 0 to 32768 [pid 6293] close(3) = 0 [pid 6293] close(4) = 0 [pid 6293] mkdir("./file0", 0777) = 0 [pid 5851] <... close resumed>) = 0 [pid 6293] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6296 attached [pid 6295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6292] <... lsetxattr resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6296 executing program [pid 6296] set_robust_list(0x555584a2d760, 24) = 0 [pid 6292] exit_group(0 [pid 6296] chdir("./72" [pid 6292] <... exit_group resumed>) = ? [pid 6296] <... chdir resumed>) = 0 [pid 6292] +++ exited with 0 +++ [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 6296] setpgid(0, 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6296] <... setpgid resumed>) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6296] write(3, "1000", 4) = 4 [pid 6296] close(3) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6296] write(1, "executing program\n", 18) = 18 [pid 6296] memfd_create("syzkaller", 0) = 3 [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 302.373742][ T6292] [ 302.373742][ T6292] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.373742][ T6292] [ 302.408012][ T113] [ 302.408012][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.408012][ T113] [pid 5850] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./71/binderfs") = 0 [pid 5850] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6293] <... mount resumed>) = 0 [pid 6293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6293] chdir("./file0") = 0 [ 302.451054][ T6293] [ 302.451054][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.451054][ T6293] [ 302.480672][ T5850] [ 302.480672][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.480672][ T5850] [pid 6293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... close resumed>) = 0 [pid 6293] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6297 ./strace-static-x86_64: Process 6297 attached [pid 6293] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6297] set_robust_list(0x555584a2d760, 24) = 0 [pid 6297] chdir("./72") = 0 [pid 6297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6297] setpgid(0, 0) = 0 [pid 6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 302.529133][ T5850] [ 302.529133][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.529133][ T5850] [ 302.543475][ T6293] [ 302.543475][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.543475][ T6293] [pid 6297] write(3, "1000", 4) = 4 [pid 6297] close(3) = 0 [pid 6297] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 6297] write(1, "executing program\n", 18 [pid 5850] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6297] <... write resumed>) = 18 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6297] memfd_create("syzkaller", 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./71/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./71") = 0 [pid 5850] mkdir("./72", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [ 302.570176][ T6293] [ 302.570176][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.570176][ T6293] [pid 5850] close(3 [pid 6297] <... memfd_create resumed>) = 3 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6293] <... lsetxattr resumed>) = 0 [pid 6297] <... mmap resumed>) = 0x7feda9000000 [pid 6293] exit_group(0) = ? [pid 6293] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./72/binderfs") = 0 [pid 5848] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6294] <... write resumed>) = 16777216 [ 302.642398][ T113] [ 302.642398][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.642398][ T113] [ 302.676470][ T5848] [ 302.676470][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.676470][ T5848] [pid 6294] munmap(0x7feda9000000, 138412032 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6294] <... munmap resumed>) = 0 [pid 6294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 302.720337][ T5848] [ 302.720337][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.720337][ T5848] [pid 6294] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./72/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./72") = 0 [pid 6294] <... ioctl resumed>) = 0 [pid 5848] mkdir("./73", 0777 [pid 6294] close(3) = 0 [pid 6294] close(4) = 0 [pid 6294] mkdir("./file0", 0777 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6294] <... mkdir resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [ 302.779744][ T6294] loop0: detected capacity change from 0 to 32768 [pid 6294] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6295] <... write resumed>) = 16777216 [pid 6295] munmap(0x7feda9000000, 138412032) = 0 [pid 6294] <... mount resumed>) = 0 [ 302.850319][ T6294] [ 302.850319][ T6294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.850319][ T6294] [pid 6294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6294] chdir("./file0") = 0 [pid 6295] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6294] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] <... close resumed>) = 0 [pid 6294] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6294] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6295] <... openat resumed>) = 4 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6295] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6298 attached [pid 6298] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6298 [pid 6298] <... set_robust_list resumed>) = 0 [pid 6298] chdir("./72" [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6294] <... lsetxattr resumed>) = 0 [pid 6298] <... chdir resumed>) = 0 [pid 6298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6295] <... ioctl resumed>) = 0 [pid 6295] close(3) = 0 [ 302.922014][ T6294] [ 302.922014][ T6294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.922014][ T6294] [ 302.940034][ T6294] [ 302.940034][ T6294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.940034][ T6294] [ 302.941180][ T6295] loop2: detected capacity change from 0 to 32768 [ 302.966914][ T112] [pid 6295] close(4) = 0 [pid 6295] mkdir("./file0", 0777 [pid 6298] setpgid(0, 0) = 0 [pid 6298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6295] <... mkdir resumed>) = 0 [pid 6294] exit_group(0 [pid 6298] <... openat resumed>) = 3 [pid 6295] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6294] <... exit_group resumed>) = ? [pid 6298] write(3, "1000", 4) = 4 [pid 6294] +++ exited with 0 +++ [pid 6298] close(3) = 0 [pid 6298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] write(1, "executing program\n", 18 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./72/binderfs") = 0 [pid 5847] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6295] <... mount resumed>) = 0 [pid 6298] <... write resumed>) = 18 [ 302.966914][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.966914][ T112] [ 302.991871][ T6295] [ 302.991871][ T6295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.991871][ T6295] [pid 6295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6298] memfd_create("syzkaller", 0 [pid 6295] <... openat resumed>) = 3 [pid 6298] <... memfd_create resumed>) = 3 [pid 6298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6295] chdir("./file0" [pid 6298] <... mmap resumed>) = 0x7feda9000000 [pid 6295] <... chdir resumed>) = 0 [pid 6295] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 303.033815][ T5847] [ 303.033815][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.033815][ T5847] [ 303.053456][ T6295] [ 303.053456][ T6295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.053456][ T6295] [ 303.076951][ T6295] [pid 6295] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 5848] <... close resumed>) = 0 [pid 6295] exit_group(0) = ? [pid 6295] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6299 attached [pid 6299] set_robust_list(0x555584a2d760, 24) = 0 [pid 6299] chdir("./73") = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6299 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6299] setpgid(0, 0) = 0 [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6299] write(3, "1000", 4 [pid 5849] <... restart_syscall resumed>) = 0 [pid 6299] <... write resumed>) = 4 [pid 6299] close(3 [pid 5849] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6299] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] symlink("/dev/binderfs", "./binderfs" [pid 5849] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 6299] <... symlink resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6299] write(1, "executing program\n", 18 [pid 5849] newfstatat(3, "", [pid 6299] <... write resumed>) = 18 [pid 5847] <... umount2 resumed>) = 0 [pid 6299] memfd_create("syzkaller", 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] getdents64(3, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] newfstatat(AT_FDCWD, "./72/file0", [pid 5849] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5847] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./71/binderfs" [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] <... memfd_create resumed>) = 3 [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... unlink resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 303.076951][ T6295] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.076951][ T6295] [ 303.099799][ T5847] [ 303.099799][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.099799][ T5847] [ 303.112691][ T113] [ 303.112691][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.112691][ T113] [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./72/file0") = 0 [ 303.164535][ T5849] [ 303.164535][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.164535][ T5849] [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./72") = 0 [pid 6296] <... write resumed>) = 16777216 [pid 5849] <... umount2 resumed>) = 0 [pid 5847] mkdir("./73", 0777 [pid 6296] munmap(0x7feda9000000, 138412032 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 303.206400][ T5849] [ 303.206400][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.206400][ T5849] [pid 5847] close(3 [pid 5849] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6296] <... munmap resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./71/file0", [pid 6296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6296] <... openat resumed>) = 4 [pid 5849] umount2("./71/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6296] close(3) = 0 [pid 5849] getdents64(4, [pid 6296] close(4) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6296] mkdir("./file0", 0777 [pid 6298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6296] <... mkdir resumed>) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 6296] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./71/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 303.310439][ T6296] loop4: detected capacity change from 0 to 32768 [pid 5849] close(3) = 0 [pid 5849] rmdir("./71") = 0 [pid 5849] mkdir("./72", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6296] <... mount resumed>) = 0 [pid 6296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6296] chdir("./file0") = 0 [pid 6296] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6296] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6297] <... write resumed>) = 16777216 [ 303.392912][ T6296] [ 303.392912][ T6296] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.392912][ T6296] [ 303.427981][ T6296] [ 303.427981][ T6296] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.427981][ T6296] [pid 6297] munmap(0x7feda9000000, 138412032) = 0 [pid 6296] <... lsetxattr resumed>) = 0 [pid 6296] exit_group(0) = ? [pid 6296] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./72/binderfs") = 0 [ 303.470408][ T6296] [ 303.470408][ T6296] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.470408][ T6296] [ 303.508237][ T112] [ 303.508237][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.508237][ T112] [pid 5851] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6297] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6297] close(3) = 0 [pid 6297] close(4) = 0 [pid 5847] <... close resumed>) = 0 [pid 6297] mkdir("./file0", 0777) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 303.540258][ T5851] [ 303.540258][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.540258][ T5851] [ 303.553317][ T6297] loop5: detected capacity change from 0 to 32768 [ 303.570256][ T5851] [ 303.570256][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.570256][ T5851] [pid 6297] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,"./strace-static-x86_64: Process 6300 attached [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6300 [pid 6300] set_robust_list(0x555584a2d760, 24) = 0 [pid 6300] chdir("./73" [pid 5851] <... umount2 resumed>) = 0 [pid 6300] <... chdir resumed>) = 0 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./72/file0") = 0 [pid 5851] getdents64(3, [pid 6297] <... mount resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] close(3 [pid 6297] <... openat resumed>) = 3 [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./72" [pid 6297] chdir("./file0" [pid 5851] <... rmdir resumed>) = 0 [pid 6297] <... chdir resumed>) = 0 [pid 5851] mkdir("./73", 0777 [pid 6297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5851] <... mkdir resumed>) = 0 [pid 6300] <... prctl resumed>) = 0 [pid 6297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6300] setpgid(0, 0) = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6300] <... openat resumed>) = 3 [ 303.606339][ T6297] [ 303.606339][ T6297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.606339][ T6297] [pid 6300] write(3, "1000", 4 [pid 5849] <... close resumed>) = 0 [pid 6297] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6300] <... write resumed>) = 4 [pid 6300] close(3 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6300] <... close resumed>) = 0 [pid 6300] symlink("/dev/binderfs", "./binderfs") = 0 executing program ./strace-static-x86_64: Process 6301 attached [pid 6300] write(1, "executing program\n", 18 [pid 6301] set_robust_list(0x555584a2d760, 24 [pid 6300] <... write resumed>) = 18 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6301 [pid 6300] memfd_create("syzkaller", 0 [pid 6301] <... set_robust_list resumed>) = 0 [pid 6301] chdir("./72") = 0 [pid 6301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6300] <... memfd_create resumed>) = 3 [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6301] <... prctl resumed>) = 0 [pid 6301] setpgid(0, 0 [pid 6297] <... lsetxattr resumed>) = 0 [pid 6297] exit_group(0) = ? [ 303.671231][ T6297] [ 303.671231][ T6297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.671231][ T6297] [ 303.708275][ T6297] [ 303.708275][ T6297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.708275][ T6297] [pid 6301] <... setpgid resumed>) = 0 [pid 6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6301] write(3, "1000", 4) = 4 [pid 6297] +++ exited with 0 +++ [pid 6301] close(3 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6301] <... close resumed>) = 0 [pid 6301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 6301] write(1, "executing program\n", 18) = 18 [pid 6301] memfd_create("syzkaller", 0 [ 303.753069][ T113] [ 303.753069][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.753069][ T113] [pid 5852] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6301] <... memfd_create resumed>) = 3 [pid 5852] <... openat resumed>) = 3 [pid 5852] newfstatat(3, "", [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6298] <... write resumed>) = 16777216 [pid 5852] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./72/binderfs") = 0 [pid 5852] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 303.853184][ T5852] [ 303.853184][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.853184][ T5852] [pid 6298] munmap(0x7feda9000000, 138412032 [pid 6299] <... write resumed>) = 16777216 [pid 6298] <... munmap resumed>) = 0 [pid 6299] munmap(0x7feda9000000, 138412032 [pid 6298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5851] <... close resumed>) = 0 [pid 6298] ioctl(4, LOOP_SET_FD, 3 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6302 attached [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6302] set_robust_list(0x555584a2d760, 24 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6302 [pid 6302] <... set_robust_list resumed>) = 0 [pid 6299] <... munmap resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./72/file0", [pid 6302] chdir("./73" [pid 6299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6302] <... chdir resumed>) = 0 [pid 6299] <... openat resumed>) = 4 [pid 6298] <... ioctl resumed>) = 0 [pid 5852] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6302] <... prctl resumed>) = 0 [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 6298] close(3 [ 303.900437][ T5852] [ 303.900437][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.900437][ T5852] [ 303.936836][ T6298] loop3: detected capacity change from 0 to 32768 [pid 5852] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6302] setpgid(0, 0 [pid 6298] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 6302] <... setpgid resumed>) = 0 [pid 6298] close(4 [pid 5852] newfstatat(4, "", [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6298] <... close resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6298] mkdir("./file0", 0777 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 6298] <... mkdir resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 6302] <... openat resumed>) = 3 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./72/file0" [pid 6302] write(3, "1000", 4 [pid 6298] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6302] <... write resumed>) = 4 [pid 5852] <... rmdir resumed>) = 0 [pid 6302] close(3) = 0 [pid 5852] getdents64(3, [pid 6302] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3 [pid 6302] <... symlink resumed>) = 0 [pid 5852] <... close resumed>) = 0 executing program [pid 6302] write(1, "executing program\n", 18 [pid 5852] rmdir("./72" [pid 6302] <... write resumed>) = 18 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./73", 0777 [pid 6302] memfd_create("syzkaller", 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6299] <... ioctl resumed>) = 0 [pid 6302] <... memfd_create resumed>) = 3 [pid 6299] close(3 [pid 6302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6299] <... close resumed>) = 0 [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6299] close(4) = 0 [pid 6299] mkdir("./file0", 0777) = 0 [ 303.962247][ T6299] loop1: detected capacity change from 0 to 32768 [ 303.993723][ T6298] [ 303.993723][ T6298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.993723][ T6298] [pid 6299] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6298] <... mount resumed>) = 0 [pid 6298] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6298] chdir("./file0") = 0 [pid 6298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 304.034364][ T6299] [ 304.034364][ T6299] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.034364][ T6299] [pid 6298] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6299] <... mount resumed>) = 0 [pid 6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6299] chdir("./file0") = 0 [pid 6299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 304.079167][ T6298] [ 304.079167][ T6298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.079167][ T6298] [ 304.104427][ T6299] [ 304.104427][ T6299] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.104427][ T6299] [pid 6299] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6299] <... lsetxattr resumed>) = 0 [ 304.134867][ T6299] [ 304.134867][ T6299] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.134867][ T6299] [ 304.141782][ T6298] [ 304.141782][ T6298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.141782][ T6298] [ 304.171149][ T112] [ 304.171149][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.171149][ T112] [pid 6299] exit_group(0) = ? [pid 6298] <... lsetxattr resumed>) = 0 [pid 6299] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=37 /* 0.37 s */} --- [pid 6298] exit_group(0) = ? [pid 5848] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6298] +++ exited with 0 +++ [pid 5848] newfstatat(3, "", [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6298, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5850] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] unlink("./73/binderfs" [pid 5850] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... unlink resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5848] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./72/binderfs") = 0 [ 304.190953][ T113] [ 304.190953][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.190953][ T113] [ 304.240383][ T5848] [ 304.240383][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.240383][ T5848] [ 304.260403][ T5850] [ 304.260403][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.260403][ T5850] [ 304.273150][ T5848] [ 304.273150][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.273150][ T5848] [pid 5850] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [pid 6302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5848] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5850] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] rmdir("./73/file0" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... rmdir resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(3, [pid 5850] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... openat resumed>) = 4 [pid 5848] close(3) = 0 [pid 5850] newfstatat(4, "", [pid 5848] rmdir("./73" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 304.290572][ T5850] [ 304.290572][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.290572][ T5850] [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./72/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3 [pid 5848] mkdir("./74", 0777 [pid 5850] <... close resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5850] rmdir("./72" [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] <... rmdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5850] mkdir("./73", 0777 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5850] <... mkdir resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6303 ./strace-static-x86_64: Process 6303 attached [pid 6303] set_robust_list(0x555584a2d760, 24) = 0 [pid 6303] chdir("./73") = 0 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6303] setpgid(0, 0) = 0 [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6303] write(3, "1000", 4) = 4 [pid 6303] close(3) = 0 executing program [pid 6303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6303] write(1, "executing program\n", 18) = 18 [pid 6303] memfd_create("syzkaller", 0) = 3 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6300] <... write resumed>) = 16777216 [pid 6300] munmap(0x7feda9000000, 138412032 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6304 ./strace-static-x86_64: Process 6304 attached [pid 6300] <... munmap resumed>) = 0 [pid 6304] set_robust_list(0x555584a2d760, 24 [pid 6300] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6304] <... set_robust_list resumed>) = 0 [pid 6304] chdir("./74") = 0 [pid 6300] <... openat resumed>) = 4 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6301] <... write resumed>) = 16777216 [pid 6300] ioctl(4, LOOP_SET_FD, 3 [pid 6304] <... prctl resumed>) = 0 [pid 6301] munmap(0x7feda9000000, 138412032 [pid 6304] setpgid(0, 0 [pid 6300] <... ioctl resumed>) = 0 [pid 6304] <... setpgid resumed>) = 0 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6301] <... munmap resumed>) = 0 [pid 6301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6301] ioctl(4, LOOP_SET_FD, 3 [pid 6304] write(3, "1000", 4 [pid 6300] close(3 [pid 6304] <... write resumed>) = 4 [pid 6300] <... close resumed>) = 0 [pid 6304] close(3 [pid 6300] close(4 [pid 6304] <... close resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6304] symlink("/dev/binderfs", "./binderfs" [pid 6300] mkdir("./file0", 0777executing program [pid 6304] <... symlink resumed>) = 0 [pid 6300] <... mkdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6304] write(1, "executing program\n", 18 [pid 6300] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6304] <... write resumed>) = 18 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6305 attached [pid 6304] memfd_create("syzkaller", 0 [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6305] set_robust_list(0x555584a2d760, 24 [pid 6304] <... memfd_create resumed>) = 3 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6305 [pid 6305] <... set_robust_list resumed>) = 0 [pid 6304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6301] <... ioctl resumed>) = 0 [pid 6301] close(3) = 0 [pid 6301] close(4 [pid 6305] chdir("./73" [pid 6301] <... close resumed>) = 0 [pid 6305] <... chdir resumed>) = 0 [pid 6301] mkdir("./file0", 0777) = 0 [pid 6301] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6305] setpgid(0, 0) = 0 [ 304.660583][ T6300] loop0: detected capacity change from 0 to 32768 [ 304.688990][ T6301] loop2: detected capacity change from 0 to 32768 [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] <... mount resumed>) = 0 [pid 6300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6305] <... openat resumed>) = 3 [pid 6300] <... openat resumed>) = 3 [pid 6300] chdir("./file0") = 0 [pid 6305] write(3, "1000", 4 [pid 6300] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6305] <... write resumed>) = 4 [pid 6305] close(3 [pid 6300] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6300] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6305] <... close resumed>) = 0 [pid 6305] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6305] write(1, "executing program\n", 18 [pid 6301] <... mount resumed>) = 0 [pid 6305] <... write resumed>) = 18 [pid 6301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6301] chdir("./file0") = 0 [pid 6301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 304.727973][ T6300] [ 304.727973][ T6300] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.727973][ T6300] [ 304.740582][ T6301] [ 304.740582][ T6301] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.740582][ T6301] [ 304.766321][ T6300] [ 304.766321][ T6300] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.766321][ T6300] [pid 6301] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6305] memfd_create("syzkaller", 0) = 3 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6302] <... write resumed>) = 16777216 [ 304.786963][ T6301] [ 304.786963][ T6301] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.786963][ T6301] [ 304.799160][ T6300] [ 304.799160][ T6300] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.799160][ T6300] [pid 6302] munmap(0x7feda9000000, 138412032 [pid 6300] <... lsetxattr resumed>) = 0 [pid 6301] <... lsetxattr resumed>) = 0 [pid 6302] <... munmap resumed>) = 0 [pid 6300] exit_group(0 [pid 6301] exit_group(0) = ? [pid 6301] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6301, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6300] <... exit_group resumed>) = ? [pid 6300] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6300, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6302] ioctl(4, LOOP_SET_FD, 3 [ 304.830952][ T6301] [ 304.830952][ T6301] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.830952][ T6301] [ 304.854067][ T112] [ 304.854067][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.854067][ T112] [ 304.859190][ T113] [ 304.859190][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.859190][ T113] [pid 5849] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5847] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./72/binderfs" [pid 5847] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... unlink resumed>) = 0 [pid 5847] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./73/binderfs") = 0 [pid 5847] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6302] <... ioctl resumed>) = 0 [pid 6302] close(3) = 0 [pid 6302] close(4) = 0 [pid 6302] mkdir("./file0", 0777) = 0 [ 304.912030][ T6302] loop4: detected capacity change from 0 to 32768 [ 304.951077][ T5849] [ 304.951077][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.951077][ T5849] [ 304.970770][ T5847] [ 304.970770][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.970770][ T5847] [ 304.980558][ T6302] [ 304.980558][ T6302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.980558][ T6302] [ 304.993257][ T5849] [ 304.993257][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.993257][ T5849] [ 305.015354][ T5847] [pid 6302] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6302] <... mount resumed>) = 0 [pid 6302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6302] chdir("./file0") = 0 [pid 6302] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6302] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6302] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./72/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6302] exit_group(0) = ? [pid 5849] openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 5847] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(4, [pid 5847] newfstatat(AT_FDCWD, "./73/file0", [pid 6302] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] close(4 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6302, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] <... close resumed>) = 0 [pid 5847] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5849] rmdir("./72/file0") = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(3, [pid 5847] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5849] close(3) = 0 [ 305.015354][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.015354][ T5847] [ 305.029584][ T6302] [ 305.029584][ T6302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.029584][ T6302] [ 305.060530][ T6302] [ 305.060530][ T6302] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.060530][ T6302] [pid 5847] newfstatat(4, "", [pid 5849] rmdir("./72" [pid 5851] <... restart_syscall resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5847] getdents64(4, [pid 5849] mkdir("./73", 0777 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... mkdir resumed>) = 0 [pid 5847] getdents64(4, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... openat resumed>) = 3 [pid 5847] close(4 [pid 5851] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] <... close resumed>) = 0 [pid 5851] newfstatat(3, "", [pid 5849] <... ioctl resumed>) = 0 [pid 5847] rmdir("./73/file0" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(3 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] getdents64(3, [pid 5851] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] close(3 [pid 5851] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5847] <... close resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./73/binderfs" [pid 5847] rmdir("./73" [pid 5851] <... unlink resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5851] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] mkdir("./74", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 305.102449][ T113] [ 305.102449][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.102449][ T113] [ 305.162197][ T5851] [ 305.162197][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.162197][ T5851] [pid 5847] close(3 [pid 6303] <... write resumed>) = 16777216 [ 305.209797][ T5851] [ 305.209797][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.209797][ T5851] [pid 6303] munmap(0x7feda9000000, 138412032 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./73/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./73") = 0 [pid 5851] mkdir("./74", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6303] <... munmap resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6303] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6303] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6303] close(3) = 0 [pid 6303] close(4) = 0 [pid 6303] mkdir("./file0", 0777) = 0 [ 305.330654][ T6303] loop5: detected capacity change from 0 to 32768 [pid 6303] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 305.403899][ T6303] [ 305.403899][ T6303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.403899][ T6303] [pid 6303] chdir("./file0" [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6303] <... chdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6303] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6306 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6303] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 6306 attached [pid 6306] set_robust_list(0x555584a2d760, 24) = 0 [pid 6306] chdir("./73") = 0 [pid 6306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6306] setpgid(0, 0) = 0 [pid 6306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6307 attached [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6307 [pid 6307] set_robust_list(0x555584a2d760, 24) = 0 [pid 6306] <... openat resumed>) = 3 executing program [pid 6306] write(3, "1000", 4 [pid 6307] chdir("./74" [pid 6306] <... write resumed>) = 4 [pid 6307] <... chdir resumed>) = 0 [pid 6306] close(3 [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6306] <... close resumed>) = 0 [pid 6307] setpgid(0, 0 [pid 6306] symlink("/dev/binderfs", "./binderfs" [pid 6307] <... setpgid resumed>) = 0 [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6306] <... symlink resumed>) = 0 [pid 6306] write(1, "executing program\n", 18 [pid 6307] <... openat resumed>) = 3 [pid 6307] write(3, "1000", 4 [pid 6306] <... write resumed>) = 18 [pid 6307] <... write resumed>) = 4 [pid 6307] close(3 [pid 6306] memfd_create("syzkaller", 0 [pid 6307] <... close resumed>) = 0 [pid 6307] symlink("/dev/binderfs", "./binderfs" [pid 6306] <... memfd_create resumed>) = 3 [pid 6303] <... lsetxattr resumed>) = 0 [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 executing program [pid 6307] <... symlink resumed>) = 0 [pid 6303] exit_group(0 [pid 6307] write(1, "executing program\n", 18 [pid 6303] <... exit_group resumed>) = ? [pid 6307] <... write resumed>) = 18 [pid 6307] memfd_create("syzkaller", 0 [pid 6303] +++ exited with 0 +++ [pid 6307] <... memfd_create resumed>) = 3 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./73/binderfs") = 0 [ 305.486488][ T6303] [ 305.486488][ T6303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.486488][ T6303] [ 305.500651][ T6303] [ 305.500651][ T6303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.500651][ T6303] [ 305.525036][ T112] [ 305.525036][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.525036][ T112] [pid 5852] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6304] <... write resumed>) = 16777216 [pid 6304] munmap(0x7feda9000000, 138412032 [pid 6305] <... write resumed>) = 16777216 [pid 6305] munmap(0x7feda9000000, 138412032 [pid 6304] <... munmap resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5852] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6304] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6308 attached ) = 4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6308] set_robust_list(0x555584a2d760, 24 [pid 5852] newfstatat(AT_FDCWD, "./73/file0", [pid 6308] <... set_robust_list resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6308 [ 305.553278][ T5852] [ 305.553278][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.553278][ T5852] [ 305.574193][ T5852] [ 305.574193][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.574193][ T5852] [pid 6308] chdir("./74" [pid 6304] ioctl(4, LOOP_SET_FD, 3 [pid 6308] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6308] <... prctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6308] setpgid(0, 0 [pid 5852] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6308] <... setpgid resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 6308] <... openat resumed>) = 3 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 6308] write(3, "1000", 4 [pid 6305] <... munmap resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 6308] <... write resumed>) = 4 [pid 6304] <... ioctl resumed>) = 0 [pid 6304] close(3) = 0 [pid 6304] close(4) = 0 [pid 6304] mkdir("./file0", 0777) = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] rmdir("./73/file0" [pid 6308] close(3 [pid 6305] <... openat resumed>) = 4 [pid 6308] <... close resumed>) = 0 [pid 6305] ioctl(4, LOOP_SET_FD, 3 [pid 6304] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6308] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... rmdir resumed>) = 0 [pid 5852] getdents64(3, [pid 6308] <... symlink resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6308] write(1, "executing program\n", 18 [pid 5852] close(3executing program [pid 6308] <... write resumed>) = 18 [pid 6308] memfd_create("syzkaller", 0 [pid 6305] <... ioctl resumed>) = 0 [pid 6305] close(3) = 0 [pid 6305] close(4) = 0 [pid 6305] mkdir("./file0", 0777) = 0 [ 305.633894][ T6304] loop1: detected capacity change from 0 to 32768 [ 305.673606][ T6305] loop3: detected capacity change from 0 to 32768 [pid 6305] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6308] <... memfd_create resumed>) = 3 [pid 5852] <... close resumed>) = 0 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] rmdir("./73") = 0 [pid 5852] mkdir("./74", 0777) = 0 [pid 6308] <... mmap resumed>) = 0x7feda9000000 [pid 6304] <... mount resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6304] chdir("./file0") = 0 [pid 6304] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6304] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 305.703009][ T6304] [ 305.703009][ T6304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.703009][ T6304] [ 305.732027][ T6304] [ 305.732027][ T6304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.732027][ T6304] [pid 5852] close(3 [pid 6307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6305] <... mount resumed>) = 0 [pid 6304] <... lsetxattr resumed>) = 0 [pid 6305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6304] exit_group(0) = ? [pid 6304] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6305] <... openat resumed>) = 3 [pid 6305] chdir("./file0" [pid 5848] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6305] <... chdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [ 305.769872][ T6304] [ 305.769872][ T6304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.769872][ T6304] [ 305.780573][ T6305] [ 305.780573][ T6305] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.780573][ T6305] [ 305.799887][ T113] [ 305.799887][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.799887][ T113] [pid 6305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5848] newfstatat(3, "", [pid 6305] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, [pid 6305] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./74/binderfs") = 0 [ 305.862171][ T6305] [ 305.862171][ T6305] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.862171][ T6305] [ 305.884956][ T5848] [ 305.884956][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.884956][ T5848] [ 305.910058][ T6305] [pid 5848] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6305] <... lsetxattr resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6305] exit_group(0 [pid 5848] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6305] <... exit_group resumed>) = ? [ 305.910058][ T6305] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.910058][ T6305] [ 305.910379][ T5848] [ 305.910379][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.910379][ T5848] [pid 6305] +++ exited with 0 +++ [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./73/binderfs") = 0 [pid 5850] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 305.960300][ T112] [ 305.960300][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.960300][ T112] [ 305.984489][ T5850] [ 305.984489][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 305.984489][ T5850] [pid 5848] newfstatat(4, "", [pid 6308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, [pid 5850] <... umount2 resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(4 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... close resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./73/file0", [pid 5848] rmdir("./74/file0" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, [pid 5850] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] <... close resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] close(3 [pid 5850] <... openat resumed>) = 4 [pid 5848] <... close resumed>) = 0 [ 306.011350][ T5850] [ 306.011350][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.011350][ T5850] [pid 5850] newfstatat(4, "", [pid 5848] rmdir("./74" [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6309 [pid 5848] mkdir("./75", 0777 [pid 5850] getdents64(4, ./strace-static-x86_64: Process 6309 attached 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] getdents64(4, [pid 5848] <... openat resumed>) = 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5850] close(4) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5850] rmdir("./73/file0" [pid 5848] close(3 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./73") = 0 [pid 5850] mkdir("./74", 0777) = 0 [pid 6309] set_robust_list(0x555584a2d760, 24) = 0 [pid 6309] chdir("./74" [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6309] <... chdir resumed>) = 0 [pid 6309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6309] <... prctl resumed>) = 0 [pid 6309] setpgid(0, 0) = 0 [pid 6309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6309] write(3, "1000", 4) = 4 [pid 6309] close(3executing program ) = 0 [pid 6309] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6309] write(1, "executing program\n", 18) = 18 [pid 6309] memfd_create("syzkaller", 0) = 3 [pid 6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6306] <... write resumed>) = 16777216 [pid 6307] <... write resumed>) = 16777216 [pid 6306] munmap(0x7feda9000000, 138412032 [pid 6307] munmap(0x7feda9000000, 138412032 [pid 6306] <... munmap resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6306] ioctl(4, LOOP_SET_FD, 3 [pid 6307] <... munmap resumed>) = 0 [pid 6307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6307] ioctl(4, LOOP_SET_FD, 3 [pid 6306] <... ioctl resumed>) = 0 [pid 6306] close(3) = 0 [pid 6306] close(4) = 0 [pid 6306] mkdir("./file0", 0777) = 0 [pid 6306] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6307] <... ioctl resumed>) = 0 [pid 6307] close(3) = 0 [pid 6307] close(4) = 0 [pid 6307] mkdir("./file0", 0777) = 0 [ 306.324753][ T6306] loop2: detected capacity change from 0 to 32768 [ 306.345088][ T6307] loop0: detected capacity change from 0 to 32768 [pid 6307] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... close resumed>) = 0 [pid 6306] <... mount resumed>) = 0 [pid 6306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6306] chdir("./file0") = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6310 attached [ 306.403361][ T6306] [ 306.403361][ T6306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.403361][ T6306] [ 306.443363][ T6307] [ 306.443363][ T6307] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.443363][ T6307] [pid 6306] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... close resumed>) = 0 [pid 6310] set_robust_list(0x555584a2d760, 24 [pid 6308] <... write resumed>) = 16777216 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6310 [pid 6310] <... set_robust_list resumed>) = 0 [pid 6310] chdir("./75") = 0 [pid 6308] munmap(0x7feda9000000, 138412032./strace-static-x86_64: Process 6311 attached [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6307] <... mount resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6311 [pid 6310] <... prctl resumed>) = 0 [pid 6310] setpgid(0, 0 [pid 6307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6311] set_robust_list(0x555584a2d760, 24 [pid 6310] <... setpgid resumed>) = 0 [pid 6311] <... set_robust_list resumed>) = 0 [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6307] <... openat resumed>) = 3 [pid 6311] chdir("./74" [pid 6310] <... openat resumed>) = 3 [pid 6307] chdir("./file0" [pid 6311] <... chdir resumed>) = 0 [pid 6310] write(3, "1000", 4 [pid 6307] <... chdir resumed>) = 0 [pid 6311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6310] <... write resumed>) = 4 [pid 6307] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6311] <... prctl resumed>) = 0 [pid 6310] close(3 [pid 6308] <... munmap resumed>) = 0 [pid 6307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6310] <... close resumed>) = 0 [pid 6310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6308] openat(AT_FDCWD, "/dev/loop4", O_RDWRexecuting program [pid 6310] write(1, "executing program\n", 18 [pid 6308] <... openat resumed>) = 4 [pid 6310] <... write resumed>) = 18 [ 306.445032][ T6306] [ 306.445032][ T6306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.445032][ T6306] [ 306.492142][ T6308] loop4: detected capacity change from 0 to 32768 [ 306.496467][ T6306] [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6311] setpgid(0, 0 [pid 6310] memfd_create("syzkaller", 0 [pid 6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6307] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6310] <... memfd_create resumed>) = 3 [pid 6310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6308] <... ioctl resumed>) = 0 [pid 6308] close(3) = 0 [pid 6308] close(4) = 0 [pid 6311] <... setpgid resumed>) = 0 [pid 6308] mkdir("./file0", 0777) = 0 [pid 6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6308] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6311] <... openat resumed>) = 3 [pid 6311] write(3, "1000", 4) = 4 [pid 6311] close(3) = 0 [pid 6311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6311] write(1, "executing program\n", 18executing program ) = 18 [pid 6306] <... lsetxattr resumed>) = 0 [ 306.496467][ T6306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.496467][ T6306] [ 306.510523][ T6307] [ 306.510523][ T6307] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.510523][ T6307] [ 306.534949][ T6307] [ 306.534949][ T6307] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.534949][ T6307] [ 306.550791][ T112] [pid 6311] memfd_create("syzkaller", 0) = 3 [pid 6306] exit_group(0 [pid 6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6306] <... exit_group resumed>) = ? [pid 6311] <... mmap resumed>) = 0x7feda9000000 [pid 6306] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6306, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./73/binderfs") = 0 [ 306.550791][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.550791][ T112] [pid 5849] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6307] <... lsetxattr resumed>) = 0 [pid 6307] exit_group(0) = ? [pid 6307] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6308] <... mount resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./74/binderfs") = 0 [ 306.594687][ T5849] [ 306.594687][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.594687][ T5849] [ 306.605925][ T6308] [ 306.605925][ T6308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.605925][ T6308] [ 306.617293][ T112] [ 306.617293][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.617293][ T112] [ 306.632671][ T5849] [ 306.632671][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.632671][ T5849] [pid 5847] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6308] chdir("./file0") = 0 [pid 6308] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 306.657733][ T5847] [ 306.657733][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.657733][ T5847] [ 306.681965][ T6308] [ 306.681965][ T6308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.681965][ T6308] [ 306.683081][ T5847] [ 306.683081][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.683081][ T5847] [ 306.703692][ T6308] [pid 6308] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6308] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./73/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6308] exit_group(0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6308] <... exit_group resumed>) = ? [pid 5849] openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./73/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./73") = 0 [pid 5849] mkdir("./74", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6308] +++ exited with 0 +++ [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6308, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5849] close(3 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5847] <... umount2 resumed>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./74/file0", [pid 5851] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5847] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(3, "", [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 306.703692][ T6308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.703692][ T6308] [ 306.734794][ T112] [ 306.734794][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.734794][ T112] [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] <... openat resumed>) = 4 [pid 5851] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(4, "", [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./74/binderfs" [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... unlink resumed>) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./74/file0" [pid 6311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./74") = 0 [pid 5847] mkdir("./75", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 306.851415][ T5851] [ 306.851415][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.851415][ T5851] [pid 5847] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [ 306.900392][ T5851] [ 306.900392][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.900392][ T5851] [pid 5851] rmdir("./74/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./74") = 0 [pid 5851] mkdir("./75", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6309] <... write resumed>) = 16777216 [pid 6309] munmap(0x7feda9000000, 138412032 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6312 attached , child_tidptr=0x555584a2d750) = 6312 [pid 6312] set_robust_list(0x555584a2d760, 24) = 0 [pid 6312] chdir("./74") = 0 [pid 6312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6312] setpgid(0, 0) = 0 [pid 6312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6309] <... munmap resumed>) = 0 [pid 6312] <... openat resumed>) = 3 [pid 6309] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6312] write(3, "1000", 4 [pid 6309] <... openat resumed>) = 4 [pid 6312] <... write resumed>) = 4 executing program [pid 6312] close(3 [pid 6309] ioctl(4, LOOP_SET_FD, 3 [pid 6312] <... close resumed>) = 0 [pid 6312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6312] write(1, "executing program\n", 18) = 18 [pid 6312] memfd_create("syzkaller", 0) = 3 [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6313 attached [pid 6313] set_robust_list(0x555584a2d760, 24 [pid 6309] <... ioctl resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6313 [pid 6313] <... set_robust_list resumed>) = 0 [pid 6309] close(3 [pid 6313] chdir("./75" [pid 6309] <... close resumed>) = 0 [pid 6309] close(4 [pid 6313] <... chdir resumed>) = 0 [pid 6313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6309] <... close resumed>) = 0 [pid 6313] <... prctl resumed>) = 0 [pid 6309] mkdir("./file0", 0777 [pid 6313] setpgid(0, 0 [pid 6309] <... mkdir resumed>) = 0 [pid 6313] <... setpgid resumed>) = 0 [pid 6309] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 307.146049][ T6309] loop5: detected capacity change from 0 to 32768 [pid 6313] write(3, "1000", 4) = 4 [pid 6313] close(3) = 0 [pid 6313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6313] write(1, "executing program\n", 18executing program ) = 18 [pid 5851] <... close resumed>) = 0 [pid 6313] memfd_create("syzkaller", 0) = 3 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6314 attached [pid 6313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] <... write resumed>) = 16777216 [pid 6310] <... write resumed>) = 16777216 [pid 6309] <... mount resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6314 [ 307.215172][ T6309] [ 307.215172][ T6309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.215172][ T6309] [pid 6313] <... mmap resumed>) = 0x7feda9000000 [pid 6311] munmap(0x7feda9000000, 138412032 [pid 6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6314] set_robust_list(0x555584a2d760, 24) = 0 [pid 6310] munmap(0x7feda9000000, 138412032 [pid 6314] chdir("./75" [pid 6309] <... openat resumed>) = 3 [pid 6314] <... chdir resumed>) = 0 [pid 6309] chdir("./file0" [pid 6314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6309] <... chdir resumed>) = 0 [pid 6314] <... prctl resumed>) = 0 [pid 6309] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6314] setpgid(0, 0 [pid 6309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6314] <... setpgid resumed>) = 0 executing program [pid 6309] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6314] write(3, "1000", 4) = 4 [pid 6314] close(3) = 0 [pid 6314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6314] write(1, "executing program\n", 18) = 18 [pid 6314] memfd_create("syzkaller", 0) = 3 [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6310] <... munmap resumed>) = 0 [pid 6311] <... munmap resumed>) = 0 [pid 6311] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6311] ioctl(4, LOOP_SET_FD, 3 [pid 6310] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6310] ioctl(4, LOOP_SET_FD, 3 [pid 6311] <... ioctl resumed>) = 0 [pid 6311] close(3) = 0 [pid 6311] close(4 [pid 6310] <... ioctl resumed>) = 0 [pid 6311] <... close resumed>) = 0 [pid 6310] close(3) = 0 [pid 6310] close(4) = 0 [pid 6310] mkdir("./file0", 0777) = 0 [pid 6310] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6311] mkdir("./file0", 0777) = 0 [ 307.293876][ T6309] [ 307.293876][ T6309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.293876][ T6309] [ 307.315998][ T6311] loop3: detected capacity change from 0 to 32768 [ 307.321036][ T6310] loop1: detected capacity change from 0 to 32768 [ 307.324996][ T6309] [ 307.324996][ T6309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.324996][ T6309] [pid 6311] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6309] <... lsetxattr resumed>) = 0 [pid 6309] exit_group(0) = ? [pid 6311] <... mount resumed>) = 0 [pid 6309] +++ exited with 0 +++ [pid 6311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6309, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 6311] chdir("./file0" [pid 5852] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6311] <... chdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6311] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 307.366782][ T6311] [ 307.366782][ T6311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.366782][ T6311] [ 307.380633][ T113] [ 307.380633][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.380633][ T113] [ 307.392602][ T6310] [ 307.392602][ T6310] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.392602][ T6310] [pid 5852] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6311] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... openat resumed>) = 3 [pid 6311] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./74/binderfs") = 0 [pid 5852] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6310] <... mount resumed>) = 0 [pid 6310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6310] chdir("./file0") = 0 [pid 6310] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 307.417709][ T6311] [ 307.417709][ T6311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.417709][ T6311] [ 307.438886][ T5852] [ 307.438886][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.438886][ T5852] [ 307.460531][ T6310] [ 307.460531][ T6310] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.460531][ T6310] [ 307.469985][ T6311] [ 307.469985][ T6311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.469985][ T6311] [ 307.482262][ T5852] [ 307.482262][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.482262][ T5852] [ 307.500071][ T6310] [ 307.500071][ T6310] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.500071][ T6310] [ 307.505047][ T112] [pid 6310] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6311] <... lsetxattr resumed>) = 0 [pid 6311] exit_group(0) = ? [pid 6311] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6311, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6310] <... lsetxattr resumed>) = 0 [pid 5850] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6310] exit_group(0 [ 307.505047][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.505047][ T112] [pid 5850] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6310] <... exit_group resumed>) = ? [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6310] +++ exited with 0 +++ [pid 5850] unlink("./74/binderfs" [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] <... unlink resumed>) = 0 [pid 5850] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./75/binderfs") = 0 [ 307.540814][ T113] [ 307.540814][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.540814][ T113] [ 307.567131][ T5850] [ 307.567131][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.567131][ T5850] [pid 5848] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./74/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./74") = 0 [pid 5852] mkdir("./75", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 307.593102][ T5848] [ 307.593102][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.593102][ T5848] [ 307.603914][ T5850] [ 307.603914][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.603914][ T5850] [ 307.611834][ T5848] [ 307.611834][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 307.611834][ T5848] [pid 5850] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", [pid 5848] <... umount2 resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5848] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./75/file0", [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] getdents64(4, [pid 5848] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./75/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 [pid 5850] close(4 [pid 5848] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] rmdir("./75" [pid 5850] rmdir("./74/file0" [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./76", 0777 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./74") = 0 [pid 5850] mkdir("./75", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5852] <... close resumed>) = 0 [pid 6312] <... write resumed>) = 16777216 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6315 ./strace-static-x86_64: Process 6315 attached [pid 6315] set_robust_list(0x555584a2d760, 24 [pid 6312] munmap(0x7feda9000000, 138412032 [pid 6315] <... set_robust_list resumed>) = 0 [pid 6315] chdir("./75") = 0 [pid 6315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6315] setpgid(0, 0) = 0 [pid 6315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6315] write(3, "1000", 4) = 4 [pid 6315] close(3) = 0 [pid 6315] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6315] write(1, "executing program\n", 18 [pid 6313] <... write resumed>) = 16777216 [pid 6315] <... write resumed>) = 18 [pid 6315] memfd_create("syzkaller", 0 [pid 6313] munmap(0x7feda9000000, 138412032 [pid 5848] <... close resumed>) = 0 [pid 6315] <... memfd_create resumed>) = 3 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6312] <... munmap resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6316 attached [pid 6312] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6316] set_robust_list(0x555584a2d760, 24 [pid 6312] <... openat resumed>) = 4 [pid 6312] ioctl(4, LOOP_SET_FD, 3 [pid 6316] <... set_robust_list resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6316 [pid 6316] chdir("./76") = 0 [pid 6312] <... ioctl resumed>) = 0 [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6313] <... munmap resumed>) = 0 [pid 6316] <... prctl resumed>) = 0 [pid 6316] setpgid(0, 0 [pid 6313] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] <... close resumed>) = 0 [pid 6316] <... setpgid resumed>) = 0 [pid 6312] close(3) = 0 [pid 6312] close(4 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6312] <... close resumed>) = 0 [pid 6312] mkdir("./file0", 0777) = 0 [pid 6312] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6316] <... openat resumed>) = 3 [pid 6316] write(3, "1000", 4) = 4 [pid 6316] close(3 [pid 6313] <... openat resumed>) = 4 executing program [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6316] <... close resumed>) = 0 [pid 6313] ioctl(4, LOOP_SET_FD, 3 [pid 6316] symlink("/dev/binderfs", "./binderfs" [pid 6313] <... ioctl resumed>) = 0 [pid 6316] <... symlink resumed>) = 0 [pid 6316] write(1, "executing program\n", 18 [pid 6313] close(3 [pid 6316] <... write resumed>) = 18 [pid 6313] <... close resumed>) = 0 ./strace-static-x86_64: Process 6317 attached [pid 6316] memfd_create("syzkaller", 0 [pid 6313] close(4 [pid 6317] set_robust_list(0x555584a2d760, 24 [pid 6313] <... close resumed>) = 0 [pid 6316] <... memfd_create resumed>) = 3 [pid 6313] mkdir("./file0", 0777 [pid 6317] <... set_robust_list resumed>) = 0 [pid 6316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6313] <... mkdir resumed>) = 0 [pid 6317] chdir("./75" [pid 6313] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6316] <... mmap resumed>) = 0x7feda9000000 [pid 6317] <... chdir resumed>) = 0 [pid 6317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6314] <... write resumed>) = 16777216 [pid 6314] munmap(0x7feda9000000, 138412032 [pid 6317] setpgid(0, 0) = 0 [ 308.056186][ T6312] loop2: detected capacity change from 0 to 32768 [ 308.093323][ T6313] loop0: detected capacity change from 0 to 32768 [pid 6317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6317 [pid 6317] <... openat resumed>) = 3 [pid 6313] <... mount resumed>) = 0 [pid 6317] write(3, "1000", 4 [pid 6313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6317] <... write resumed>) = 4 [pid 6313] <... openat resumed>) = 3 [pid 6317] close(3 [pid 6313] chdir("./file0" [pid 6317] <... close resumed>) = 0 [pid 6313] <... chdir resumed>) = 0 [ 308.120140][ T6312] [ 308.120140][ T6312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.120140][ T6312] [ 308.136274][ T6313] [ 308.136274][ T6313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.136274][ T6313] executing program [pid 6317] symlink("/dev/binderfs", "./binderfs" [pid 6313] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6317] <... symlink resumed>) = 0 [pid 6317] write(1, "executing program\n", 18 [pid 6313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6317] <... write resumed>) = 18 [pid 6313] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6317] memfd_create("syzkaller", 0 [pid 6314] <... munmap resumed>) = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6317] <... memfd_create resumed>) = 3 [pid 6312] <... mount resumed>) = 0 [pid 6312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6312] <... openat resumed>) = 3 [pid 6312] chdir("./file0") = 0 [pid 6312] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6312] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6317] <... mmap resumed>) = 0x7feda9000000 [pid 6314] <... openat resumed>) = 4 [ 308.174782][ T6313] [ 308.174782][ T6313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.174782][ T6313] [ 308.191533][ T6312] [ 308.191533][ T6312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.191533][ T6312] [ 308.204299][ T6314] loop4: detected capacity change from 0 to 32768 [ 308.210297][ T6313] [ 308.210297][ T6313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.210297][ T6313] [pid 6314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6313] <... lsetxattr resumed>) = 0 [pid 6313] exit_group(0 [pid 6314] close(3 [pid 6313] <... exit_group resumed>) = ? [pid 6314] <... close resumed>) = 0 [pid 6314] close(4) = 0 [pid 6314] mkdir("./file0", 0777) = 0 [pid 6314] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6313] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5847] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6312] <... lsetxattr resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 6312] exit_group(0 [pid 5847] newfstatat(3, "", [pid 6312] <... exit_group resumed>) = ? [pid 6312] +++ exited with 0 +++ [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6312, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [ 308.225584][ T6312] [ 308.225584][ T6312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.225584][ T6312] [ 308.236262][ T112] [ 308.236262][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.236262][ T112] [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./75/binderfs", [pid 5849] <... restart_syscall resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5847] unlink("./75/binderfs" [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 5849] unlink("./74/binderfs" [pid 5847] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... unlink resumed>) = 0 [ 308.283832][ T113] [ 308.283832][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.283832][ T113] [ 308.299593][ T6314] [ 308.299593][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.299593][ T6314] [ 308.331603][ T5847] [pid 5849] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6314] <... mount resumed>) = 0 [pid 6314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6314] chdir("./file0") = 0 [pid 6314] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 308.331603][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.331603][ T5847] [ 308.344238][ T5847] [ 308.344238][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.344238][ T5847] [ 308.356947][ T5849] [ 308.356947][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.356947][ T5849] [ 308.370592][ T6314] [ 308.370592][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.370592][ T6314] [pid 6314] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] <... umount2 resumed>) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 308.390032][ T5849] [ 308.390032][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.390032][ T5849] [ 308.417457][ T6314] [ 308.417457][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.417457][ T6314] [pid 5847] close(4 [pid 6314] <... lsetxattr resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5849] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./74/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4 [pid 5847] rmdir("./75/file0" [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./74/file0") = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, [pid 5847] getdents64(3, [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6314] exit_group(0 [pid 5849] rmdir("./74" [pid 5847] close(3 [pid 6314] <... exit_group resumed>) = ? [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5849] mkdir("./75", 0777 [pid 6314] +++ exited with 0 +++ [pid 5849] <... mkdir resumed>) = 0 [pid 5847] rmdir("./75" [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6314, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] <... rmdir resumed>) = 0 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... ioctl resumed>) = 0 [pid 5847] mkdir("./76", 0777 [pid 5849] close(3 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5851] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] ioctl(3, LOOP_CLR_FD [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... ioctl resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] close(3 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./75/binderfs") = 0 [ 308.455082][ T112] [ 308.455082][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.455082][ T112] [ 308.520075][ T5851] [ 308.520075][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.520075][ T5851] [ 308.570129][ T5851] [ 308.570129][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.570129][ T5851] [pid 5851] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5851] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./75/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./75") = 0 [pid 5851] mkdir("./76", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6318 ./strace-static-x86_64: Process 6318 attached [pid 6318] set_robust_list(0x555584a2d760, 24) = 0 [pid 6318] chdir("./76") = 0 [pid 6318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6318] setpgid(0, 0) = 0 [pid 6318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6318] write(3, "1000", 4) = 4 [pid 6318] close(3) = 0 [pid 6318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6318] write(1, "executing program\n", 18) = 18 [pid 5849] <... close resumed>) = 0 [pid 6318] memfd_create("syzkaller", 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6319 attached , child_tidptr=0x555584a2d750) = 6319 [pid 6318] <... memfd_create resumed>) = 3 [pid 6319] set_robust_list(0x555584a2d760, 24 [pid 6318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] <... set_robust_list resumed>) = 0 [pid 6318] <... mmap resumed>) = 0x7feda9000000 [pid 6315] <... write resumed>) = 16777216 [pid 6315] munmap(0x7feda9000000, 138412032 [pid 6319] chdir("./75" [pid 6317] <... write resumed>) = 16777216 [pid 6319] <... chdir resumed>) = 0 [pid 6317] munmap(0x7feda9000000, 138412032 [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6317] <... munmap resumed>) = 0 [pid 6319] <... prctl resumed>) = 0 [pid 6317] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6319] setpgid(0, 0 [pid 6317] <... openat resumed>) = 4 [pid 6319] <... setpgid resumed>) = 0 [pid 6317] ioctl(4, LOOP_SET_FD, 3 [pid 6315] <... munmap resumed>) = 0 [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6319] write(3, "1000", 4 [pid 6317] <... ioctl resumed>) = 0 [pid 6319] <... write resumed>) = 4 [pid 6317] close(3 [pid 6319] close(3 [pid 6317] <... close resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 6317] close(4 [pid 6315] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6317] <... close resumed>) = 0 [pid 6315] <... openat resumed>) = 4 [pid 6315] ioctl(4, LOOP_SET_FD, 3 [pid 6319] symlink("/dev/binderfs", "./binderfs" [pid 6317] mkdir("./file0", 0777) = 0 [pid 6319] <... symlink resumed>) = 0 [pid 6317] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6315] <... ioctl resumed>) = 0 [pid 6315] close(3executing program [pid 6319] write(1, "executing program\n", 18 [pid 6315] <... close resumed>) = 0 [pid 6319] <... write resumed>) = 18 [pid 6315] close(4 [pid 6319] memfd_create("syzkaller", 0) = 3 [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6317] <... mount resumed>) = 0 [pid 6319] <... mmap resumed>) = 0x7feda9000000 [pid 6317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6315] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 6315] mkdir("./file0", 0777 [pid 6317] <... openat resumed>) = 3 [pid 6315] <... mkdir resumed>) = 0 [pid 6317] chdir("./file0" [pid 6315] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6317] <... chdir resumed>) = 0 [ 308.890441][ T6317] loop3: detected capacity change from 0 to 32768 [ 308.907998][ T6315] loop5: detected capacity change from 0 to 32768 [ 308.926418][ T6317] [ 308.926418][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.926418][ T6317] [pid 6317] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6316] <... write resumed>) = 16777216 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6317] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0./strace-static-x86_64: Process 6320 attached [pid 6316] munmap(0x7feda9000000, 138412032 [pid 6315] <... mount resumed>) = 0 [pid 6320] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6320 [pid 6320] <... set_robust_list resumed>) = 0 [pid 6315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6320] chdir("./76" [pid 6315] <... openat resumed>) = 3 [pid 6320] <... chdir resumed>) = 0 [pid 6315] chdir("./file0" [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6315] <... chdir resumed>) = 0 [pid 6320] <... prctl resumed>) = 0 [pid 6315] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6320] setpgid(0, 0 [pid 6315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6320] <... setpgid resumed>) = 0 [ 308.973346][ T6315] [ 308.973346][ T6315] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.973346][ T6315] [ 308.975418][ T6317] [ 308.975418][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 308.975418][ T6317] [pid 6315] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6316] <... munmap resumed>) = 0 [pid 6315] <... lsetxattr resumed>) = 0 [pid 6316] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6320] <... openat resumed>) = 3 [pid 6316] <... openat resumed>) = 4 [pid 6315] exit_group(0 [pid 6320] write(3, "1000", 4 [pid 6316] ioctl(4, LOOP_SET_FD, 3 [pid 6315] <... exit_group resumed>) = ? [pid 6315] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6315, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [ 309.034183][ T6315] [ 309.034183][ T6315] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.034183][ T6315] [ 309.044438][ T6317] [ 309.044438][ T6317] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.044438][ T6317] [ 309.055384][ T6315] [ 309.055384][ T6315] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.055384][ T6315] [ 309.069642][ T112] [ 309.069642][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.069642][ T112] [pid 6320] <... write resumed>) = 4 [pid 6320] close(3) = 0 [pid 6317] <... lsetxattr resumed>) = 0 [pid 6320] symlink("/dev/binderfs", "./binderfs" [pid 6316] <... ioctl resumed>) = 0 [pid 6320] <... symlink resumed>) = 0 [pid 6317] exit_group(0 [pid 6316] close(3 [pid 6317] <... exit_group resumed>) = ? [pid 6316] <... close resumed>) = 0 [pid 5852] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6317] +++ exited with 0 +++ [pid 6316] close(4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6320] write(1, "executing program\n", 18 [pid 6316] <... close resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6317, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- executing program [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6320] <... write resumed>) = 18 [pid 6316] mkdir("./file0", 0777 [pid 5852] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6320] memfd_create("syzkaller", 0 [pid 6316] <... mkdir resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5850] <... restart_syscall resumed>) = 0 [pid 6320] <... memfd_create resumed>) = 3 [pid 6316] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] newfstatat(3, "", [pid 6320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6320] <... mmap resumed>) = 0x7feda9000000 [pid 5852] getdents64(3, [pid 5850] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./75/binderfs") = 0 [pid 5850] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 309.084165][ T6316] loop1: detected capacity change from 0 to 32768 [ 309.099368][ T113] [ 309.099368][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.099368][ T113] [pid 5852] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./75/binderfs") = 0 [ 309.148105][ T5850] [ 309.148105][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.148105][ T5850] [ 309.166317][ T6316] [ 309.166317][ T6316] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.166317][ T6316] [ 309.180006][ T5852] [ 309.180006][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.180006][ T5852] [ 309.191593][ T5850] [pid 5852] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 6316] <... mount resumed>) = 0 [pid 6316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./75/file0", [pid 6316] <... openat resumed>) = 3 [pid 6316] chdir("./file0" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6316] <... chdir resumed>) = 0 [pid 6316] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5850] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./75/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./75") = 0 [pid 5850] mkdir("./76", 0777 [pid 6316] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... mkdir resumed>) = 0 [ 309.191593][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.191593][ T5850] [ 309.213995][ T5852] [ 309.213995][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.213995][ T5852] [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 309.261466][ T6316] [ 309.261466][ T6316] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.261466][ T6316] [ 309.300027][ T6316] [ 309.300027][ T6316] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.300027][ T6316] [pid 6316] <... lsetxattr resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6316] exit_group(0 [pid 5852] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6316] <... exit_group resumed>) = ? [pid 5852] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", [pid 6316] +++ exited with 0 +++ [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] getdents64(4, [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5848] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./75/file0" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 309.322995][ T113] [ 309.322995][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.322995][ T113] [pid 5852] <... rmdir resumed>) = 0 [pid 6320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] getdents64(3, [pid 5848] unlink("./76/binderfs") = 0 [pid 5848] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./75") = 0 [pid 5852] mkdir("./76", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 309.403501][ T5848] [ 309.403501][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.403501][ T5848] [ 309.423849][ T5848] [ 309.423849][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.423849][ T5848] [pid 5852] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./76/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./76") = 0 [pid 5848] mkdir("./77", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 6318] <... write resumed>) = 16777216 [pid 5848] close(3 [pid 6318] munmap(0x7feda9000000, 138412032 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6321 attached [pid 6321] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6321 [pid 6321] <... set_robust_list resumed>) = 0 [pid 6321] chdir("./76") = 0 [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6321] setpgid(0, 0) = 0 [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6321] write(3, "1000", 4) = 4 [pid 6321] close(3) = 0 [pid 6321] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6321] write(1, "executing program\n", 18) = 18 [pid 6321] memfd_create("syzkaller", 0) = 3 [pid 6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6318] <... munmap resumed>) = 0 [pid 6318] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6318] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6318] close(3) = 0 [pid 6318] close(4) = 0 [pid 6318] mkdir("./file0", 0777) = 0 [ 309.647819][ T6318] loop0: detected capacity change from 0 to 32768 [pid 6318] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 309.703058][ T6318] [ 309.703058][ T6318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.703058][ T6318] [pid 6318] chdir("./file0") = 0 [pid 6318] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6318] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 6318] <... lsetxattr resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6318] exit_group(0) = ? [pid 6318] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6318, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5847] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6319] <... write resumed>) = 16777216 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 309.754805][ T6318] [ 309.754805][ T6318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.754805][ T6318] [ 309.779454][ T6318] [ 309.779454][ T6318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.779454][ T6318] [pid 5847] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./76/binderfs"./strace-static-x86_64: Process 6322 attached ) = 0 [pid 5847] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6322] set_robust_list(0x555584a2d760, 24) = 0 [pid 6322] chdir("./76") = 0 [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] setpgid(0, 0) = 0 [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6322 [pid 6322] <... openat resumed>) = 3 [pid 6319] munmap(0x7feda9000000, 138412032 [pid 6322] write(3, "1000", 4) = 4 executing program [pid 6322] close(3) = 0 [pid 6322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6322] write(1, "executing program\n", 18) = 18 [pid 6322] memfd_create("syzkaller", 0) = 3 [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6319] <... munmap resumed>) = 0 [ 309.819570][ T112] [ 309.819570][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.819570][ T112] [ 309.850546][ T5847] [ 309.850546][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.850546][ T5847] [pid 6321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6319] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... close resumed>) = 0 [pid 6319] <... openat resumed>) = 4 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6319] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6323 attached [pid 6320] <... write resumed>) = 16777216 [pid 6319] <... ioctl resumed>) = 0 [pid 6323] set_robust_list(0x555584a2d760, 24 [pid 6320] munmap(0x7feda9000000, 138412032 [pid 6319] close(3 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6323 [pid 6323] <... set_robust_list resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 6323] chdir("./77" [pid 6319] close(4 [pid 6323] <... chdir resumed>) = 0 [pid 6319] <... close resumed>) = 0 [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6319] mkdir("./file0", 0777 [pid 6323] <... prctl resumed>) = 0 [pid 6323] setpgid(0, 0 [pid 6319] <... mkdir resumed>) = 0 [pid 6323] <... setpgid resumed>) = 0 [pid 6319] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6323] write(3, "1000", 4) = 4 [pid 6323] close(3) = 0 [ 309.881164][ T5847] [ 309.881164][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.881164][ T5847] [ 309.900840][ T6319] loop2: detected capacity change from 0 to 32768 [pid 6323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6320] <... munmap resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6323] write(1, "executing program\n", 18 [pid 5847] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 6323] <... write resumed>) = 18 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./76/file0", [pid 6320] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6320] ioctl(4, LOOP_SET_FD, 3 [pid 6323] memfd_create("syzkaller", 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6323] <... memfd_create resumed>) = 3 [pid 5847] <... openat resumed>) = 4 [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] <... mount resumed>) = 0 [pid 5847] newfstatat(4, "", [pid 6323] <... mmap resumed>) = 0x7feda9000000 [pid 6319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6319] <... openat resumed>) = 3 [pid 5847] getdents64(4, [pid 6319] chdir("./file0") = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6319] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] getdents64(4, [pid 6319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6319] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 309.955427][ T6319] [ 309.955427][ T6319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.955427][ T6319] [ 309.974190][ T6320] loop4: detected capacity change from 0 to 32768 [pid 5847] close(4) = 0 [pid 5847] rmdir("./76/file0") = 0 [pid 6320] <... ioctl resumed>) = 0 [pid 6320] close(3 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6320] <... close resumed>) = 0 [pid 5847] close(3 [pid 6320] close(4) = 0 [pid 5847] <... close resumed>) = 0 [pid 6320] mkdir("./file0", 0777 [pid 5847] rmdir("./76" [pid 6320] <... mkdir resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6320] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] mkdir("./77", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 309.996252][ T6319] [ 309.996252][ T6319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 309.996252][ T6319] [pid 5847] close(3 [pid 6319] <... lsetxattr resumed>) = 0 [pid 6319] exit_group(0) = ? [pid 6319] +++ exited with 0 +++ [ 310.052886][ T6319] [ 310.052886][ T6319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.052886][ T6319] [ 310.091732][ T112] [ 310.091732][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.091732][ T112] [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./75/binderfs" [pid 6320] <... mount resumed>) = 0 [pid 6320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] <... unlink resumed>) = 0 [pid 5849] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6320] <... openat resumed>) = 3 [pid 6320] chdir("./file0") = 0 [pid 6320] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 310.116703][ T6320] [ 310.116703][ T6320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.116703][ T6320] [pid 6320] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6320] <... lsetxattr resumed>) = 0 [ 310.174562][ T6320] [ 310.174562][ T6320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.174562][ T6320] [ 310.196120][ T5849] [ 310.196120][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.196120][ T5849] [ 310.200140][ T6320] [ 310.200140][ T6320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.200140][ T6320] [pid 6320] exit_group(0) = ? [pid 6320] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./76/binderfs") = 0 [ 310.240004][ T112] [ 310.240004][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.240004][ T112] [ 310.254694][ T5849] [ 310.254694][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.254694][ T5849] [pid 5851] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6321] <... write resumed>) = 16777216 [pid 6321] munmap(0x7feda9000000, 138412032 [pid 6323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./75/file0", [pid 6321] <... munmap resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./75/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6321] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 310.302933][ T5851] [ 310.302933][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.302933][ T5851] [ 310.340886][ T5851] [ 310.340886][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.340886][ T5851] [pid 6321] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... openat resumed>) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./75/file0" [pid 6321] <... ioctl resumed>) = 0 [pid 6321] close(3 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6321] <... close resumed>) = 0 [pid 6321] close(4 [pid 5849] close(3 [pid 6321] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./75") = 0 [pid 5849] mkdir("./76", 0777 [pid 6321] mkdir("./file0", 0777) = 0 [pid 6321] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... mkdir resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6324 attached [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6324 [ 310.351351][ T6321] loop3: detected capacity change from 0 to 32768 [pid 5849] close(3 [pid 6324] set_robust_list(0x555584a2d760, 24) = 0 [pid 6324] chdir("./77") = 0 [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6324] setpgid(0, 0) = 0 [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... umount2 resumed>) = 0 [pid 6321] <... mount resumed>) = 0 [pid 6321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6321] chdir("./file0") = 0 [pid 6321] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 310.393944][ T6321] [ 310.393944][ T6321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.393944][ T6321] [pid 6321] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6324] <... openat resumed>) = 3 [pid 5851] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6324] write(3, "1000", 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6324] <... write resumed>) = 4 [pid 5851] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6324] close(3 [pid 5851] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6324] <... close resumed>) = 0 [pid 6324] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... openat resumed>) = 4 executing program [pid 6324] <... symlink resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 6324] write(1, "executing program\n", 18 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6324] <... write resumed>) = 18 [pid 5851] getdents64(4, [pid 6324] memfd_create("syzkaller", 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6324] <... memfd_create resumed>) = 3 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./76/file0") = 0 [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] getdents64(3, [pid 6324] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [ 310.436697][ T6321] [ 310.436697][ T6321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.436697][ T6321] [pid 5851] rmdir("./76") = 0 [pid 6321] <... lsetxattr resumed>) = 0 [pid 5851] mkdir("./77", 0777 [pid 6321] exit_group(0 [pid 5851] <... mkdir resumed>) = 0 [pid 6321] <... exit_group resumed>) = ? [pid 6321] +++ exited with 0 +++ [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./76/binderfs") = 0 [ 310.488137][ T6321] [ 310.488137][ T6321] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.488137][ T6321] [ 310.520438][ T113] [ 310.520438][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.520438][ T113] [pid 5850] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5850] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [ 310.563008][ T5850] [ 310.563008][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.563008][ T5850] [ 310.597487][ T5850] [ 310.597487][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.597487][ T5850] [pid 5850] close(4) = 0 [pid 5850] rmdir("./76/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./76") = 0 [pid 5850] mkdir("./77", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 5849] <... close resumed>) = 0 [pid 6322] <... write resumed>) = 16777216 [pid 6322] munmap(0x7feda9000000, 138412032 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6322] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6325 attached [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6325 [pid 6325] set_robust_list(0x555584a2d760, 24 [pid 6322] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6325] <... set_robust_list resumed>) = 0 [pid 6322] <... openat resumed>) = 4 [pid 6325] chdir("./76") = 0 [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] <... ioctl resumed>) = 0 [pid 6325] setpgid(0, 0) = 0 [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6325] write(3, "1000", 4) = 4 [pid 6325] close(3) = 0 [pid 6325] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6325] write(1, "executing program\n", 18) = 18 [pid 6325] memfd_create("syzkaller", 0) = 3 [pid 6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 310.751032][ T6322] loop5: detected capacity change from 0 to 32768 [pid 6322] close(3) = 0 [pid 6322] close(4) = 0 [pid 6322] mkdir("./file0", 0777) = 0 [pid 6322] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6323] <... write resumed>) = 16777216 [pid 6323] munmap(0x7feda9000000, 138412032 [pid 6322] <... mount resumed>) = 0 [pid 6322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6322] chdir("./file0") = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 310.795832][ T6322] [ 310.795832][ T6322] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.795832][ T6322] [pid 6322] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... close resumed>) = 0 [pid 6323] <... munmap resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6326 ./strace-static-x86_64: Process 6326 attached [pid 6324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6323] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6323] ioctl(4, LOOP_SET_FD, 3executing program [pid 6326] set_robust_list(0x555584a2d760, 24) = 0 [pid 6326] chdir("./77") = 0 [pid 6326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6326] setpgid(0, 0) = 0 [pid 6326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6326] write(3, "1000", 4) = 4 [pid 6326] close(3) = 0 [pid 6326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6323] <... ioctl resumed>) = 0 [pid 6326] write(1, "executing program\n", 18 [pid 6323] close(3 [pid 6326] <... write resumed>) = 18 [pid 6323] <... close resumed>) = 0 [pid 6326] memfd_create("syzkaller", 0 [pid 6323] close(4 [pid 6326] <... memfd_create resumed>) = 3 [pid 6323] <... close resumed>) = 0 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6323] mkdir("./file0", 0777 [pid 6326] <... mmap resumed>) = 0x7feda9000000 [pid 6323] <... mkdir resumed>) = 0 [ 310.851366][ T6322] [ 310.851366][ T6322] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.851366][ T6322] [ 310.884783][ T6323] loop1: detected capacity change from 0 to 32768 [ 310.889994][ T6322] [ 310.889994][ T6322] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.889994][ T6322] [pid 6323] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6322] <... lsetxattr resumed>) = 0 [pid 6322] exit_group(0) = ? [pid 6322] +++ exited with 0 +++ [pid 5850] <... close resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6322, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5852] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6323] <... mount resumed>) = 0 [pid 5852] newfstatat(3, "", [pid 6323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6323] <... openat resumed>) = 3 [pid 5852] getdents64(3, [pid 6323] chdir("./file0" [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6323] <... chdir resumed>) = 0 [pid 5852] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6323] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6323] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 310.920961][ T6323] [ 310.920961][ T6323] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.920961][ T6323] [ 310.950783][ T112] [ 310.950783][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.950783][ T112] [pid 5852] unlink("./76/binderfs") = 0 [pid 5852] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6327 attached [pid 6327] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6327 [pid 6327] <... set_robust_list resumed>) = 0 [pid 6327] chdir("./77") = 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 310.984695][ T6323] [ 310.984695][ T6323] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 310.984695][ T6323] [ 311.002665][ T5852] [ 311.002665][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.002665][ T5852] [ 311.026880][ T6323] [ 311.026880][ T6323] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6327] setpgid(0, 0) = 0 [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6327] write(3, "1000", 4) = 4 [pid 6323] <... lsetxattr resumed>) = 0 [pid 6323] exit_group(0 [pid 6327] close(3) = 0 [pid 6323] <... exit_group resumed>) = ? [pid 6323] +++ exited with 0 +++ [pid 6327] symlink("/dev/binderfs", "./binderfs" [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6327] <... symlink resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6327] write(1, "executing program\n", 18executing program [pid 5848] <... restart_syscall resumed>) = 0 [pid 6327] <... write resumed>) = 18 [pid 5852] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./76/file0", [pid 6327] memfd_create("syzkaller", 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6327] <... memfd_create resumed>) = 3 [pid 5852] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6327] <... mmap resumed>) = 0x7feda9000000 [pid 5852] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(4, "", [pid 5848] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5852] getdents64(4, [pid 5848] newfstatat(3, "", [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(3, [pid 5852] close(4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... close resumed>) = 0 [pid 5848] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./76/file0" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... rmdir resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5852] getdents64(3, [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] unlink("./77/binderfs" [pid 5852] close(3 [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5848] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./76") = 0 [pid 5852] mkdir("./77", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 311.026880][ T6323] [ 311.039640][ T5852] [ 311.039640][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.039640][ T5852] [ 311.061923][ T113] [ 311.061923][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.061923][ T113] [ 311.134919][ T5848] [ 311.134919][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.134919][ T5848] [ 311.170349][ T5848] [ 311.170349][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.170349][ T5848] [pid 5852] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./77/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./77") = 0 [pid 5848] mkdir("./78", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6324] <... write resumed>) = 16777216 [pid 6324] munmap(0x7feda9000000, 138412032 [pid 6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6324] <... munmap resumed>) = 0 [pid 6324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6328 attached [pid 6324] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6328 [pid 6328] set_robust_list(0x555584a2d760, 24) = 0 [pid 6328] chdir("./77") = 0 [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6324] <... ioctl resumed>) = 0 [pid 6324] close(3 [pid 6328] setpgid(0, 0 [pid 6324] <... close resumed>) = 0 [pid 6328] <... setpgid resumed>) = 0 [pid 6324] close(4) = 0 [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6324] mkdir("./file0", 0777) = 0 [pid 6328] <... openat resumed>) = 3 [ 311.450471][ T6324] loop0: detected capacity change from 0 to 32768 [pid 6324] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6328] write(3, "1000", 4) = 4 [pid 6328] close(3) = 0 [pid 6328] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6328] write(1, "executing program\n", 18) = 18 [pid 6328] memfd_create("syzkaller", 0 [pid 6324] <... mount resumed>) = 0 [pid 6324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 311.490720][ T6324] [ 311.490720][ T6324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.490720][ T6324] [pid 6324] chdir("./file0" [pid 6328] <... memfd_create resumed>) = 3 [pid 6324] <... chdir resumed>) = 0 [pid 6324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6324] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] <... close resumed>) = 0 [pid 6328] <... mmap resumed>) = 0x7feda9000000 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6329 attached , child_tidptr=0x555584a2d750) = 6329 [pid 6329] set_robust_list(0x555584a2d760, 24 [pid 6325] <... write resumed>) = 16777216 [pid 6329] <... set_robust_list resumed>) = 0 [pid 6329] chdir("./78") = 0 [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6325] munmap(0x7feda9000000, 138412032 [pid 6329] setpgid(0, 0) = 0 [ 311.531308][ T6324] [ 311.531308][ T6324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.531308][ T6324] [ 311.561453][ T6324] [ 311.561453][ T6324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.561453][ T6324] [pid 6324] <... lsetxattr resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6325] <... munmap resumed>) = 0 [pid 6329] <... openat resumed>) = 3 [pid 6324] exit_group(0) = ? [pid 6324] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6325] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6325] ioctl(4, LOOP_SET_FD, 3 [pid 6329] write(3, "1000", 4 [pid 5847] <... restart_syscall resumed>) = 0 [pid 6329] <... write resumed>) = 4 [pid 6329] close(3) = 0 [pid 6329] symlink("/dev/binderfs", "./binderfs" [pid 5847] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) executing program [pid 6329] <... symlink resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6329] write(1, "executing program\n", 18) = 18 [pid 6325] <... ioctl resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [pid 6329] memfd_create("syzkaller", 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6329] <... memfd_create resumed>) = 3 [pid 5847] getdents64(3, [pid 6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6329] <... mmap resumed>) = 0x7feda9000000 [pid 6325] close(3 [pid 5847] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./77/binderfs") = 0 [pid 5847] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6325] <... close resumed>) = 0 [pid 6325] close(4) = 0 [pid 6325] mkdir("./file0", 0777) = 0 [ 311.591326][ T112] [ 311.591326][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.591326][ T112] [ 311.606199][ T6325] loop2: detected capacity change from 0 to 32768 [ 311.661711][ T5847] [ 311.661711][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.661711][ T5847] [ 311.691078][ T5847] [ 311.691078][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.691078][ T5847] [pid 6325] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6326] <... write resumed>) = 16777216 [pid 6326] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 6325] <... mount resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] getdents64(4, [ 311.729103][ T6325] [ 311.729103][ T6325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.729103][ T6325] [pid 6325] chdir("./file0" [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6325] <... chdir resumed>) = 0 [pid 5847] close(4 [pid 6325] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... close resumed>) = 0 [pid 6325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] rmdir("./77/file0" [pid 6325] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6326] <... munmap resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] getdents64(3, [pid 6326] <... openat resumed>) = 4 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 5847] close(3) = 0 [pid 5847] rmdir("./77" [pid 6326] <... ioctl resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6326] close(3) = 0 [pid 6326] close(4 [pid 5847] mkdir("./78", 0777 [pid 6326] <... close resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 6326] mkdir("./file0", 0777 [pid 6328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6326] <... mkdir resumed>) = 0 [pid 6325] <... lsetxattr resumed>) = 0 [pid 6325] exit_group(0) = ? [ 311.775268][ T6325] [ 311.775268][ T6325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.775268][ T6325] [ 311.791639][ T6326] loop4: detected capacity change from 0 to 32768 [ 311.798876][ T6325] [ 311.798876][ T6325] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.798876][ T6325] [pid 6325] +++ exited with 0 +++ [pid 6326] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6327] <... write resumed>) = 16777216 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6327] munmap(0x7feda9000000, 138412032 [pid 5849] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6327] <... munmap resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./76/binderfs") = 0 [pid 5849] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6326] <... mount resumed>) = 0 [ 311.841547][ T113] [ 311.841547][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.841547][ T113] [ 311.871139][ T6326] [ 311.871139][ T6326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.871139][ T6326] [pid 6326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6326] chdir("./file0" [pid 6327] <... openat resumed>) = 4 [pid 6326] <... chdir resumed>) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6327] ioctl(4, LOOP_SET_FD, 3 [pid 6326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6326] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6327] <... ioctl resumed>) = 0 [pid 6327] close(3) = 0 [pid 6327] close(4) = 0 [pid 6327] mkdir("./file0", 0777) = 0 [ 311.920667][ T5849] [ 311.920667][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.920667][ T5849] [ 311.938960][ T6327] loop3: detected capacity change from 0 to 32768 [ 311.960428][ T6326] [ 311.960428][ T6326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.960428][ T6326] [pid 6327] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6326] <... lsetxattr resumed>) = 0 [pid 6326] exit_group(0) = ? [pid 6326] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6326, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6327] <... mount resumed>) = 0 [pid 6327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6327] chdir("./file0") = 0 [pid 6327] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 311.989730][ T6326] [ 311.989730][ T6326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.989730][ T6326] [ 312.002170][ T5849] [ 312.002170][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.002170][ T5849] [ 312.016891][ T6327] [ 312.016891][ T6327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.016891][ T6327] [ 312.026731][ T112] [ 312.026731][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.026731][ T112] [pid 6327] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5851] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./76/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./76/file0" [pid 5851] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... rmdir resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5849] getdents64(3, [pid 5851] newfstatat(3, "", [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(3) = 0 [pid 5851] getdents64(3, [pid 5849] rmdir("./76") = 0 [pid 5849] mkdir("./77", 0777) = 0 [ 312.068703][ T6327] [ 312.068703][ T6327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.068703][ T6327] [ 312.090104][ T6327] [ 312.090104][ T6327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.090104][ T6327] [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6327] <... lsetxattr resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6327] exit_group(0 [pid 5851] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6327] <... exit_group resumed>) = ? [pid 5851] unlink("./77/binderfs" [pid 6327] +++ exited with 0 +++ [pid 5851] <... unlink resumed>) = 0 [pid 5851] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5850] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 312.130014][ T113] [ 312.130014][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.130014][ T113] [pid 5847] <... close resumed>) = 0 [pid 5850] unlink("./77/binderfs" [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6330 [pid 5850] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6330 attached [pid 6330] set_robust_list(0x555584a2d760, 24 [pid 5850] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6330] <... set_robust_list resumed>) = 0 [pid 6330] chdir("./78") = 0 [pid 6330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6330] setpgid(0, 0) = 0 [pid 6330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 312.179435][ T5851] [ 312.179435][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.179435][ T5851] [ 312.212453][ T5851] [ 312.212453][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.212453][ T5851] [pid 6330] write(3, "1000", 4) = 4 [pid 6330] close(3) = 0 [pid 6330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6330] write(1, "executing program\n", 18executing program ) = 18 [pid 6330] memfd_create("syzkaller", 0) = 3 [pid 6330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... umount2 resumed>) = 0 [pid 6330] <... mmap resumed>) = 0x7feda9000000 [pid 5851] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6331 attached [ 312.234108][ T5850] [ 312.234108][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.234108][ T5850] [ 312.265630][ T5850] [ 312.265630][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.265630][ T5850] [pid 5851] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] set_robust_list(0x555584a2d760, 24 [pid 5851] <... openat resumed>) = 4 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6331 [pid 6331] <... set_robust_list resumed>) = 0 [pid 5851] newfstatat(4, "", [pid 6331] chdir("./77") = 0 [pid 6331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6331] setpgid(0, 0) = 0 [pid 6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... umount2 resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6331] <... openat resumed>) = 3 [pid 5851] getdents64(4, [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] newfstatat(AT_FDCWD, "./77/file0", [pid 6331] write(3, "1000", 4 [pid 5851] getdents64(4, [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] close(4 [pid 6331] <... write resumed>) = 4 [pid 5851] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] rmdir("./77/file0" [pid 5850] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] close(3) = 0 [pid 6331] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6331] write(1, "executing program\n", 18) = 18 [pid 6331] memfd_create("syzkaller", 0) = 3 [pid 6331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... rmdir resumed>) = 0 [pid 6331] <... mmap resumed>) = 0x7feda9000000 [pid 5851] getdents64(3, [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... close resumed>) = 0 [pid 5850] getdents64(4, [pid 5851] rmdir("./77" [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5850] close(4) = 0 [pid 5851] mkdir("./78", 0777 [pid 5850] rmdir("./77/file0") = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5850] getdents64(3, [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] close(3 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5850] <... close resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5850] rmdir("./77" [pid 5851] close(3 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] mkdir("./78", 0777 [pid 6328] <... write resumed>) = 16777216 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6328] munmap(0x7feda9000000, 138412032 [pid 5850] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6328] <... munmap resumed>) = 0 [pid 6328] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6329] <... write resumed>) = 16777216 [pid 6328] close(3) = 0 [pid 6329] munmap(0x7feda9000000, 138412032 [ 312.480366][ T6328] loop5: detected capacity change from 0 to 32768 [pid 6328] close(4) = 0 [pid 6328] mkdir("./file0", 0777) = 0 [pid 6328] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6329] <... munmap resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6328] <... mount resumed>) = 0 [pid 6328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6328] chdir("./file0") = 0 [pid 6328] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 312.556419][ T6328] [ 312.556419][ T6328] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.556419][ T6328] [ 312.590908][ T6329] loop1: detected capacity change from 0 to 32768 [pid 6328] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6329] close(3) = 0 [pid 6329] close(4) = 0 [pid 6329] mkdir("./file0", 0777) = 0 [ 312.604537][ T6328] [ 312.604537][ T6328] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.604537][ T6328] [ 312.627784][ T6328] [ 312.627784][ T6328] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.627784][ T6328] [pid 6329] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6328] <... lsetxattr resumed>) = 0 [pid 6328] exit_group(0) = ? [pid 6328] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5852] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, [pid 6329] <... mount resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... close resumed>) = 0 [pid 6329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5852] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6329] chdir("./file0" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6329] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6332 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6332 [ 312.662664][ T6329] [ 312.662664][ T6329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.662664][ T6329] [ 312.676570][ T112] [ 312.676570][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.676570][ T112] [pid 6329] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] unlink("./77/binderfs" [pid 6332] set_robust_list(0x555584a2d760, 24 [pid 6329] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... unlink resumed>) = 0 [pid 6332] <... set_robust_list resumed>) = 0 [pid 6329] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6332] chdir("./78" [pid 5850] <... close resumed>) = 0 [pid 6332] <... chdir resumed>) = 0 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6333 attached , child_tidptr=0x555584a2d750) = 6333 [pid 6333] set_robust_list(0x555584a2d760, 24) = 0 [pid 6333] chdir("./78") = 0 [pid 6332] <... prctl resumed>) = 0 [pid 6333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6332] setpgid(0, 0 [pid 6333] <... prctl resumed>) = 0 [pid 6333] setpgid(0, 0) = 0 [pid 6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6333] write(3, "1000", 4) = 4 [ 312.714857][ T6329] [ 312.714857][ T6329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.714857][ T6329] [ 312.736504][ T5852] [ 312.736504][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.736504][ T5852] [ 312.757592][ T6329] [pid 6333] close(3) = 0 [pid 6333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6332] <... setpgid resumed>) = 0 [pid 6333] write(1, "executing program\n", 18executing program [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6333] <... write resumed>) = 18 [pid 6332] <... openat resumed>) = 3 [pid 6333] memfd_create("syzkaller", 0) = 3 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6332] write(3, "1000", 4) = 4 [pid 6332] close(3) = 0 [pid 6332] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6332] write(1, "executing program\n", 18) = 18 [pid 6332] memfd_create("syzkaller", 0 [pid 6329] <... lsetxattr resumed>) = 0 [pid 6332] <... memfd_create resumed>) = 3 [pid 6329] exit_group(0 [pid 5852] <... umount2 resumed>) = 0 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6329] <... exit_group resumed>) = ? [pid 6332] <... mmap resumed>) = 0x7feda9000000 [pid 6329] +++ exited with 0 +++ [pid 5852] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [ 312.757592][ T6329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.757592][ T6329] [ 312.772063][ T5852] [ 312.772063][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.772063][ T5852] [ 312.801486][ T112] [ 312.801486][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.801486][ T112] [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./77/file0", [pid 5848] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] getdents64(3, [pid 5852] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(4, [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5852] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5848] unlink("./78/binderfs" [pid 5852] rmdir("./77/file0" [pid 5848] <... unlink resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5848] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./77") = 0 [pid 5852] mkdir("./78", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 312.911386][ T5848] [ 312.911386][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.911386][ T5848] [ 312.937427][ T5848] [ 312.937427][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.937427][ T5848] [pid 5852] close(3 [pid 6330] <... write resumed>) = 16777216 [pid 6330] munmap(0x7feda9000000, 138412032 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] rmdir("./78/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./78" [pid 6331] <... write resumed>) = 16777216 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./79", 0777 [pid 6330] <... munmap resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 6330] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6330] ioctl(4, LOOP_SET_FD, 3 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6331] munmap(0x7feda9000000, 138412032 [pid 6330] <... ioctl resumed>) = 0 [pid 6330] close(3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6330] <... close resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3 [pid 6330] close(4) = 0 [pid 6330] mkdir("./file0", 0777) = 0 [pid 6330] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6331] <... munmap resumed>) = 0 [pid 6330] <... mount resumed>) = 0 [pid 6331] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6331] <... openat resumed>) = 4 [pid 6330] <... openat resumed>) = 3 [ 313.102620][ T6330] loop0: detected capacity change from 0 to 32768 [ 313.137354][ T6330] [ 313.137354][ T6330] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.137354][ T6330] [pid 6331] ioctl(4, LOOP_SET_FD, 3 [pid 6330] chdir("./file0") = 0 [pid 6330] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6330] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6331] <... ioctl resumed>) = 0 [pid 6331] close(3) = 0 [pid 6331] close(4) = 0 [pid 6331] mkdir("./file0", 0777) = 0 [ 313.169323][ T6331] loop2: detected capacity change from 0 to 32768 [ 313.178418][ T6330] [ 313.178418][ T6330] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.178418][ T6330] [ 313.205644][ T6330] [ 313.205644][ T6330] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.205644][ T6330] [pid 6331] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... close resumed>) = 0 [pid 6330] <... lsetxattr resumed>) = 0 [pid 6330] exit_group(0) = ? [pid 6330] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6330, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [ 313.229225][ T6331] [ 313.229225][ T6331] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.229225][ T6331] [ 313.261016][ T113] [ 313.261016][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.261016][ T113] [pid 6331] <... mount resumed>) = 0 [pid 5847] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6331] chdir("./file0") = 0 [pid 6331] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6334 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6334 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6334] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6334] chdir("./78" [pid 5847] unlink("./78/binderfs" [pid 6334] <... chdir resumed>) = 0 [pid 6334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... unlink resumed>) = 0 [pid 6334] <... prctl resumed>) = 0 [pid 6334] setpgid(0, 0 [pid 5847] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6334] <... setpgid resumed>) = 0 [pid 6334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6334] write(3, "1000", 4) = 4 [pid 6334] close(3) = 0 [ 313.282173][ T6331] [ 313.282173][ T6331] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.282173][ T6331] [pid 6334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6334] write(1, "executing program\n", 18 [pid 6331] <... lsetxattr resumed>) = 0 [pid 6331] exit_group(0) = ? executing program [pid 6331] +++ exited with 0 +++ [pid 6334] <... write resumed>) = 18 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6334] memfd_create("syzkaller", 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./77/binderfs") = 0 [ 313.331137][ T6331] [ 313.331137][ T6331] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.331137][ T6331] [ 313.342283][ T5847] [ 313.342283][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.342283][ T5847] [ 313.364718][ T113] [ 313.364718][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.364718][ T113] [ 313.374773][ T5847] [pid 5849] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6334] <... memfd_create resumed>) = 3 [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./77/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./77/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./77") = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5849] mkdir("./78", 0777 [pid 5847] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... mkdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./78/file0", [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 313.374773][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.374773][ T5847] [ 313.386393][ T5849] [ 313.386393][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.386393][ T5849] [ 313.400149][ T5849] [ 313.400149][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.400149][ T5849] [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] close(3 [pid 5847] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... close resumed>) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... close resumed>) = 0 [pid 5847] rmdir("./78/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./78"./strace-static-x86_64: Process 6335 attached ) = 0 [pid 5847] mkdir("./79", 0777 [pid 6335] set_robust_list(0x555584a2d760, 24 [pid 5847] <... mkdir resumed>) = 0 [pid 6335] <... set_robust_list resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6335] chdir("./79") = 0 [pid 5847] <... openat resumed>) = 3 [pid 6335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6335 [pid 5847] close(3 [pid 6335] <... prctl resumed>) = 0 executing program [pid 6335] setpgid(0, 0) = 0 [pid 6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6335] write(3, "1000", 4) = 4 [pid 6335] close(3) = 0 [pid 6335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6335] write(1, "executing program\n", 18) = 18 [pid 6335] memfd_create("syzkaller", 0) = 3 [pid 6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6333] <... write resumed>) = 16777216 [pid 6333] munmap(0x7feda9000000, 138412032) = 0 [pid 6332] <... write resumed>) = 16777216 [pid 6332] munmap(0x7feda9000000, 138412032 [pid 6333] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6333] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6333] close(3 [pid 6332] <... munmap resumed>) = 0 [pid 6333] <... close resumed>) = 0 [pid 6333] close(4) = 0 [pid 6333] mkdir("./file0", 0777) = 0 [ 313.641991][ T6333] loop3: detected capacity change from 0 to 32768 [ 313.681756][ T6333] [ 313.681756][ T6333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.681756][ T6333] [pid 6333] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6333] <... mount resumed>) = 0 [pid 6332] <... openat resumed>) = 4 [pid 6333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 6333] <... openat resumed>) = 3 [pid 6333] chdir("./file0" [pid 6332] <... ioctl resumed>) = 0 [pid 6333] <... chdir resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6332] close(3 [pid 6333] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6332] <... close resumed>) = 0 [pid 6333] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6332] close(4) = 0 [pid 6332] mkdir("./file0", 0777 [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6332] <... mkdir resumed>) = 0 [ 313.730830][ T6332] loop4: detected capacity change from 0 to 32768 [ 313.744563][ T6333] [ 313.744563][ T6333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.744563][ T6333] [pid 6332] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6336 ./strace-static-x86_64: Process 6336 attached [pid 6336] set_robust_list(0x555584a2d760, 24) = 0 [pid 6336] chdir("./78") = 0 [pid 6336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6336] setpgid(0, 0) = 0 [pid 6336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6336] write(3, "1000", 4) = 4 [pid 6336] close(3) = 0 [pid 6336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6336] write(1, "executing program\n", 18executing program ) = 18 [pid 6333] <... lsetxattr resumed>) = 0 [pid 6336] memfd_create("syzkaller", 0 [pid 6333] exit_group(0 [pid 6332] <... mount resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6333] <... exit_group resumed>) = ? [pid 6332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6336] <... memfd_create resumed>) = 3 [pid 6333] +++ exited with 0 +++ [pid 6332] <... openat resumed>) = 3 [pid 6336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- ./strace-static-x86_64: Process 6337 attached [pid 6332] chdir("./file0" [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6337] set_robust_list(0x555584a2d760, 24 [pid 6332] <... chdir resumed>) = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 6337] <... set_robust_list resumed>) = 0 [pid 6332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6337 [pid 6337] chdir("./79" [pid 6332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 313.780176][ T6333] [ 313.780176][ T6333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.780176][ T6333] [ 313.807364][ T6332] [ 313.807364][ T6332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.807364][ T6332] [ 313.819601][ T112] [ 313.819601][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.819601][ T112] [pid 6337] <... chdir resumed>) = 0 [pid 6332] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./78/binderfs") = 0 [pid 5850] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 313.866757][ T6332] [ 313.866757][ T6332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.866757][ T6332] [ 313.879252][ T5850] [ 313.879252][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.879252][ T5850] [ 313.887869][ T6332] [ 313.887869][ T6332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.887869][ T6332] [ 313.903797][ T5850] [ 313.903797][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.903797][ T5850] [pid 6337] setpgid(0, 0 [pid 6335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6337] <... setpgid resumed>) = 0 [pid 6332] <... lsetxattr resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 6332] exit_group(0 [pid 5850] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./78/file0", [pid 6332] <... exit_group resumed>) = ? [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6332] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6332, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 6337] <... openat resumed>) = 3 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6337] write(3, "1000", 4 [pid 5850] <... openat resumed>) = 4 [pid 6337] <... write resumed>) = 4 [pid 6337] close(3 [pid 5850] newfstatat(4, "", [pid 6337] <... close resumed>) = 0 [pid 6337] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] getdents64(4, [pid 5851] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] close(4 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... close resumed>) = 0 [pid 5851] getdents64(3, [pid 5850] rmdir("./78/file0" [pid 6337] <... symlink resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] <... rmdir resumed>) = 0 [pid 5851] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6337] write(1, "executing program\n", 18 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5850] close(3 [pid 6337] <... write resumed>) = 18 [pid 5850] <... close resumed>) = 0 [pid 5850] rmdir("./78") = 0 [pid 5850] mkdir("./79", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6337] memfd_create("syzkaller", 0 [pid 5851] unlink("./78/binderfs" [pid 5850] <... openat resumed>) = 3 [pid 6337] <... memfd_create resumed>) = 3 [pid 5851] <... unlink resumed>) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6337] <... mmap resumed>) = 0x7feda9000000 [ 313.921412][ T113] [ 313.921412][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.921412][ T113] [pid 5850] <... ioctl resumed>) = 0 [ 313.964261][ T5851] [ 313.964261][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.964261][ T5851] [pid 5850] close(3 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 314.010800][ T5851] [ 314.010800][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.010800][ T5851] [pid 5851] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./78/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./78") = 0 [pid 5851] mkdir("./79", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6338 attached , child_tidptr=0x555584a2d750) = 6338 [pid 6338] set_robust_list(0x555584a2d760, 24) = 0 [pid 6338] chdir("./79") = 0 [pid 6337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6334] <... write resumed>) = 16777216 [pid 6338] <... prctl resumed>) = 0 [pid 6338] setpgid(0, 0) = 0 [pid 6338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 6338] write(3, "1000", 4) = 4 [pid 6338] close(3) = 0 [pid 6338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6338] write(1, "executing program\n", 18) = 18 [pid 6338] memfd_create("syzkaller", 0) = 3 [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6334] munmap(0x7feda9000000, 138412032) = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6334] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6335] <... write resumed>) = 16777216 [pid 6334] close(3 [pid 6335] munmap(0x7feda9000000, 138412032 [pid 6334] <... close resumed>) = 0 [pid 6334] close(4) = 0 [pid 6335] <... munmap resumed>) = 0 [pid 6334] mkdir("./file0", 0777) = 0 [ 314.352680][ T6334] loop5: detected capacity change from 0 to 32768 [pid 6335] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6334] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6335] <... openat resumed>) = 4 [pid 6335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6335] close(3) = 0 [pid 6335] close(4) = 0 [pid 6335] mkdir("./file0", 0777) = 0 [ 314.422655][ T6335] loop1: detected capacity change from 0 to 32768 [ 314.424021][ T6334] [ 314.424021][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.424021][ T6334] [pid 6335] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6334] <... mount resumed>) = 0 [pid 6334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6334] chdir("./file0") = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 314.473458][ T6335] [ 314.473458][ T6335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.473458][ T6335] [pid 6334] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6335] <... mount resumed>) = 0 [pid 6335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6335] chdir("./file0") = 0 [pid 6335] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5851] <... close resumed>) = 0 [pid 6335] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 314.517486][ T6334] [ 314.517486][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.517486][ T6334] [ 314.542116][ T6334] [ 314.542116][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.542116][ T6334] [ 314.544096][ T6335] [ 314.544096][ T6335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.544096][ T6335] [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6339 attached [pid 6334] <... lsetxattr resumed>) = 0 [pid 6339] set_robust_list(0x555584a2d760, 24 [pid 6334] exit_group(0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6339 [pid 6334] <... exit_group resumed>) = ? [pid 6336] <... write resumed>) = 16777216 [pid 6339] <... set_robust_list resumed>) = 0 [pid 6334] +++ exited with 0 +++ [pid 6339] chdir("./79" [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6334, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 6339] <... chdir resumed>) = 0 [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6339] setpgid(0, 0) = 0 [pid 6336] munmap(0x7feda9000000, 138412032 [pid 6339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 6339] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 314.566437][ T113] [ 314.566437][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.566437][ T113] [pid 6339] write(3, "1000", 4 [pid 5852] getdents64(3, [pid 6339] <... write resumed>) = 4 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6339] close(3) = 0 [pid 5852] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6339] symlink("/dev/binderfs", "./binderfs" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6339] <... symlink resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6339] write(1, "executing program\n", 18 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6339] <... write resumed>) = 18 [pid 5852] unlink("./78/binderfs" [pid 6339] memfd_create("syzkaller", 0 [pid 6336] <... munmap resumed>) = 0 [pid 5852] <... unlink resumed>) = 0 [pid 6339] <... memfd_create resumed>) = 3 [pid 5852] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6336] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6336] ioctl(4, LOOP_SET_FD, 3 [pid 6335] <... lsetxattr resumed>) = 0 [ 314.610377][ T6335] [ 314.610377][ T6335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.610377][ T6335] [ 314.640694][ T6336] loop2: detected capacity change from 0 to 32768 [ 314.647946][ T5852] [ 314.647946][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.647946][ T5852] [ 314.648104][ T112] [pid 6335] exit_group(0) = ? [pid 6335] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6335, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 6336] <... ioctl resumed>) = 0 [pid 6336] close(3) = 0 [pid 6336] close(4) = 0 [pid 6336] mkdir("./file0", 0777) = 0 [pid 6336] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./79/binderfs") = 0 [pid 5848] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6337] <... write resumed>) = 16777216 [pid 6337] munmap(0x7feda9000000, 138412032 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 314.648104][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.648104][ T112] [ 314.680176][ T5852] [ 314.680176][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.680176][ T5852] [ 314.700205][ T5848] [ 314.700205][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.700205][ T5848] [pid 5852] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6337] <... munmap resumed>) = 0 [pid 6336] <... mount resumed>) = 0 [pid 5852] getdents64(4, [pid 6336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6336] <... openat resumed>) = 3 [pid 5852] close(4 [pid 6336] chdir("./file0" [pid 5852] <... close resumed>) = 0 [ 314.724075][ T6336] [ 314.724075][ T6336] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.724075][ T6336] [ 314.746902][ T5848] [ 314.746902][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.746902][ T5848] [pid 6337] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6336] <... chdir resumed>) = 0 [pid 5852] rmdir("./78/file0" [pid 6337] <... openat resumed>) = 4 [pid 6336] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6336] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5852] getdents64(3, [pid 6337] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5848] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./78") = 0 [pid 5852] mkdir("./79", 0777) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6337] <... ioctl resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./79/file0", [pid 6337] close(3) = 0 [pid 6337] close(4) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5848] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... ioctl resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] close(3 [pid 5848] <... openat resumed>) = 4 [pid 6337] mkdir("./file0", 0777) = 0 [pid 6337] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 314.781392][ T6336] [ 314.781392][ T6336] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.781392][ T6336] [ 314.794174][ T6337] loop0: detected capacity change from 0 to 32768 [ 314.820087][ T6336] [ 314.820087][ T6336] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.820087][ T6336] [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./79/file0") = 0 [pid 6336] <... lsetxattr resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./79") = 0 [pid 5848] mkdir("./80", 0777 [pid 6336] exit_group(0 [pid 5848] <... mkdir resumed>) = 0 [pid 6336] <... exit_group resumed>) = ? [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6336] +++ exited with 0 +++ [pid 5848] <... openat resumed>) = 3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6336, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./78/binderfs") = 0 [pid 5849] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6337] <... mount resumed>) = 0 [pid 6337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6337] chdir("./file0") = 0 [pid 6337] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 314.834806][ T6337] [ 314.834806][ T6337] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.834806][ T6337] [ 314.852828][ T113] [ 314.852828][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.852828][ T113] [ 314.904317][ T6337] [ 314.904317][ T6337] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.904317][ T6337] [ 314.920467][ T5849] [ 314.920467][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.920467][ T5849] [ 314.948589][ T6337] [pid 6337] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6337] exit_group(0) = ? [ 314.948589][ T6337] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.948589][ T6337] [pid 6337] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5847] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./79/binderfs") = 0 [pid 5847] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 314.977751][ T5849] [ 314.977751][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.977751][ T5849] [ 314.977903][ T113] [ 314.977903][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.977903][ T113] [pid 5849] newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./78/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./78/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./78") = 0 [pid 5849] mkdir("./79", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 315.030891][ T5847] [ 315.030891][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.030891][ T5847] [ 315.090125][ T5847] [ 315.090125][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.090125][ T5847] [pid 5849] close(3 [pid 6338] <... write resumed>) = 16777216 [pid 6338] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5847] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6340 attached [pid 6338] <... munmap resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./79/file0", [pid 6338] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6338] <... openat resumed>) = 4 [pid 5847] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6340] set_robust_list(0x555584a2d760, 24 [pid 6338] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] <... set_robust_list resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6340 [pid 5848] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", [pid 6340] chdir("./79" [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6340] <... chdir resumed>) = 0 [pid 5847] getdents64(4, [pid 6340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6340] <... prctl resumed>) = 0 [pid 5847] getdents64(4, [pid 6340] setpgid(0, 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6340] <... setpgid resumed>) = 0 [pid 5847] close(4 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... close resumed>) = 0 [pid 6340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] rmdir("./79/file0" [pid 6340] <... openat resumed>) = 3 [pid 6340] write(3, "1000", 4 [pid 5847] <... rmdir resumed>) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./79" [pid 6340] <... write resumed>) = 4 [pid 6340] close(3) = 0 [pid 6340] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5847] <... rmdir resumed>) = 0 [pid 5847] mkdir("./80", 0777 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6341 [pid 6340] write(1, "executing program\n", 18) = 18 [pid 6340] memfd_create("syzkaller", 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6340] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6341 attached [pid 6338] <... ioctl resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6341] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 6338] close(3 [pid 5847] close(3 [pid 6340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6338] <... close resumed>) = 0 [pid 6338] close(4) = 0 [pid 6340] <... mmap resumed>) = 0x7feda9000000 [pid 6338] mkdir("./file0", 0777) = 0 [pid 6338] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 315.205787][ T6338] loop3: detected capacity change from 0 to 32768 [pid 6341] chdir("./80") = 0 [pid 6341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6341] setpgid(0, 0) = 0 [pid 6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6341] write(3, "1000", 4) = 4 [pid 6341] close(3) = 0 [pid 6341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6338] <... mount resumed>) = 0 [pid 6338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6338] chdir("./file0") = 0 [pid 6338] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 315.274659][ T6338] [ 315.274659][ T6338] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.274659][ T6338] [pid 6338] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0executing program [pid 6341] write(1, "executing program\n", 18) = 18 [pid 6341] memfd_create("syzkaller", 0 [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6342 ./strace-static-x86_64: Process 6342 attached [pid 6341] <... memfd_create resumed>) = 3 [pid 6342] set_robust_list(0x555584a2d760, 24) = 0 [pid 6342] chdir("./79" [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 315.330084][ T6338] [ 315.330084][ T6338] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.330084][ T6338] [ 315.355416][ T6338] [ 315.355416][ T6338] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.355416][ T6338] [pid 6338] <... lsetxattr resumed>) = 0 [pid 6342] <... chdir resumed>) = 0 [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6338] exit_group(0) = ? [pid 6338] +++ exited with 0 +++ [pid 6342] <... prctl resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6338, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=34 /* 0.34 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6342] setpgid(0, 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 6342] <... setpgid resumed>) = 0 [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6342] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6342] write(3, "1000", 4 [pid 5850] newfstatat(3, "", [pid 6342] <... write resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6342] close(3 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6342] <... close resumed>) = 0 [pid 6342] symlink("/dev/binderfs", "./binderfs" [pid 5850] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6342] <... symlink resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6339] <... write resumed>) = 16777216 [ 315.387856][ T112] [ 315.387856][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.387856][ T112] [pid 5850] unlink("./79/binderfs" [pid 6342] write(1, "executing program\n", 18executing program [pid 5850] <... unlink resumed>) = 0 [pid 6342] <... write resumed>) = 18 [pid 6342] memfd_create("syzkaller", 0 [pid 5850] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6342] <... memfd_create resumed>) = 3 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6339] munmap(0x7feda9000000, 138412032 [pid 6342] <... mmap resumed>) = 0x7feda9000000 [pid 6339] <... munmap resumed>) = 0 [pid 6339] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6339] <... openat resumed>) = 4 [pid 6339] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... close resumed>) = 0 [pid 6339] <... ioctl resumed>) = 0 [pid 6339] close(3) = 0 [pid 6339] close(4) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6343 attached [pid 5850] <... umount2 resumed>) = 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6343 [ 315.470003][ T5850] [ 315.470003][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.470003][ T5850] [ 315.494969][ T5850] [ 315.494969][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.494969][ T5850] [ 315.511503][ T6339] loop4: detected capacity change from 0 to 32768 [pid 6343] set_robust_list(0x555584a2d760, 24) = 0 [pid 6339] mkdir("./file0", 0777 [pid 5850] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6339] <... mkdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6339] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6343] chdir("./80" [pid 5850] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6343] <... chdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./79/file0") = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./79") = 0 [pid 5850] mkdir("./80", 0777 [pid 6343] <... prctl resumed>) = 0 [pid 6343] setpgid(0, 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6343] <... setpgid resumed>) = 0 [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6343] write(3, "1000", 4) = 4 [pid 6343] close(3) = 0 [pid 6343] symlink("/dev/binderfs", "./binderfs") = 0 [ 315.591557][ T6339] [ 315.591557][ T6339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.591557][ T6339] [pid 6343] write(1, "executing program\n", 18 [pid 6339] <... mount resumed>) = 0 executing program [pid 6343] <... write resumed>) = 18 [pid 6339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6343] memfd_create("syzkaller", 0) = 3 [pid 6339] chdir("./file0" [pid 6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6339] <... chdir resumed>) = 0 [pid 6343] <... mmap resumed>) = 0x7feda9000000 [pid 6339] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6339] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 315.670645][ T6339] [ 315.670645][ T6339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.670645][ T6339] [ 315.720291][ T6339] [ 315.720291][ T6339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.720291][ T6339] [pid 6341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6339] <... lsetxattr resumed>) = 0 [pid 6339] exit_group(0) = ? [pid 6342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6339] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6339, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./79/binderfs") = 0 [ 315.761031][ T113] [ 315.761031][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.761031][ T113] [pid 5851] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6344 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6344 attached [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6344] set_robust_list(0x555584a2d760, 24 [pid 5851] close(4) = 0 [pid 5851] rmdir("./79/file0") = 0 [ 315.835809][ T5851] [ 315.835809][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.835809][ T5851] [ 315.862545][ T5851] [ 315.862545][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 315.862545][ T5851] [pid 6344] <... set_robust_list resumed>) = 0 [pid 5851] getdents64(3, [pid 6344] chdir("./80" [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6344] <... chdir resumed>) = 0 [pid 5851] close(3 [pid 6344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... close resumed>) = 0 [pid 6344] <... prctl resumed>) = 0 [pid 5851] rmdir("./79" [pid 6344] setpgid(0, 0 [pid 5851] <... rmdir resumed>) = 0 [pid 6344] <... setpgid resumed>) = 0 [pid 6344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] mkdir("./80", 0777 [pid 6344] write(3, "1000", 4 [pid 5851] <... mkdir resumed>) = 0 [pid 6344] <... write resumed>) = 4 [pid 6344] close(3 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6344] <... close resumed>) = 0 [pid 5851] <... openat resumed>) = 3 [pid 6344] symlink("/dev/binderfs", "./binderfs" [pid 5851] ioctl(3, LOOP_CLR_FD [pid 6344] <... symlink resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 6344] write(1, "executing program\n", 18 [pid 5851] close(3executing program [pid 6344] <... write resumed>) = 18 [pid 6344] memfd_create("syzkaller", 0) = 3 [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6340] <... write resumed>) = 16777216 [pid 6340] munmap(0x7feda9000000, 138412032) = 0 [pid 6340] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6340] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6340] close(3) = 0 [pid 6340] close(4) = 0 [pid 6340] mkdir("./file0", 0777) = 0 [pid 6340] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [ 316.091840][ T6340] loop5: detected capacity change from 0 to 32768 [ 316.128329][ T6340] [ 316.128329][ T6340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.128329][ T6340] [pid 6340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6340] chdir("./file0") = 0 [pid 6340] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6340] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6341] <... write resumed>) = 16777216 [pid 6341] munmap(0x7feda9000000, 138412032 [pid 6340] <... lsetxattr resumed>) = 0 [ 316.164253][ T6340] [ 316.164253][ T6340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.164253][ T6340] [ 316.203464][ T6340] [ 316.203464][ T6340] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.203464][ T6340] [pid 6341] <... munmap resumed>) = 0 [pid 6340] exit_group(0) = ? [pid 6340] +++ exited with 0 +++ [pid 6341] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6340, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6342] <... write resumed>) = 16777216 [pid 6341] <... openat resumed>) = 4 [pid 5851] <... close resumed>) = 0 [pid 6341] ioctl(4, LOOP_SET_FD, 3 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6345 attached [pid 5852] <... restart_syscall resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6345 [pid 6345] set_robust_list(0x555584a2d760, 24) = 0 [pid 6345] chdir("./80") = 0 [pid 6345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6345] setpgid(0, 0 [pid 6342] munmap(0x7feda9000000, 138412032 [pid 5852] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6345] <... setpgid resumed>) = 0 [pid 6345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6345] write(3, "1000", 4) = 4 [pid 6345] close(3) = 0 [pid 6345] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6345] write(1, "executing program\n", 18) = 18 [pid 6345] memfd_create("syzkaller", 0 [pid 6341] <... ioctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] close(3 [pid 5852] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6341] <... close resumed>) = 0 [pid 6341] close(4 [pid 5852] newfstatat(3, "", [pid 6341] <... close resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6345] <... memfd_create resumed>) = 3 [pid 6345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6341] mkdir("./file0", 0777) = 0 [pid 5852] getdents64(3, [pid 6341] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6342] <... munmap resumed>) = 0 [pid 5852] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./79/binderfs") = 0 [ 316.241032][ T112] [ 316.241032][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.241032][ T112] [ 316.266870][ T6341] loop1: detected capacity change from 0 to 32768 [pid 6342] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6342] <... openat resumed>) = 4 [pid 6342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6342] close(3) = 0 [pid 6342] close(4) = 0 [pid 6342] mkdir("./file0", 0777) = 0 [pid 6342] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6341] <... mount resumed>) = 0 [ 316.323638][ T6342] loop2: detected capacity change from 0 to 32768 [ 316.330583][ T6341] [ 316.330583][ T6341] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.330583][ T6341] [ 316.351029][ T5852] [ 316.351029][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.351029][ T5852] [pid 6341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6341] chdir("./file0") = 0 [pid 6341] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6341] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6343] <... write resumed>) = 16777216 [ 316.396360][ T5852] [ 316.396360][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.396360][ T5852] [ 316.410864][ T6341] [ 316.410864][ T6341] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.410864][ T6341] [ 316.428945][ T6341] [ 316.428945][ T6341] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.428945][ T6341] [pid 6343] munmap(0x7feda9000000, 138412032 [pid 6341] <... lsetxattr resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6341] exit_group(0 [pid 5852] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6341] <... exit_group resumed>) = ? [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] +++ exited with 0 +++ [pid 5852] newfstatat(AT_FDCWD, "./79/file0", [pid 6342] <... mount resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 6342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6342] <... openat resumed>) = 3 [pid 6342] chdir("./file0" [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... restart_syscall resumed>) = 0 [pid 6343] <... munmap resumed>) = 0 [pid 6342] <... chdir resumed>) = 0 [ 316.445786][ T113] [ 316.445786][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.445786][ T113] [ 316.456670][ T6342] [ 316.456670][ T6342] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.456670][ T6342] [pid 5852] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6342] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] <... openat resumed>) = 4 [pid 6343] <... openat resumed>) = 4 [pid 6342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] newfstatat(4, "", [pid 5848] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6343] ioctl(4, LOOP_SET_FD, 3 [pid 6342] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6343] <... ioctl resumed>) = 0 [pid 5852] getdents64(4, [pid 6343] close(3) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] close(4 [pid 5852] getdents64(4, [pid 5848] <... openat resumed>) = 3 [pid 6343] <... close resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./80/binderfs") = 0 [pid 5848] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(4 [pid 6343] mkdir("./file0", 0777 [pid 5852] <... close resumed>) = 0 [ 316.502372][ T6343] loop0: detected capacity change from 0 to 32768 [ 316.502475][ T6342] [ 316.502475][ T6342] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.502475][ T6342] [ 316.531121][ T5848] [ 316.531121][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.531121][ T5848] [ 316.544557][ T5848] [ 316.544557][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5852] rmdir("./79/file0" [pid 6343] <... mkdir resumed>) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 6343] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./79") = 0 [pid 5852] mkdir("./80", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./80/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./80") = 0 [pid 5848] mkdir("./81", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 316.544557][ T5848] [ 316.562261][ T6343] [ 316.562261][ T6343] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.562261][ T6343] [ 316.575580][ T6342] [ 316.575580][ T6342] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.575580][ T6342] [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6343] <... mount resumed>) = 0 [pid 6343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6343] chdir("./file0") = 0 [pid 6343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6343] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6342] <... lsetxattr resumed>) = 0 [pid 6342] exit_group(0) = ? [pid 6342] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6342, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 316.644336][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.646395][ T6343] [ 316.646395][ T6343] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.646395][ T6343] [ 316.650890][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.662477][ T112] [ 316.662477][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.662477][ T112] [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./79/binderfs") = 0 [ 316.735814][ T6343] [ 316.735814][ T6343] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.735814][ T6343] [ 316.765407][ T5849] [ 316.765407][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.765407][ T5849] [pid 5849] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6343] <... lsetxattr resumed>) = 0 [pid 6343] exit_group(0) = ? [pid 6343] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 6344] <... write resumed>) = 16777216 [pid 5849] <... umount2 resumed>) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 6344] munmap(0x7feda9000000, 138412032 [ 316.795373][ T113] [ 316.795373][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.795373][ T113] [ 316.810175][ T5849] [ 316.810175][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.810175][ T5849] [pid 5849] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6344] <... munmap resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./79/file0", [pid 5847] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] umount2("./79/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] getdents64(3, [pid 5849] <... openat resumed>) = 4 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6344] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = 0 [pid 5849] getdents64(4, [pid 5847] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6344] <... openat resumed>) = 4 [pid 5847] unlink("./80/binderfs" [pid 6344] ioctl(4, LOOP_SET_FD, 3 [pid 5849] getdents64(4, ./strace-static-x86_64: Process 6346 attached 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... unlink resumed>) = 0 [pid 5849] close(4 [pid 5847] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6344] <... ioctl resumed>) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6346 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./79/file0" [pid 6344] close(3) = 0 [pid 6344] close(4) = 0 [pid 6344] mkdir("./file0", 0777) = 0 [pid 6344] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 6346] set_robust_list(0x555584a2d760, 24 [pid 5849] rmdir("./79" [pid 6346] <... set_robust_list resumed>) = 0 [pid 6346] chdir("./80" [pid 5849] <... rmdir resumed>) = 0 [pid 6346] <... chdir resumed>) = 0 [pid 5849] mkdir("./80", 0777 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5849] <... mkdir resumed>) = 0 [pid 6346] <... prctl resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6346] setpgid(0, 0 [pid 5849] <... openat resumed>) = 3 [pid 6346] <... setpgid resumed>) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5849] <... ioctl resumed>) = 0 [pid 6346] <... openat resumed>) = 3 [pid 5849] close(3 [pid 6346] write(3, "1000", 4 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6347 ./strace-static-x86_64: Process 6347 attached [pid 6346] <... write resumed>) = 4 [ 316.896733][ T6344] loop3: detected capacity change from 0 to 32768 [ 316.904456][ T5847] [ 316.904456][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.904456][ T5847] executing program [pid 6346] close(3 [pid 6347] set_robust_list(0x555584a2d760, 24) = 0 [pid 6347] chdir("./81") = 0 [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6347] setpgid(0, 0) = 0 [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6347] write(3, "1000", 4) = 4 [pid 6347] close(3) = 0 [pid 6347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6347] write(1, "executing program\n", 18) = 18 [pid 6347] memfd_create("syzkaller", 0 [pid 6346] <... close resumed>) = 0 executing program [pid 6346] symlink("/dev/binderfs", "./binderfs" [pid 6347] <... memfd_create resumed>) = 3 [pid 6347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6346] <... symlink resumed>) = 0 [pid 6346] write(1, "executing program\n", 18) = 18 [pid 6344] <... mount resumed>) = 0 [pid 6344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6344] chdir("./file0") = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6344] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6346] memfd_create("syzkaller", 0) = 3 [pid 6346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6346] <... mmap resumed>) = 0x7feda9000000 [pid 5847] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 316.953831][ T6344] [ 316.953831][ T6344] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.953831][ T6344] [ 316.954323][ T5847] [ 316.954323][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.954323][ T5847] [ 316.982870][ T6344] [ 316.982870][ T6344] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 316.982870][ T6344] [pid 5847] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, [pid 6345] <... write resumed>) = 16777216 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./80/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./80") = 0 [pid 5847] mkdir("./81", 0777) = 0 [ 317.038682][ T6344] [ 317.038682][ T6344] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.038682][ T6344] [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6344] <... lsetxattr resumed>) = 0 [pid 6345] munmap(0x7feda9000000, 138412032 [pid 5847] <... openat resumed>) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6344] exit_group(0 [pid 5847] <... ioctl resumed>) = 0 [pid 6344] <... exit_group resumed>) = ? [ 317.080726][ T112] [ 317.080726][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.080726][ T112] [pid 6344] +++ exited with 0 +++ [pid 5847] close(3 [pid 6345] <... munmap resumed>) = 0 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6344, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6345] <... openat resumed>) = 4 [pid 6345] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6345] close(3 [pid 5850] <... openat resumed>) = 3 [pid 6345] <... close resumed>) = 0 [pid 5850] newfstatat(3, "", [pid 6345] close(4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6345] <... close resumed>) = 0 [pid 5850] getdents64(3, [pid 6345] mkdir("./file0", 0777 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6345] <... mkdir resumed>) = 0 [pid 5850] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6345] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./80/binderfs") = 0 [ 317.133051][ T6345] loop4: detected capacity change from 0 to 32768 [pid 5850] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6345] <... mount resumed>) = 0 [pid 6345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6345] chdir("./file0") = 0 [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 317.186145][ T6345] [ 317.186145][ T6345] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.186145][ T6345] [ 317.203362][ T5850] [ 317.203362][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.203362][ T5850] [ 317.207313][ T6345] [ 317.207313][ T6345] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.207313][ T6345] [ 317.225492][ T5850] [ 317.225492][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.225492][ T5850] [pid 6345] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6348 attached [pid 5850] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] set_robust_list(0x555584a2d760, 24 [pid 5850] <... openat resumed>) = 4 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6348 [pid 6348] <... set_robust_list resumed>) = 0 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 6348] chdir("./80" [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6348] <... chdir resumed>) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] <... close resumed>) = 0 [pid 6348] setpgid(0, 0 [pid 6347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] rmdir("./80/file0" [pid 6348] <... setpgid resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6345] <... lsetxattr resumed>) = 0 [pid 5850] getdents64(3, [pid 5847] <... close resumed>) = 0 [pid 6348] <... openat resumed>) = 3 [pid 6348] write(3, "1000", 4 [pid 6345] exit_group(0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6348] <... write resumed>) = 4 [pid 6345] <... exit_group resumed>) = ? [pid 5850] close(3) = 0 [pid 6345] +++ exited with 0 +++ [pid 5850] rmdir("./80" [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6345, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... rmdir resumed>) = 0 [pid 6348] close(3 [pid 5850] mkdir("./81", 0777 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6348] <... close resumed>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... mkdir resumed>) = 0 [pid 6348] <... symlink resumed>) = 0 [pid 5851] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6349 attached [pid 6348] write(1, "executing program\n", 18 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 6349] set_robust_list(0x555584a2d760, 24 [pid 6348] <... write resumed>) = 18 [pid 5851] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 3 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6349 [pid 6349] <... set_robust_list resumed>) = 0 [pid 6348] memfd_create("syzkaller", 0 [pid 5851] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6348] <... memfd_create resumed>) = 3 [pid 5851] newfstatat(3, "", [pid 6348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6349] chdir("./81" [pid 6348] <... mmap resumed>) = 0x7feda9000000 [pid 5851] getdents64(3, [pid 5850] close(3 [pid 6349] <... chdir resumed>) = 0 [pid 6349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6349] setpgid(0, 0) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6349] write(3, "1000", 4 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6349] <... write resumed>) = 4 [pid 5851] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6349] close(3) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6349] symlink("/dev/binderfs", "./binderfs") = 0 [ 317.291664][ T6345] [ 317.291664][ T6345] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.291664][ T6345] [ 317.330398][ T113] [ 317.330398][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.330398][ T113] executing program [pid 6349] write(1, "executing program\n", 18 [pid 5851] unlink("./80/binderfs" [pid 6349] <... write resumed>) = 18 [pid 6349] memfd_create("syzkaller", 0 [pid 5851] <... unlink resumed>) = 0 [pid 6349] <... memfd_create resumed>) = 3 [pid 6346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 317.397943][ T5851] [ 317.397943][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.397943][ T5851] [ 317.450001][ T5851] [ 317.450001][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.450001][ T5851] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./80/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./80") = 0 [pid 5851] mkdir("./81", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6350 attached [pid 6350] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6350 [pid 6350] <... set_robust_list resumed>) = 0 [pid 6350] chdir("./81" [pid 6348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6350] <... chdir resumed>) = 0 [pid 6350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6350] setpgid(0, 0) = 0 [pid 6350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6350] write(3, "1000", 4) = 4 [pid 6350] close(3) = 0 [pid 6350] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6350] write(1, "executing program\n", 18 [pid 6347] <... write resumed>) = 16777216 [pid 6350] <... write resumed>) = 18 [pid 6347] munmap(0x7feda9000000, 138412032 [pid 6350] memfd_create("syzkaller", 0) = 3 [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6347] <... munmap resumed>) = 0 [pid 6347] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6347] close(3) = 0 [pid 6347] close(4) = 0 [pid 6347] mkdir("./file0", 0777) = 0 [pid 6347] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6347] chdir("./file0") = 0 [pid 6347] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 317.785229][ T6347] loop1: detected capacity change from 0 to 32768 [ 317.824434][ T6347] [ 317.824434][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.824434][ T6347] [pid 6347] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6346] <... write resumed>) = 16777216 [pid 5851] <... close resumed>) = 0 [pid 6346] munmap(0x7feda9000000, 138412032 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6351 attached [pid 6351] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6351 [pid 6347] <... lsetxattr resumed>) = 0 [ 317.862155][ T6347] [ 317.862155][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.862155][ T6347] [ 317.898165][ T6347] [ 317.898165][ T6347] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.898165][ T6347] [pid 6351] <... set_robust_list resumed>) = 0 [pid 6347] exit_group(0) = ? [pid 6351] chdir("./81") = 0 [pid 6347] +++ exited with 0 +++ [pid 6351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6347, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- [pid 6351] <... prctl resumed>) = 0 [pid 6351] setpgid(0, 0 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6351] <... setpgid resumed>) = 0 [pid 6351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6351] write(3, "1000", 4) = 4 [pid 6351] close(3) = 0 [pid 6351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 6351] write(1, "executing program\n", 18executing program ) = 18 [pid 6351] memfd_create("syzkaller", 0 [pid 5848] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6351] <... memfd_create resumed>) = 3 [pid 6346] <... munmap resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5848] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6351] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6346] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5848] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6346] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./81/binderfs") = 0 [pid 5848] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 317.934619][ T112] [ 317.934619][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 317.934619][ T112] [pid 6346] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6346] close(3) = 0 [ 317.984255][ T6346] loop5: detected capacity change from 0 to 32768 [ 318.004981][ T5848] [ 318.004981][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.004981][ T5848] [ 318.031796][ T5848] [pid 6346] close(4) = 0 [pid 6346] mkdir("./file0", 0777) = 0 [pid 6346] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./81/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./81") = 0 [pid 5848] mkdir("./82", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 318.031796][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.031796][ T5848] [ 318.064797][ T6346] [ 318.064797][ T6346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.064797][ T6346] [pid 5848] close(3 [pid 6346] <... mount resumed>) = 0 [pid 6346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6346] chdir("./file0") = 0 [pid 6346] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6346] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6349] <... write resumed>) = 16777216 [ 318.132032][ T6346] [ 318.132032][ T6346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.132032][ T6346] [pid 6349] munmap(0x7feda9000000, 138412032) = 0 [ 318.180270][ T6346] [ 318.180270][ T6346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.180270][ T6346] [ 318.211913][ T113] [ 318.211913][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.211913][ T113] [pid 6346] <... lsetxattr resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6349] ioctl(4, LOOP_SET_FD, 3 [pid 6346] exit_group(0) = ? [pid 6346] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6349] <... ioctl resumed>) = 0 [pid 5852] <... restart_syscall resumed>) = 0 [pid 6349] close(3) = 0 [pid 5852] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6349] close(4) = 0 [pid 5852] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6349] mkdir("./file0", 0777 [pid 6348] <... write resumed>) = 16777216 [pid 5852] newfstatat(3, "", [pid 6349] <... mkdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 318.224767][ T6349] loop0: detected capacity change from 0 to 32768 [pid 6349] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] getdents64(3, [pid 6348] munmap(0x7feda9000000, 138412032 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./80/binderfs") = 0 [pid 5852] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6349] <... mount resumed>) = 0 [pid 6348] <... munmap resumed>) = 0 [pid 6349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6348] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6349] <... openat resumed>) = 3 [ 318.278449][ T6349] [ 318.278449][ T6349] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.278449][ T6349] [ 318.312565][ T5852] [ 318.312565][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.312565][ T5852] [pid 6348] ioctl(4, LOOP_SET_FD, 3 [pid 6349] chdir("./file0") = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6348] <... ioctl resumed>) = 0 [pid 6349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6348] close(3) = 0 [pid 6349] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6348] close(4) = 0 [pid 6348] mkdir("./file0", 0777) = 0 [pid 6348] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... umount2 resumed>) = 0 [ 318.327685][ T6348] loop2: detected capacity change from 0 to 32768 [ 318.335359][ T5852] [ 318.335359][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.335359][ T5852] [ 318.365376][ T6349] [ 318.365376][ T6349] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.365376][ T6349] [pid 5848] <... close resumed>) = 0 [pid 5852] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6352 ./strace-static-x86_64: Process 6352 attached [pid 6352] set_robust_list(0x555584a2d760, 24) = 0 [pid 6352] chdir("./82") = 0 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6352] setpgid(0, 0) = 0 [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6352] write(3, "1000", 4) = 4 [pid 6352] close(3) = 0 [pid 6352] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6352] write(1, "executing program\n", 18) = 18 [pid 6348] <... mount resumed>) = 0 [pid 6352] memfd_create("syzkaller", 0 [pid 6348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5852] newfstatat(AT_FDCWD, "./80/file0", [pid 6352] <... memfd_create resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5852] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6352] <... mmap resumed>) = 0x7feda9000000 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] chdir("./file0" [pid 5852] <... openat resumed>) = 4 [pid 6348] <... chdir resumed>) = 0 [pid 5852] newfstatat(4, "", [pid 6348] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6348] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 318.395429][ T6348] [ 318.395429][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.395429][ T6348] [ 318.397406][ T6349] [ 318.397406][ T6349] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.397406][ T6349] [pid 6348] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] getdents64(4, [pid 6349] <... lsetxattr resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6349] exit_group(0) = ? [pid 5852] close(4) = 0 [pid 6349] +++ exited with 0 +++ [pid 5852] rmdir("./80/file0" [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6349, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5852] <... rmdir resumed>) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] getdents64(3, [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 318.453752][ T6348] [ 318.453752][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.453752][ T6348] [ 318.469327][ T112] [ 318.469327][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.469327][ T112] [ 318.495366][ T6348] [ 318.495366][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5847] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] close(3 [pid 5847] unlink("./81/binderfs") = 0 [pid 5847] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 6348] <... lsetxattr resumed>) = 0 [pid 6348] exit_group(0) = ? [pid 5852] rmdir("./80" [pid 6348] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./81", 0777 [pid 5849] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... mkdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... ioctl resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./80/binderfs") = 0 [pid 5852] close(3 [ 318.495366][ T6348] [ 318.517884][ T5847] [ 318.517884][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.517884][ T5847] [ 318.530280][ T113] [ 318.530280][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.530280][ T113] [ 318.541016][ T5847] [ 318.541016][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.541016][ T5847] [pid 5849] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6350] <... write resumed>) = 16777216 [pid 6350] munmap(0x7feda9000000, 138412032 [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./81/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./81") = 0 [pid 5847] mkdir("./82", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 318.570993][ T5849] [ 318.570993][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.570993][ T5849] [ 318.606870][ T5849] [ 318.606870][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.606870][ T5849] [pid 5847] close(3 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6350] <... munmap resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5849] newfstatat(AT_FDCWD, "./80/file0", [pid 6350] <... openat resumed>) = 4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6350] ioctl(4, LOOP_SET_FD, 3 [pid 5849] umount2("./80/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6350] <... ioctl resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6350] close(3 [pid 5849] newfstatat(4, "", [pid 6350] <... close resumed>) = 0 [ 318.662044][ T6350] loop3: detected capacity change from 0 to 32768 [pid 6350] close(4 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6350] <... close resumed>) = 0 [pid 6350] mkdir("./file0", 0777 [pid 5849] getdents64(4, [pid 6350] <... mkdir resumed>) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6350] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] close(4) = 0 [pid 5849] rmdir("./80/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./80") = 0 [pid 5849] mkdir("./81", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6350] <... mount resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 6350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6350] <... openat resumed>) = 3 [pid 6350] chdir("./file0") = 0 [pid 6350] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 318.716741][ T6350] [ 318.716741][ T6350] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.716741][ T6350] [ 318.780857][ T6350] [ 318.780857][ T6350] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.780857][ T6350] [pid 6350] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6351] <... write resumed>) = 16777216 [pid 6351] munmap(0x7feda9000000, 138412032 [pid 6350] <... lsetxattr resumed>) = 0 [pid 6350] exit_group(0) = ? [pid 6350] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6350, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6351] <... munmap resumed>) = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 318.840388][ T6350] [ 318.840388][ T6350] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.840388][ T6350] [ 318.879639][ T112] [ 318.879639][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.879639][ T112] [pid 5850] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./81/binderfs", [pid 6351] <... openat resumed>) = 4 [pid 6351] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./81/binderfs") = 0 [pid 5850] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 6351] <... ioctl resumed>) = 0 [pid 6351] close(3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6353 ./strace-static-x86_64: Process 6353 attached [pid 6353] set_robust_list(0x555584a2d760, 24) = 0 [pid 6353] chdir("./81") = 0 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6351] <... close resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6353] setpgid(0, 0 [pid 6351] close(4 [pid 6353] <... setpgid resumed>) = 0 [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6351] <... close resumed>) = 0 [pid 6351] mkdir("./file0", 0777) = 0 [pid 6351] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6353] <... openat resumed>) = 3 [pid 6353] write(3, "1000", 4) = 4 [pid 6353] close(3) = 0 [pid 6353] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6353] write(1, "executing program\n", 18executing program ) = 18 [pid 6353] memfd_create("syzkaller", 0) = 3 [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 318.927094][ T6351] loop4: detected capacity change from 0 to 32768 [ 318.936826][ T5850] [ 318.936826][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.936826][ T5850] [ 318.958415][ T5850] [ 318.958415][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 318.958415][ T5850] [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6354 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6354 attached [pid 5850] newfstatat(AT_FDCWD, "./81/file0", [pid 6354] set_robust_list(0x555584a2d760, 24 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6351] <... mount resumed>) = 0 [pid 5850] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6354] <... set_robust_list resumed>) = 0 [pid 6351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] chdir("./82" [pid 6351] <... openat resumed>) = 3 [pid 5850] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6351] chdir("./file0" [pid 6354] <... chdir resumed>) = 0 [pid 6351] <... chdir resumed>) = 0 [pid 5850] <... openat resumed>) = 4 [pid 6351] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] newfstatat(4, "", [pid 6354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6351] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] getdents64(4, [pid 6354] <... prctl resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6354] setpgid(0, 0 [pid 5850] getdents64(4, [pid 6354] <... setpgid resumed>) = 0 [pid 6354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6354] write(3, "1000", 4) = 4 [pid 6354] close(3) = 0 [pid 6354] symlink("/dev/binderfs", "./binderfs" [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [ 319.000968][ T6351] [ 319.000968][ T6351] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.000968][ T6351] [ 319.030837][ T6351] [ 319.030837][ T6351] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.030837][ T6351] [pid 5850] rmdir("./81/file0"executing program [pid 6354] <... symlink resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 6354] write(1, "executing program\n", 18) = 18 [pid 6354] memfd_create("syzkaller", 0) = 3 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] getdents64(3, [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6355 attached [pid 5850] close(3 [pid 6355] set_robust_list(0x555584a2d760, 24 [pid 5850] <... close resumed>) = 0 [pid 6355] <... set_robust_list resumed>) = 0 [pid 5850] rmdir("./81" [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6355 [pid 6355] chdir("./81") = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] mkdir("./82", 0777 [pid 6355] <... prctl resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 6355] setpgid(0, 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6355] <... setpgid resumed>) = 0 [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... openat resumed>) = 3 [pid 6355] <... openat resumed>) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6355] write(3, "1000", 4 [pid 6351] <... lsetxattr resumed>) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 6355] <... write resumed>) = 4 [pid 5850] close(3 [pid 6355] close(3) = 0 [pid 6351] exit_group(0 [ 319.051976][ T6351] [ 319.051976][ T6351] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.051976][ T6351] [ 319.085562][ T112] [ 319.085562][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.085562][ T112] [pid 6355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6351] <... exit_group resumed>) = ? executing program [pid 6355] write(1, "executing program\n", 18) = 18 [pid 6355] memfd_create("syzkaller", 0 [pid 6351] +++ exited with 0 +++ [pid 6355] <... memfd_create resumed>) = 3 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6351, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6355] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./81/binderfs") = 0 [pid 5851] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6352] <... write resumed>) = 16777216 [pid 6352] munmap(0x7feda9000000, 138412032) = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6352] close(3) = 0 [ 319.260452][ T5851] [ 319.260452][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.260452][ T5851] [ 319.282949][ T6352] loop1: detected capacity change from 0 to 32768 [ 319.300372][ T5851] [ 319.300372][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.300372][ T5851] [pid 6352] close(4) = 0 [pid 6352] mkdir("./file0", 0777) = 0 [pid 6352] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6356 attached [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... umount2 resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6356 [pid 6356] set_robust_list(0x555584a2d760, 24 [pid 6352] <... mount resumed>) = 0 [pid 5851] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... set_robust_list resumed>) = 0 [pid 6352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6356] chdir("./82" [pid 6352] <... openat resumed>) = 3 [pid 5851] newfstatat(AT_FDCWD, "./81/file0", [pid 6356] <... chdir resumed>) = 0 [pid 6352] chdir("./file0" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6352] <... chdir resumed>) = 0 [pid 5851] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... prctl resumed>) = 0 [pid 6352] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6356] setpgid(0, 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6356] <... setpgid resumed>) = 0 [pid 6352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 319.331845][ T6352] [ 319.331845][ T6352] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.331845][ T6352] [pid 6356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6352] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6356] <... openat resumed>) = 3 [pid 6355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", [pid 6356] write(3, "1000", 4) = 4 [pid 6356] close(3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6356] <... close resumed>) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6356] write(1, "executing program\n", 18 [pid 5851] getdents64(4, executing program [pid 6356] <... write resumed>) = 18 [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4 [pid 6356] memfd_create("syzkaller", 0 [pid 5851] <... close resumed>) = 0 [pid 6356] <... memfd_create resumed>) = 3 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 319.394309][ T6352] [ 319.394309][ T6352] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.394309][ T6352] [ 319.429859][ T6352] [ 319.429859][ T6352] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.429859][ T6352] [pid 5851] rmdir("./81/file0" [pid 6352] <... lsetxattr resumed>) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3 [pid 6352] exit_group(0) = ? [pid 6352] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6352, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./82/binderfs") = 0 [pid 5848] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./81") = 0 [pid 5851] mkdir("./82", 0777) = 0 [ 319.454213][ T113] [ 319.454213][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.454213][ T113] [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 319.520345][ T5848] [ 319.520345][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.520345][ T5848] [ 319.534819][ T5848] [ 319.534819][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.534819][ T5848] [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./82/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./82") = 0 [pid 5848] mkdir("./83", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6354] <... write resumed>) = 16777216 [pid 6354] munmap(0x7feda9000000, 138412032) = 0 [pid 6353] <... write resumed>) = 16777216 [pid 5851] <... close resumed>) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6354] ioctl(4, LOOP_SET_FD, 3 [pid 6353] munmap(0x7feda9000000, 138412032 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6354] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6357 attached [pid 6357] set_robust_list(0x555584a2d760, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6357 [pid 6357] <... set_robust_list resumed>) = 0 [pid 6357] chdir("./82") = 0 [pid 6353] <... munmap resumed>) = 0 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6357] <... prctl resumed>) = 0 [pid 6357] setpgid(0, 0 [pid 6353] <... openat resumed>) = 4 [pid 6357] <... setpgid resumed>) = 0 [pid 6353] ioctl(4, LOOP_SET_FD, 3 [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6354] close(3) = 0 [pid 6354] close(4 [pid 6357] <... openat resumed>) = 3 [pid 6357] write(3, "1000", 4 [pid 6354] <... close resumed>) = 0 [pid 6354] mkdir("./file0", 0777 [pid 5848] <... close resumed>) = 0 [pid 6354] <... mkdir resumed>) = 0 [pid 6354] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6357] <... write resumed>) = 4 [pid 6357] close(3) = 0 [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6357] <... symlink resumed>) = 0 executing program ./strace-static-x86_64: Process 6358 attached [pid 6357] write(1, "executing program\n", 18 [pid 6353] <... ioctl resumed>) = 0 [pid 6357] <... write resumed>) = 18 [ 319.857520][ T6354] loop0: detected capacity change from 0 to 32768 [ 319.884302][ T6353] loop5: detected capacity change from 0 to 32768 [ 319.904931][ T6354] [pid 6353] close(3 [pid 6357] memfd_create("syzkaller", 0 [pid 6355] <... write resumed>) = 16777216 [pid 6353] <... close resumed>) = 0 [pid 6357] <... memfd_create resumed>) = 3 [pid 6353] close(4 [pid 6358] set_robust_list(0x555584a2d760, 24 [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] munmap(0x7feda9000000, 138412032 [pid 6354] <... mount resumed>) = 0 [pid 6353] <... close resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6358 [pid 6358] <... set_robust_list resumed>) = 0 [pid 6354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6353] mkdir("./file0", 0777 [pid 6357] <... mmap resumed>) = 0x7feda9000000 [pid 6358] chdir("./83") = 0 [pid 6353] <... mkdir resumed>) = 0 [pid 6358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6358] setpgid(0, 0) = 0 [pid 6358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6358] write(3, "1000", 4) = 4 [pid 6358] close(3) = 0 [pid 6358] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6358] write(1, "executing program\n", 18) = 18 [pid 6358] memfd_create("syzkaller", 0) = 3 [pid 6354] <... openat resumed>) = 3 [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6354] chdir("./file0" [pid 6353] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6354] <... chdir resumed>) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 319.904931][ T6354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.904931][ T6354] [pid 6354] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6355] <... munmap resumed>) = 0 [ 319.966399][ T6354] [ 319.966399][ T6354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.966399][ T6354] [ 319.987423][ T6353] [ 319.987423][ T6353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.987423][ T6353] [pid 6355] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6355] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6354] <... lsetxattr resumed>) = 0 [pid 6353] <... mount resumed>) = 0 [pid 6354] exit_group(0 [pid 6353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6353] chdir("./file0") = 0 [pid 6355] close(3) = 0 [pid 6355] close(4 [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6355] <... close resumed>) = 0 [pid 6353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 320.020094][ T6354] [ 320.020094][ T6354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.020094][ T6354] [ 320.050772][ T6355] loop2: detected capacity change from 0 to 32768 [ 320.058397][ T112] [ 320.058397][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.058397][ T112] [pid 6355] mkdir("./file0", 0777 [pid 6354] <... exit_group resumed>) = ? [pid 6353] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6355] <... mkdir resumed>) = 0 [pid 6354] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6354, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5847] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", [pid 6355] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 320.082756][ T6353] [ 320.082756][ T6353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.082756][ T6353] [ 320.109428][ T6355] [ 320.109428][ T6355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.109428][ T6355] [ 320.130039][ T6353] [pid 5847] getdents64(3, [pid 6355] <... mount resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] <... openat resumed>) = 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./82/binderfs", [pid 6355] chdir("./file0" [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] <... chdir resumed>) = 0 [pid 5847] unlink("./82/binderfs" [pid 6355] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] <... unlink resumed>) = 0 [pid 6355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6355] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6353] <... lsetxattr resumed>) = 0 [pid 6353] exit_group(0) = ? [pid 6353] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6353, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=33 /* 0.33 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 320.130039][ T6353] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.130039][ T6353] [ 320.145949][ T6355] [ 320.145949][ T6355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.145949][ T6355] [ 320.165071][ T5847] [ 320.165071][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.165071][ T5847] [ 320.176431][ T113] [pid 5852] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./81/binderfs") = 0 [pid 5852] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6356] <... write resumed>) = 16777216 [ 320.176431][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.176431][ T113] [ 320.187821][ T6355] [ 320.187821][ T6355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.187821][ T6355] [ 320.207073][ T5847] [ 320.207073][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.207073][ T5847] [ 320.209688][ T5852] [ 320.209688][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.209688][ T5852] [ 320.229328][ T112] [pid 6358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6356] munmap(0x7feda9000000, 138412032 [pid 6355] <... lsetxattr resumed>) = 0 [pid 6355] exit_group(0) = ? [pid 5847] <... umount2 resumed>) = 0 [pid 6355] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] newfstatat(AT_FDCWD, "./82/file0", [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 5847] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5849] unlink("./81/binderfs") = 0 [pid 5847] newfstatat(4, "", [pid 5849] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6356] <... munmap resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [ 320.229328][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.229328][ T112] [ 320.241957][ T5852] [ 320.241957][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.241957][ T5852] [ 320.271814][ T5849] [ 320.271814][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.271814][ T5849] [pid 6356] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] rmdir("./82/file0" [pid 6356] <... openat resumed>) = 4 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... rmdir resumed>) = 0 [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 5852] newfstatat(AT_FDCWD, "./81/file0", [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6356] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 5847] rmdir("./82" [pid 5849] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./81/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] <... rmdir resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(4, [pid 5852] <... openat resumed>) = 4 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] mkdir("./83", 0777 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./81/file0" [pid 5852] getdents64(4, [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... mkdir resumed>) = 0 [pid 5849] getdents64(3, [pid 6356] close(3 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6356] <... close resumed>) = 0 [pid 5852] getdents64(4, [pid 6356] close(4 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] <... openat resumed>) = 3 [pid 6356] <... close resumed>) = 0 [pid 5852] close(4 [pid 6356] mkdir("./file0", 0777 [pid 5852] <... close resumed>) = 0 [ 320.291642][ T5849] [ 320.291642][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.291642][ T5849] [ 320.310794][ T6356] loop3: detected capacity change from 0 to 32768 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6356] <... mkdir resumed>) = 0 [pid 5852] rmdir("./81/file0" [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 6356] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... rmdir resumed>) = 0 [pid 5849] close(3 [pid 5847] close(3 [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./81") = 0 [pid 5849] mkdir("./82", 0777 [pid 5852] getdents64(3, [pid 5849] <... mkdir resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./81" [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./82", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [ 320.366884][ T6356] [ 320.366884][ T6356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.366884][ T6356] [pid 5852] close(3 [pid 6356] <... mount resumed>) = 0 [pid 6356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6356] chdir("./file0") = 0 [pid 6356] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 320.434654][ T6356] [ 320.434654][ T6356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.434654][ T6356] [ 320.459991][ T6356] [ 320.459991][ T6356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.459991][ T6356] [pid 6356] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0) = 0 [pid 6356] exit_group(0) = ? [pid 6356] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6356, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./82/binderfs") = 0 [ 320.500537][ T113] [ 320.500537][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.500537][ T113] [ 320.560466][ T5850] [ 320.560466][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.560466][ T5850] [ 320.616452][ T5850] [ 320.616452][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.616452][ T5850] [pid 5850] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6359 attached , child_tidptr=0x555584a2d750) = 6360 ./strace-static-x86_64: Process 6360 attached [pid 6360] set_robust_list(0x555584a2d760, 24) = 0 [pid 6360] chdir("./82") = 0 [pid 6360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6360] setpgid(0, 0 [pid 6359] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6359 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] <... set_robust_list resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./82/file0", [pid 6360] <... setpgid resumed>) = 0 [pid 6359] chdir("./82" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6359] <... chdir resumed>) = 0 [pid 6360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6358] <... write resumed>) = 16777216 [pid 6357] <... write resumed>) = 16777216 [pid 5850] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... close resumed>) = 0 [pid 6360] <... openat resumed>) = 3 [pid 6359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6358] munmap(0x7feda9000000, 138412032 [pid 6357] munmap(0x7feda9000000, 138412032 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6360] write(3, "1000", 4 [pid 6359] <... prctl resumed>) = 0 [pid 6360] <... write resumed>) = 4 [pid 6360] close(3 [pid 5850] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6360] <... close resumed>) = 0 [pid 6360] symlink("/dev/binderfs", "./binderfs" [pid 6359] setpgid(0, 0 [pid 5850] <... openat resumed>) = 4 [pid 6359] <... setpgid resumed>) = 0 [pid 5850] newfstatat(4, "", ./strace-static-x86_64: Process 6361 attached [pid 6360] <... symlink resumed>) = 0 [pid 6359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6360] write(1, "executing program\n", 18executing program ) = 18 [pid 5850] getdents64(4, [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6361 [pid 6360] memfd_create("syzkaller", 0 [pid 6359] <... openat resumed>) = 3 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6360] <... memfd_create resumed>) = 3 [pid 6360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6359] write(3, "1000", 4 [pid 5850] getdents64(4, [pid 6360] <... mmap resumed>) = 0x7feda9000000 [pid 6359] <... write resumed>) = 4 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6359] close(3 [pid 5850] close(4 [pid 6359] <... close resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 6359] symlink("/dev/binderfs", "./binderfs" [pid 5850] rmdir("./82/file0" [pid 6359] <... symlink resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6359] write(1, "executing program\n", 18 [pid 5850] getdents64(3, [pid 6359] <... write resumed>) = 18 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 executing program [pid 6359] memfd_create("syzkaller", 0 [pid 5850] close(3 [pid 6359] <... memfd_create resumed>) = 3 [pid 5850] <... close resumed>) = 0 [pid 6361] set_robust_list(0x555584a2d760, 24) = 0 [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] rmdir("./82" [pid 6361] chdir("./83" [pid 6359] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... rmdir resumed>) = 0 [pid 6361] <... chdir resumed>) = 0 [pid 6357] <... munmap resumed>) = 0 [pid 5850] mkdir("./83", 0777 [pid 6361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3 [pid 6361] <... prctl resumed>) = 0 [pid 6358] <... munmap resumed>) = 0 [pid 6361] setpgid(0, 0 [pid 6358] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6361] <... setpgid resumed>) = 0 [pid 6358] <... openat resumed>) = 4 [pid 6361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6358] ioctl(4, LOOP_SET_FD, 3 [pid 6361] <... openat resumed>) = 3 [pid 6361] write(3, "1000", 4 [pid 6358] <... ioctl resumed>) = 0 [pid 6361] <... write resumed>) = 4 [pid 6361] close(3 [pid 6358] close(3 [pid 6361] <... close resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 6361] symlink("/dev/binderfs", "./binderfs" [pid 6358] close(4 [pid 6357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6357] ioctl(4, LOOP_SET_FD, 3 [pid 6361] <... symlink resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 6358] mkdir("./file0", 0777executing program [pid 6361] write(1, "executing program\n", 18) = 18 [pid 6358] <... mkdir resumed>) = 0 [pid 6361] memfd_create("syzkaller", 0 [ 320.773436][ T6358] loop1: detected capacity change from 0 to 32768 [ 320.800960][ T6357] loop4: detected capacity change from 0 to 32768 [pid 6358] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6361] <... memfd_create resumed>) = 3 [pid 6357] <... ioctl resumed>) = 0 [pid 6357] close(3) = 0 [pid 6357] close(4) = 0 [pid 6357] mkdir("./file0", 0777) = 0 [pid 6357] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 320.825320][ T6358] [ 320.825320][ T6358] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.825320][ T6358] [pid 6358] <... mount resumed>) = 0 [pid 6358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6358] chdir("./file0") = 0 [pid 6358] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 320.876474][ T6357] [ 320.876474][ T6357] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.876474][ T6357] [pid 6358] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6357] <... mount resumed>) = 0 [pid 6357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6357] chdir("./file0") = 0 [pid 6357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 320.917993][ T6358] [ 320.917993][ T6358] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.917993][ T6358] [ 320.946676][ T6357] [ 320.946676][ T6357] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.946676][ T6357] [pid 6357] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6358] <... lsetxattr resumed>) = 0 [pid 6358] exit_group(0) = ? [pid 6358] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6358, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5848] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./83/binderfs") = 0 [ 320.972284][ T6358] [ 320.972284][ T6358] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.972284][ T6358] [ 320.990401][ T6357] [ 320.990401][ T6357] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.990401][ T6357] [ 321.002222][ T112] [ 321.002222][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.002222][ T112] [pid 5848] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6357] <... lsetxattr resumed>) = 0 [pid 6357] exit_group(0) = ? [pid 6357] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./82/binderfs") = 0 [ 321.035519][ T5848] [ 321.035519][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.035519][ T5848] [ 321.058925][ T113] [ 321.058925][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.058925][ T113] [ 321.070402][ T5848] [ 321.070402][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.070402][ T5848] [pid 5851] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./83/file0", ./strace-static-x86_64: Process 6362 attached [pid 6361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6362 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6362] set_robust_list(0x555584a2d760, 24 [pid 5848] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] <... set_robust_list resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 6362] chdir("./83" [pid 5848] newfstatat(4, "", [pid 6362] <... chdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] getdents64(4, [pid 6362] <... prctl resumed>) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6362] setpgid(0, 0) = 0 [pid 5848] getdents64(4, [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6362] <... openat resumed>) = 3 [pid 5848] close(4) = 0 [pid 5848] rmdir("./83/file0" [pid 6362] write(3, "1000", 4) = 4 [pid 6362] close(3) = 0 [pid 6362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] <... rmdir resumed>) = 0 executing program [pid 6362] write(1, "executing program\n", 18) = 18 [pid 6362] memfd_create("syzkaller", 0) = 3 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5848] getdents64(3, [pid 6362] <... mmap resumed>) = 0x7feda9000000 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [ 321.100262][ T5851] [ 321.100262][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.100262][ T5851] [ 321.120484][ T5851] [ 321.120484][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.120484][ T5851] [pid 5848] rmdir("./83") = 0 [pid 5851] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./82/file0" [pid 5848] mkdir("./84", 0777 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] getdents64(3, [pid 5848] <... mkdir resumed>) = 0 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5851] close(3) = 0 [pid 5851] rmdir("./82") = 0 [pid 5851] mkdir("./83", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6363 ./strace-static-x86_64: Process 6363 attached [pid 6363] set_robust_list(0x555584a2d760, 24) = 0 [pid 6363] chdir("./83") = 0 [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6363] setpgid(0, 0) = 0 [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6363] <... openat resumed>) = 3 [pid 6363] write(3, "1000", 4) = 4 [pid 6363] close(3) = 0 [pid 6363] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6363] write(1, "executing program\n", 18 [pid 6360] <... write resumed>) = 16777216 [pid 6363] <... write resumed>) = 18 [pid 6360] munmap(0x7feda9000000, 138412032 [pid 6363] memfd_create("syzkaller", 0 [pid 6359] <... write resumed>) = 16777216 [pid 6359] munmap(0x7feda9000000, 138412032 [pid 5848] <... close resumed>) = 0 [pid 6363] <... memfd_create resumed>) = 3 [pid 6363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6360] <... munmap resumed>) = 0 [pid 6359] <... munmap resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6364 attached [pid 6360] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6360] ioctl(4, LOOP_SET_FD, 3 [pid 6359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6364] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6364 [pid 6364] <... set_robust_list resumed>) = 0 [pid 6360] <... ioctl resumed>) = 0 [pid 6359] <... openat resumed>) = 4 [pid 6359] ioctl(4, LOOP_SET_FD, 3 [pid 6364] chdir("./84" [pid 6359] <... ioctl resumed>) = 0 [pid 6364] <... chdir resumed>) = 0 [pid 6361] <... write resumed>) = 16777216 [pid 6360] close(3 [pid 6364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6360] <... close resumed>) = 0 [pid 6364] <... prctl resumed>) = 0 [pid 6360] close(4 [pid 6364] setpgid(0, 0 [pid 6360] <... close resumed>) = 0 [pid 6364] <... setpgid resumed>) = 0 [pid 6361] munmap(0x7feda9000000, 138412032 [pid 6364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6360] mkdir("./file0", 0777 [pid 6364] write(3, "1000", 4 [pid 6360] <... mkdir resumed>) = 0 [pid 6359] close(3 [pid 6364] <... write resumed>) = 4 executing program [pid 6360] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6359] <... close resumed>) = 0 [pid 6364] close(3 [pid 6359] close(4 [pid 6364] <... close resumed>) = 0 [pid 6359] <... close resumed>) = 0 [pid 6364] symlink("/dev/binderfs", "./binderfs" [pid 6359] mkdir("./file0", 0777 [pid 6364] <... symlink resumed>) = 0 [pid 6364] write(1, "executing program\n", 18) = 18 [pid 6364] memfd_create("syzkaller", 0 [pid 6359] <... mkdir resumed>) = 0 [pid 6364] <... memfd_create resumed>) = 3 [pid 6364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6359] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6364] <... mmap resumed>) = 0x7feda9000000 [ 321.591506][ T6360] loop2: detected capacity change from 0 to 32768 [ 321.602265][ T6359] loop5: detected capacity change from 0 to 32768 [pid 6361] <... munmap resumed>) = 0 [pid 6361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6361] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6360] <... mount resumed>) = 0 [pid 6359] <... mount resumed>) = 0 [pid 6361] close(3) = 0 [pid 6361] close(4) = 0 [ 321.651067][ T6360] [ 321.651067][ T6360] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.651067][ T6360] [ 321.664091][ T6359] [ 321.664091][ T6359] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.664091][ T6359] [ 321.681876][ T6361] loop0: detected capacity change from 0 to 32768 [pid 6361] mkdir("./file0", 0777 [pid 6360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6361] <... mkdir resumed>) = 0 [pid 6360] <... openat resumed>) = 3 [pid 6359] <... openat resumed>) = 3 [pid 6361] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6359] chdir("./file0" [pid 6360] chdir("./file0" [pid 6359] <... chdir resumed>) = 0 [pid 6360] <... chdir resumed>) = 0 [pid 6359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6360] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6360] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 321.733854][ T6360] [ 321.733854][ T6360] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.733854][ T6360] [ 321.736167][ T6361] [ 321.736167][ T6361] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.736167][ T6361] [ 321.756196][ T6359] [ 321.756196][ T6359] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.756196][ T6359] [ 321.774233][ T6360] [ 321.774233][ T6360] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6359] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6360] <... lsetxattr resumed>) = 0 [pid 6360] exit_group(0 [pid 6361] <... mount resumed>) = 0 [pid 6361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6361] chdir("./file0") = 0 [pid 6361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6360] <... exit_group resumed>) = ? [ 321.774233][ T6360] [ 321.790158][ T6359] [ 321.790158][ T6359] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.790158][ T6359] [ 321.812616][ T112] [ 321.812616][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.812616][ T112] [ 321.828099][ T6361] [pid 6361] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6360] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6360, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6359] <... lsetxattr resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./82/binderfs", [pid 6359] exit_group(0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6359] <... exit_group resumed>) = ? [ 321.828099][ T6361] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.828099][ T6361] [pid 5849] unlink("./82/binderfs" [pid 6359] +++ exited with 0 +++ [pid 5849] <... unlink resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6359, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 321.856148][ T113] [ 321.856148][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.856148][ T113] [ 321.890285][ T5849] [ 321.890285][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.890285][ T5849] [ 321.890337][ T6361] [pid 5852] getdents64(3, [pid 6363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6362] <... write resumed>) = 16777216 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = 0 [pid 6362] munmap(0x7feda9000000, 138412032 [pid 5852] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./82/binderfs") = 0 [pid 5849] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./82/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./82") = 0 [pid 5849] mkdir("./83", 0777) = 0 [ 321.890337][ T6361] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.890337][ T6361] [ 321.902881][ T5849] [ 321.902881][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.902881][ T5849] [pid 6361] <... lsetxattr resumed>) = 0 [pid 6364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6361] exit_group(0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6362] <... munmap resumed>) = 0 [pid 6361] <... exit_group resumed>) = ? [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 321.968895][ T113] [ 321.968895][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.968895][ T113] [ 321.981258][ T5852] [ 321.981258][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.981258][ T5852] [pid 6362] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6361] +++ exited with 0 +++ [pid 5849] close(3 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6361, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5847] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6362] <... openat resumed>) = 4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 6362] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... umount2 resumed>) = 0 [pid 5852] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./82/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./82/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./82") = 0 [pid 5852] mkdir("./83", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 5847] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6362] <... ioctl resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6362] close(3 [pid 5847] newfstatat(AT_FDCWD, "./83/binderfs", [pid 6362] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6362] close(4) = 0 [pid 5847] unlink("./83/binderfs" [pid 6362] mkdir("./file0", 0777 [pid 5847] <... unlink resumed>) = 0 [ 322.020655][ T5852] [ 322.020655][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.020655][ T5852] [ 322.053519][ T6362] loop3: detected capacity change from 0 to 32768 [pid 6362] <... mkdir resumed>) = 0 [pid 5847] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 322.116117][ T5847] [ 322.116117][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.116117][ T5847] [ 322.140654][ T5847] [ 322.140654][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.140654][ T5847] [pid 6362] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./83/file0", [pid 6362] <... mount resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 322.166694][ T6362] [ 322.166694][ T6362] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.166694][ T6362] [pid 5847] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6362] chdir("./file0" [pid 5847] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] <... chdir resumed>) = 0 [pid 6362] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] <... openat resumed>) = 4 [pid 6362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] newfstatat(4, "", [pid 6362] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./83/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./83") = 0 [pid 5847] mkdir("./84", 0777) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [ 322.214364][ T6362] [ 322.214364][ T6362] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.214364][ T6362] [ 322.247993][ T6362] [ 322.247993][ T6362] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.247993][ T6362] [pid 5847] close(3 [pid 6362] <... lsetxattr resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 6362] exit_group(0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6365 attached [pid 6362] <... exit_group resumed>) = ? [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6365 [pid 6362] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6362, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 6365] set_robust_list(0x555584a2d760, 24) = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6365] chdir("./83" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6365] <... chdir resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./83/binderfs") = 0 [pid 5850] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6365] setpgid(0, 0) = 0 [ 322.294836][ T112] [ 322.294836][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.294836][ T112] [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6365] write(3, "1000", 4) = 4 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] <... close resumed>) = 0 executing program [pid 6365] write(1, "executing program\n", 18) = 18 [pid 6363] <... write resumed>) = 16777216 [pid 6363] munmap(0x7feda9000000, 138412032 [pid 6365] memfd_create("syzkaller", 0) = 3 [pid 6365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6366 attached , child_tidptr=0x555584a2d750) = 6366 [ 322.371242][ T5850] [ 322.371242][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.371242][ T5850] [ 322.391380][ T5850] [ 322.391380][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.391380][ T5850] [pid 6366] set_robust_list(0x555584a2d760, 24 [pid 5850] <... umount2 resumed>) = 0 [pid 6366] <... set_robust_list resumed>) = 0 [pid 5850] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6366] chdir("./83" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6363] <... munmap resumed>) = 0 [pid 5850] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6363] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5850] <... openat resumed>) = 4 [pid 6363] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [pid 6363] ioctl(4, LOOP_SET_FD, 3 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6366] <... chdir resumed>) = 0 [pid 6364] <... write resumed>) = 16777216 [pid 6363] <... ioctl resumed>) = 0 [pid 5850] getdents64(4, [pid 5847] <... close resumed>) = 0 [pid 6366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6366] setpgid(0, 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./83/file0" [pid 6366] <... setpgid resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, [pid 6363] close(3 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6363] <... close resumed>) = 0 [pid 5850] close(3 [pid 6363] close(4 [pid 5850] <... close resumed>) = 0 [pid 6366] <... openat resumed>) = 3 [pid 6363] <... close resumed>) = 0 [pid 5850] rmdir("./83" [pid 6366] write(3, "1000", 4 [pid 6363] mkdir("./file0", 0777 [pid 5850] <... rmdir resumed>) = 0 [pid 6363] <... mkdir resumed>) = 0 [pid 5850] mkdir("./84", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6364] munmap(0x7feda9000000, 138412032 [pid 6363] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... openat resumed>) = 3 [pid 6366] <... write resumed>) = 4 [pid 6366] close(3) = 0 [pid 6366] symlink("/dev/binderfs", "./binderfs" [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6366] <... symlink resumed>) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6366] write(1, "executing program\n", 18 [pid 5850] close(3executing program ./strace-static-x86_64: Process 6367 attached [pid 6366] <... write resumed>) = 18 [pid 6366] memfd_create("syzkaller", 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6367 [pid 6367] set_robust_list(0x555584a2d760, 24 [pid 6366] <... memfd_create resumed>) = 3 [pid 6367] <... set_robust_list resumed>) = 0 [pid 6364] <... munmap resumed>) = 0 [ 322.453679][ T6363] loop4: detected capacity change from 0 to 32768 [ 322.482211][ T6363] [ 322.482211][ T6363] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.482211][ T6363] [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6367] chdir("./84" [pid 6363] <... mount resumed>) = 0 [pid 6363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6363] chdir("./file0") = 0 [pid 6363] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6363] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6367] <... chdir resumed>) = 0 [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6367] setpgid(0, 0) = 0 [pid 6364] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 322.522833][ T6363] [ 322.522833][ T6363] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.522833][ T6363] [pid 6364] ioctl(4, LOOP_SET_FD, 3 [pid 6367] <... openat resumed>) = 3 [pid 6367] write(3, "1000", 4) = 4 [pid 6367] close(3) = 0 [pid 6367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6364] <... ioctl resumed>) = 0 [pid 6364] close(3) = 0 [pid 6364] close(4) = 0 [pid 6364] mkdir("./file0", 0777) = 0 [pid 6364] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6367] write(1, "executing program\n", 18executing program [ 322.571602][ T6364] loop1: detected capacity change from 0 to 32768 [ 322.582027][ T6363] [ 322.582027][ T6363] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.582027][ T6363] ) = 18 [pid 6367] memfd_create("syzkaller", 0) = 3 [pid 6367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6363] <... lsetxattr resumed>) = 0 [pid 6363] exit_group(0) = ? [pid 6363] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6364] <... mount resumed>) = 0 [pid 6364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6364] chdir("./file0") = 0 [pid 6364] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6364] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5851] <... restart_syscall resumed>) = 0 [ 322.615184][ T6364] [ 322.615184][ T6364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.615184][ T6364] [ 322.630575][ T113] [ 322.630575][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.630575][ T113] [ 322.657305][ T6364] [ 322.657305][ T6364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.657305][ T6364] [pid 5851] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6364] <... lsetxattr resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6364] exit_group(0) = ? [pid 6364] +++ exited with 0 +++ [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6364, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5848] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./84/binderfs") = 0 [pid 5848] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./83/binderfs") = 0 [ 322.690043][ T6364] [ 322.690043][ T6364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.690043][ T6364] [ 322.717754][ T112] [ 322.717754][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.717754][ T112] [pid 5851] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 322.756869][ T5848] [ 322.756869][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.756869][ T5848] [ 322.769161][ T5848] [ 322.769161][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.769161][ T5848] [ 322.781391][ T5851] [ 322.781391][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.781391][ T5851] [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./84/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./84") = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] mkdir("./85", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... ioctl resumed>) = 0 [pid 5848] close(3./strace-static-x86_64: Process 6368 attached [pid 6368] set_robust_list(0x555584a2d760, 24) = 0 [pid 6368] chdir("./84" [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6368 [pid 6368] <... chdir resumed>) = 0 [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6368] setpgid(0, 0) = 0 [ 322.810165][ T5851] [ 322.810165][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.810165][ T5851] [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6368] write(3, "1000", 4 [pid 5851] <... umount2 resumed>) = 0 [pid 6368] <... write resumed>) = 4 [pid 6368] close(3 [pid 5851] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6368] symlink("/dev/binderfs", "./binderfs" [pid 5851] newfstatat(AT_FDCWD, "./83/file0", [pid 6368] <... symlink resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 6368] write(1, "executing program\n", 18 [pid 5851] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] <... write resumed>) = 18 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6368] memfd_create("syzkaller", 0 [pid 6367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6368] <... memfd_create resumed>) = 3 [pid 5851] <... openat resumed>) = 4 [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5851] newfstatat(4, "", [pid 6368] <... mmap resumed>) = 0x7feda9000000 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./83/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./83") = 0 [pid 5851] mkdir("./84", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6365] <... write resumed>) = 16777216 [pid 6365] munmap(0x7feda9000000, 138412032 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6369 attached , child_tidptr=0x555584a2d750) = 6369 [pid 6369] set_robust_list(0x555584a2d760, 24) = 0 [pid 6369] chdir("./85") = 0 [pid 6369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6369] setpgid(0, 0) = 0 [pid 6369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6369] write(3, "1000", 4) = 4 [pid 6369] close(3) = 0 [pid 6369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6369] write(1, "executing program\n", 18executing program ) = 18 [pid 6369] memfd_create("syzkaller", 0) = 3 [pid 6369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6365] <... munmap resumed>) = 0 [pid 6365] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6365] close(3) = 0 [pid 6365] close(4 [pid 6368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6365] <... close resumed>) = 0 [ 323.187044][ T6365] loop2: detected capacity change from 0 to 32768 [pid 6365] mkdir("./file0", 0777) = 0 [pid 6365] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5851] <... close resumed>) = 0 [pid 6366] <... write resumed>) = 16777216 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6366] munmap(0x7feda9000000, 138412032./strace-static-x86_64: Process 6370 attached [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6370 [pid 6370] set_robust_list(0x555584a2d760, 24) = 0 [pid 6370] chdir("./84" [pid 6366] <... munmap resumed>) = 0 [pid 6370] <... chdir resumed>) = 0 [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6365] <... mount resumed>) = 0 [pid 6370] <... prctl resumed>) = 0 [pid 6365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6370] setpgid(0, 0 [pid 6365] <... openat resumed>) = 3 [pid 6370] <... setpgid resumed>) = 0 [pid 6365] chdir("./file0") = 0 [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6365] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6370] <... openat resumed>) = 3 [pid 6365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 323.280111][ T6365] [ 323.280111][ T6365] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.280111][ T6365] [pid 6370] write(3, "1000", 4 [pid 6366] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6365] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6370] <... write resumed>) = 4 [pid 6366] <... openat resumed>) = 4 [pid 6366] ioctl(4, LOOP_SET_FD, 3 [pid 6370] close(3 [pid 6366] <... ioctl resumed>) = 0 [pid 6366] close(3) = 0 [pid 6366] close(4) = 0 [pid 6366] mkdir("./file0", 0777) = 0 [pid 6366] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6370] <... close resumed>) = 0 [pid 6370] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6370] write(1, "executing program\n", 18) = 18 [ 323.351545][ T6366] loop5: detected capacity change from 0 to 32768 [ 323.352189][ T6365] [ 323.352189][ T6365] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.352189][ T6365] [pid 6370] memfd_create("syzkaller", 0 [pid 6367] <... write resumed>) = 16777216 [pid 6370] <... memfd_create resumed>) = 3 [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 323.397428][ T6366] [ 323.397428][ T6366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.397428][ T6366] [ 323.400200][ T6365] [ 323.400200][ T6365] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.400200][ T6365] [pid 6367] munmap(0x7feda9000000, 138412032 [pid 6366] <... mount resumed>) = 0 [pid 6366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6366] chdir("./file0") = 0 [pid 6366] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6366] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6367] <... munmap resumed>) = 0 [pid 6365] <... lsetxattr resumed>) = 0 [ 323.446936][ T6366] [ 323.446936][ T6366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.446936][ T6366] [ 323.476240][ T113] [ 323.476240][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.476240][ T113] [ 323.488985][ T6366] [ 323.488985][ T6366] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6365] exit_group(0) = ? [pid 6367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6365] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6365, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 6367] <... openat resumed>) = 4 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6367] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./83/binderfs") = 0 [pid 5849] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6366] <... lsetxattr resumed>) = 0 [pid 6366] exit_group(0 [pid 6367] <... ioctl resumed>) = 0 [pid 6367] close(3 [pid 6366] <... exit_group resumed>) = ? [pid 6367] <... close resumed>) = 0 [pid 6367] close(4) = 0 [pid 6366] +++ exited with 0 +++ [pid 6367] mkdir("./file0", 0777 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6366, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 6367] <... mkdir resumed>) = 0 [pid 5852] restart_syscall(<... resuming interrupted clone ...> [ 323.488985][ T6366] [ 323.510951][ T6367] loop0: detected capacity change from 0 to 32768 [ 323.518636][ T5849] [ 323.518636][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.518636][ T5849] [ 323.520549][ T112] [ 323.520549][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.520549][ T112] [pid 6367] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... restart_syscall resumed>) = 0 [pid 5852] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6367] <... mount resumed>) = 0 [pid 6367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] unlink("./83/binderfs" [pid 6367] <... openat resumed>) = 3 [pid 6367] chdir("./file0") = 0 [pid 5852] <... unlink resumed>) = 0 [ 323.556499][ T5849] [ 323.556499][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.556499][ T5849] [ 323.561204][ T6367] [ 323.561204][ T6367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.561204][ T6367] [pid 6367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6367] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 323.605691][ T6367] [ 323.605691][ T6367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.605691][ T6367] [ 323.617138][ T5852] [ 323.617138][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.617138][ T5852] [ 323.639414][ T6367] [ 323.639414][ T6367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.639414][ T6367] [pid 5849] newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6368] <... write resumed>) = 16777216 [pid 5849] <... openat resumed>) = 4 [pid 5849] newfstatat(4, "", [pid 6368] munmap(0x7feda9000000, 138412032 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6367] <... lsetxattr resumed>) = 0 [pid 6367] exit_group(0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, [pid 6367] <... exit_group resumed>) = ? [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6367] +++ exited with 0 +++ [pid 5849] close(4 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5849] <... close resumed>) = 0 [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5849] rmdir("./83/file0") = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5849] getdents64(3, [pid 6370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6368] <... munmap resumed>) = 0 [pid 5852] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... restart_syscall resumed>) = 0 [pid 6368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] close(3 [ 323.659809][ T5852] [ 323.659809][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.659809][ T5852] [ 323.685559][ T112] [ 323.685559][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.685559][ T112] [pid 5852] newfstatat(AT_FDCWD, "./83/file0", [pid 5849] <... close resumed>) = 0 [pid 6368] <... openat resumed>) = 4 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] rmdir("./83" [pid 5847] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] ioctl(4, LOOP_SET_FD, 3 [pid 5852] umount2("./83/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] <... ioctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... rmdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] mkdir("./84", 0777 [pid 5852] <... openat resumed>) = 4 [pid 5847] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] newfstatat(4, "", [pid 5849] <... mkdir resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] newfstatat(3, "", [pid 5852] getdents64(4, [pid 5849] <... openat resumed>) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] getdents64(3, [pid 5852] getdents64(4, [pid 5849] <... ioctl resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(3 [pid 5847] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(4 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./84/binderfs") = 0 [pid 5847] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6368] close(3) = 0 [pid 6368] close(4) = 0 [pid 6368] mkdir("./file0", 0777) = 0 [pid 6368] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./83/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 323.731971][ T6368] loop3: detected capacity change from 0 to 32768 [ 323.755002][ T5847] [ 323.755002][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.755002][ T5847] [pid 5852] close(3) = 0 [pid 5852] rmdir("./83") = 0 [pid 5852] mkdir("./84", 0777) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5847] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... openat resumed>) = 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5847] newfstatat(AT_FDCWD, "./84/file0", [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6369] <... write resumed>) = 16777216 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 323.797413][ T5847] [ 323.797413][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.797413][ T5847] [ 323.826604][ T6368] [ 323.826604][ T6368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.826604][ T6368] [pid 6369] munmap(0x7feda9000000, 138412032 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", [pid 6368] <... mount resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6369] <... munmap resumed>) = 0 [pid 6368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] getdents64(4, [pid 6368] <... openat resumed>) = 3 [pid 6368] chdir("./file0" [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6368] <... chdir resumed>) = 0 [pid 5847] getdents64(4, [pid 6368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] close(4 [pid 6368] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... close resumed>) = 0 [pid 6369] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] rmdir("./84/file0") = 0 [pid 6369] <... openat resumed>) = 4 [pid 5847] getdents64(3, [pid 6369] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 5847] rmdir("./84") = 0 [pid 5847] mkdir("./85", 0777) = 0 [ 323.915026][ T6368] [ 323.915026][ T6368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.915026][ T6368] [ 323.937936][ T6369] loop1: detected capacity change from 0 to 32768 [ 323.960468][ T6368] [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6369] <... ioctl resumed>) = 0 [pid 6369] close(3 [pid 5847] <... openat resumed>) = 3 [pid 6369] <... close resumed>) = 0 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6369] close(4) = 0 [pid 6368] <... lsetxattr resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 6369] mkdir("./file0", 0777 [pid 5847] close(3 [pid 6369] <... mkdir resumed>) = 0 [ 323.960468][ T6368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.960468][ T6368] [ 323.988996][ T113] [ 323.988996][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.988996][ T113] [pid 6369] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6368] exit_group(0) = ? [pid 6368] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6368, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6369] <... mount resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 6369] chdir("./file0" [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6369] <... chdir resumed>) = 0 [pid 5850] getdents64(3, [pid 6369] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6369] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] unlink("./84/binderfs") = 0 [pid 5850] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 324.020690][ T6369] [ 324.020690][ T6369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.020690][ T6369] [ 324.052371][ T6369] [ 324.052371][ T6369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.052371][ T6369] [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6371 attached [pid 6371] set_robust_list(0x555584a2d760, 24) = 0 [pid 6371] chdir("./84") = 0 [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6371] setpgid(0, 0) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6371 [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6371] write(3, "1000", 4) = 4 [pid 6371] close(3) = 0 [pid 6371] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6371] write(1, "executing program\n", 18) = 18 [pid 6371] memfd_create("syzkaller", 0) = 3 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6369] <... lsetxattr resumed>) = 0 [pid 6369] exit_group(0) = ? [pid 6369] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6369, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./85/binderfs") = 0 [ 324.074804][ T6369] [ 324.074804][ T6369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.074804][ T6369] [ 324.091930][ T5850] [ 324.091930][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.091930][ T5850] [ 324.110321][ T112] [ 324.110321][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.110321][ T112] [ 324.160810][ T5850] [ 324.160810][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.160810][ T5850] [ 324.180820][ T5848] [ 324.180820][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.180820][ T5848] [ 324.207941][ T5848] [pid 5848] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... umount2 resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./84/file0") = 0 [pid 5850] getdents64(3, ./strace-static-x86_64: Process 6372 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6372 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6372] set_robust_list(0x555584a2d760, 24 [pid 5850] close(3) = 0 [pid 5850] rmdir("./84") = 0 [pid 6372] <... set_robust_list resumed>) = 0 [pid 6372] chdir("./84" [pid 5850] mkdir("./85", 0777 [pid 6372] <... chdir resumed>) = 0 [pid 6372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... mkdir resumed>) = 0 [pid 6372] <... prctl resumed>) = 0 [pid 6372] setpgid(0, 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6372] <... setpgid resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 6372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6372] <... openat resumed>) = 3 [pid 5850] <... ioctl resumed>) = 0 [pid 6372] write(3, "1000", 4 [pid 5850] close(3 [pid 6372] <... write resumed>) = 4 [ 324.207941][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.207941][ T5848] [pid 6372] close(3) = 0 [pid 6372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6372] write(1, "executing program\n", 18executing program ) = 18 [pid 5848] <... umount2 resumed>) = 0 [pid 6372] memfd_create("syzkaller", 0 [pid 5847] <... close resumed>) = 0 [pid 6372] <... memfd_create resumed>) = 3 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./85/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./85") = 0 [pid 5848] mkdir("./86", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6373 attached [pid 6370] <... write resumed>) = 16777216 [pid 6373] set_robust_list(0x555584a2d760, 24 [pid 6370] munmap(0x7feda9000000, 138412032 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6373 [pid 6373] <... set_robust_list resumed>) = 0 [pid 6373] chdir("./85") = 0 [pid 6373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6373] setpgid(0, 0) = 0 [pid 6373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6370] <... munmap resumed>) = 0 [pid 6373] <... openat resumed>) = 3 [pid 6371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6373] write(3, "1000", 4 [pid 6370] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6373] <... write resumed>) = 4 [pid 6370] <... openat resumed>) = 4 [pid 6373] close(3 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 6373] <... close resumed>) = 0 [pid 6370] <... ioctl resumed>) = 0 [pid 6373] symlink("/dev/binderfs", "./binderfs" [pid 6370] close(3 [pid 6373] <... symlink resumed>) = 0 [pid 6370] <... close resumed>) = 0 [pid 6370] close(4) = 0 [ 324.421205][ T6370] loop4: detected capacity change from 0 to 32768 executing program [pid 6373] write(1, "executing program\n", 18 [pid 6370] mkdir("./file0", 0777 [pid 6373] <... write resumed>) = 18 [pid 6373] memfd_create("syzkaller", 0 [pid 6370] <... mkdir resumed>) = 0 [pid 6373] <... memfd_create resumed>) = 3 [pid 6373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6370] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6373] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... close resumed>) = 0 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6370] <... mount resumed>) = 0 [ 324.522610][ T6370] [ 324.522610][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.522610][ T6370] [pid 6370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6370] chdir("./file0") = 0 [pid 6370] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6370] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6374 ./strace-static-x86_64: Process 6374 attached [pid 6374] set_robust_list(0x555584a2d760, 24) = 0 [pid 6374] chdir("./85") = 0 [pid 6374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6374] setpgid(0, 0) = 0 [pid 6374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 6374] write(3, "1000", 4) = 4 [pid 6374] close(3) = 0 [pid 6374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6374] write(1, "executing program\n", 18) = 18 [pid 6374] memfd_create("syzkaller", 0) = 3 [pid 6374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 324.572496][ T6370] [ 324.572496][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.572496][ T6370] [ 324.590142][ T6370] [ 324.590142][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.590142][ T6370] [pid 5848] <... close resumed>) = 0 [pid 6370] <... lsetxattr resumed>) = 0 [pid 6370] exit_group(0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6375 attached [pid 6370] <... exit_group resumed>) = ? [pid 6370] +++ exited with 0 +++ [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6375 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 6375] set_robust_list(0x555584a2d760, 24) = 0 [pid 6375] chdir("./86") = 0 [pid 6375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6375] setpgid(0, 0) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, [pid 6375] <... openat resumed>) = 3 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./84/binderfs" [pid 6375] write(3, "1000", 4 [pid 5851] <... unlink resumed>) = 0 [pid 6375] <... write resumed>) = 4 [pid 5851] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6375] close(3) = 0 [pid 6375] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6375] write(1, "executing program\n", 18executing program ) = 18 [pid 6375] memfd_create("syzkaller", 0) = 3 [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 324.639623][ T113] [ 324.639623][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.639623][ T113] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 324.696196][ T5851] [ 324.696196][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.696196][ T5851] [ 324.730238][ T5851] [ 324.730238][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.730238][ T5851] [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./84/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./84") = 0 [pid 5851] mkdir("./85", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 6373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6371] <... write resumed>) = 16777216 [pid 6371] munmap(0x7feda9000000, 138412032 [pid 6375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6371] <... munmap resumed>) = 0 [pid 6372] <... write resumed>) = 16777216 [pid 6371] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6372] munmap(0x7feda9000000, 138412032 [pid 6371] close(3) = 0 [pid 6371] close(4) = 0 [pid 6371] mkdir("./file0", 0777) = 0 [ 325.041876][ T6371] loop2: detected capacity change from 0 to 32768 [pid 6371] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6372] <... munmap resumed>) = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... close resumed>) = 0 [pid 6372] <... ioctl resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6372] close(3 [pid 6371] <... mount resumed>) = 0 [pid 6372] <... close resumed>) = 0 [pid 6371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6372] close(4 [pid 6371] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6376 attached [pid 6376] set_robust_list(0x555584a2d760, 24 [pid 6372] <... close resumed>) = 0 [pid 6371] chdir("./file0" [pid 6376] <... set_robust_list resumed>) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555584a2d750) = 6376 [pid 6372] mkdir("./file0", 0777 [pid 6371] <... chdir resumed>) = 0 [pid 6376] chdir("./85" [pid 6372] <... mkdir resumed>) = 0 [pid 6371] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6376] <... chdir resumed>) = 0 [pid 6376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6372] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6376] <... prctl resumed>) = 0 [ 325.113388][ T6372] loop5: detected capacity change from 0 to 32768 [ 325.120901][ T6371] [ 325.120901][ T6371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.120901][ T6371] [pid 6376] setpgid(0, 0 [pid 6371] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6376] <... setpgid resumed>) = 0 [pid 6376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6376] write(3, "1000", 4) = 4 [pid 6376] close(3) = 0 [pid 6376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6376] write(1, "executing program\n", 18executing program ) = 18 [ 325.164899][ T6371] [ 325.164899][ T6371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.164899][ T6371] [ 325.187217][ T6372] [ 325.187217][ T6372] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.187217][ T6372] [pid 6376] memfd_create("syzkaller", 0) = 3 [pid 6376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6372] <... mount resumed>) = 0 [pid 6372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6372] chdir("./file0") = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 325.214148][ T6371] [ 325.214148][ T6371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.214148][ T6371] [ 325.233188][ T6372] [ 325.233188][ T6372] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.233188][ T6372] [ 325.256361][ T6372] [ 325.256361][ T6372] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6372] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6371] <... lsetxattr resumed>) = 0 [pid 6371] exit_group(0) = ? [pid 6371] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6371, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6372] <... lsetxattr resumed>) = 0 [ 325.256361][ T6372] [ 325.261517][ T112] [ 325.261517][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.261517][ T112] [pid 6372] exit_group(0) = ? [pid 6372] +++ exited with 0 +++ [pid 6373] <... write resumed>) = 16777216 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6372, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6373] munmap(0x7feda9000000, 138412032 [pid 5849] <... openat resumed>) = 3 [pid 5852] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] newfstatat(3, "", [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] <... openat resumed>) = 3 [pid 5849] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] newfstatat(3, "", [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5852] getdents64(3, [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] unlink("./84/binderfs") = 0 [pid 5852] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./84/binderfs") = 0 [ 325.313847][ T112] [ 325.313847][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.313847][ T112] [pid 5852] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6373] <... munmap resumed>) = 0 [pid 6374] <... write resumed>) = 16777216 [pid 6373] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6374] munmap(0x7feda9000000, 138412032 [pid 6373] <... openat resumed>) = 4 [pid 6373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6373] close(3) = 0 [ 325.374667][ T5849] [ 325.374667][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.374667][ T5849] [ 325.385782][ T5852] [ 325.385782][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.385782][ T5852] [ 325.400660][ T6373] loop0: detected capacity change from 0 to 32768 [ 325.407410][ T5849] [ 325.407410][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.407410][ T5849] [ 325.418755][ T5852] [pid 6373] close(4) = 0 [pid 6373] mkdir("./file0", 0777) = 0 [pid 6373] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6374] <... munmap resumed>) = 0 [pid 6374] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6374] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5852] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6374] <... ioctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./84/file0", [pid 5849] newfstatat(AT_FDCWD, "./84/file0", [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] umount2("./84/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] close(3 [pid 5852] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] <... close resumed>) = 0 [pid 6374] close(4 [pid 5852] <... openat resumed>) = 4 [pid 5849] openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6374] <... close resumed>) = 0 [pid 6373] <... mount resumed>) = 0 [pid 6374] mkdir("./file0", 0777 [pid 5852] newfstatat(4, "", [pid 5849] <... openat resumed>) = 4 [pid 6374] <... mkdir resumed>) = 0 [pid 6374] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 325.418755][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.418755][ T5852] [ 325.436463][ T6373] [ 325.436463][ T6373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.436463][ T6373] [ 325.463043][ T6374] loop3: detected capacity change from 0 to 32768 [pid 5849] newfstatat(4, "", [pid 5852] getdents64(4, [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 6375] <... write resumed>) = 16777216 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6375] munmap(0x7feda9000000, 138412032 [pid 5852] close(4 [pid 6374] <... mount resumed>) = 0 [pid 6373] <... openat resumed>) = 3 [pid 5849] getdents64(4, [pid 5852] <... close resumed>) = 0 [pid 6374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6373] chdir("./file0" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6374] <... openat resumed>) = 3 [pid 6373] <... chdir resumed>) = 0 [pid 5852] rmdir("./84/file0" [pid 6374] chdir("./file0" [pid 6373] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5849] close(4 [ 325.525183][ T6374] [ 325.525183][ T6374] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.525183][ T6374] [pid 6375] <... munmap resumed>) = 0 [pid 6374] <... chdir resumed>) = 0 [pid 6373] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... rmdir resumed>) = 0 [pid 6374] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] getdents64(3, [pid 5849] <... close resumed>) = 0 [pid 6373] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] rmdir("./84/file0" [pid 6374] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5852] close(3 [pid 6374] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... close resumed>) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6375] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6375] ioctl(4, LOOP_SET_FD, 3 [pid 5852] rmdir("./84" [pid 5849] close(3) = 0 [pid 5849] rmdir("./84" [pid 5852] <... rmdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [ 325.582029][ T6373] [ 325.582029][ T6373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.582029][ T6373] [ 325.594718][ T6374] [ 325.594718][ T6374] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.594718][ T6374] [ 325.595961][ T6375] loop1: detected capacity change from 0 to 32768 [ 325.613671][ T6373] [ 325.613671][ T6373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.613671][ T6373] [ 325.619979][ T6374] [ 325.619979][ T6374] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6375] <... ioctl resumed>) = 0 [pid 6373] <... lsetxattr resumed>) = 0 [pid 5852] mkdir("./85", 0777 [pid 6375] close(3 [pid 5849] mkdir("./85", 0777 [pid 6375] <... close resumed>) = 0 [pid 6373] exit_group(0 [pid 6375] close(4 [pid 6373] <... exit_group resumed>) = ? [pid 5849] <... mkdir resumed>) = 0 [pid 6375] <... close resumed>) = 0 [pid 6373] +++ exited with 0 +++ [pid 5852] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] <... openat resumed>) = 3 [pid 6375] mkdir("./file0", 0777 [pid 5852] <... openat resumed>) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD [pid 6375] <... mkdir resumed>) = 0 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5849] <... ioctl resumed>) = 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6373, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 6375] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5852] close(3 [pid 5847] <... restart_syscall resumed>) = 0 [ 325.619979][ T6374] [ 325.635277][ T113] [ 325.635277][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.635277][ T113] [pid 5847] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6374] <... lsetxattr resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] exit_group(0 [pid 5847] <... openat resumed>) = 3 [pid 6374] <... exit_group resumed>) = ? [pid 6374] +++ exited with 0 +++ [pid 5847] newfstatat(3, "", [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6374, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./85/binderfs") = 0 [pid 5850] <... restart_syscall resumed>) = 0 [pid 5847] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 325.680442][ T112] [ 325.680442][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.680442][ T112] [ 325.712192][ T6375] [ 325.712192][ T6375] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.712192][ T6375] [pid 5850] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6375] <... mount resumed>) = 0 [pid 5850] newfstatat(3, "", [pid 6375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6375] <... openat resumed>) = 3 [pid 5850] getdents64(3, [pid 6375] chdir("./file0" [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6375] <... chdir resumed>) = 0 [pid 5850] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6375] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6375] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 325.730231][ T5847] [ 325.730231][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.730231][ T5847] [ 325.745139][ T6375] [ 325.745139][ T6375] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.745139][ T6375] [ 325.768373][ T6375] [ 325.768373][ T6375] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.768373][ T6375] [pid 5850] unlink("./85/binderfs" [pid 6376] <... write resumed>) = 16777216 [pid 5850] <... unlink resumed>) = 0 [pid 6376] munmap(0x7feda9000000, 138412032 [pid 5850] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6375] <... lsetxattr resumed>) = 0 [pid 6375] exit_group(0) = ? [pid 6375] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6376] <... munmap resumed>) = 0 [pid 5848] unlink("./86/binderfs" [pid 6376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6376] <... openat resumed>) = 4 [ 325.794739][ T5847] [ 325.794739][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.794739][ T5847] [ 325.819306][ T113] [ 325.819306][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.819306][ T113] [pid 6376] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6376] close(3) = 0 [pid 6376] close(4) = 0 [pid 6376] mkdir("./file0", 0777) = 0 [ 325.848254][ T6376] loop4: detected capacity change from 0 to 32768 [ 325.860837][ T5850] [ 325.860837][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.860837][ T5850] [ 325.880667][ T5848] [ 325.880667][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.880667][ T5848] [ 325.896374][ T6376] [pid 6376] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5847] <... umount2 resumed>) = 0 [pid 5847] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5847] close(4) = 0 [pid 5847] rmdir("./85/file0") = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [pid 6376] <... mount resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5847] rmdir("./85" [pid 5850] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] <... rmdir resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./85/file0") = 0 [pid 5847] mkdir("./86", 0777 [pid 6376] <... openat resumed>) = 3 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./85" [pid 5847] <... mkdir resumed>) = 0 [pid 6376] chdir("./file0") = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5850] mkdir("./86", 0777 [pid 6376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... close resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 6376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 325.896374][ T6376] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.896374][ T6376] [ 325.907385][ T5850] [ 325.907385][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.907385][ T5850] [ 325.922808][ T5848] [ 325.922808][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.922808][ T5848] [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6376] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... openat resumed>) = 3 [pid 5849] <... close resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5847] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6377 attached [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5848] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... ioctl resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] close(3 [pid 5848] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6377] set_robust_list(0x555584a2d760, 24) = 0 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6377 [pid 6377] chdir("./85") = 0 [pid 5848] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] close(3 [pid 6377] <... prctl resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6377] setpgid(0, 0 [pid 5848] <... openat resumed>) = 4 [pid 6377] <... setpgid resumed>) = 0 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] getdents64(4, [pid 6377] <... openat resumed>) = 3 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6377] write(3, "1000", 4 [pid 5848] getdents64(4, [pid 6377] <... write resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6377] close(3 [pid 5848] close(4 [pid 6377] <... close resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6377] symlink("/dev/binderfs", "./binderfs" [pid 5848] rmdir("./86/file0" [pid 6377] <... symlink resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 6377] write(1, "executing program\n", 18executing program [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6377] <... write resumed>) = 18 [pid 5848] close(3 [pid 6377] memfd_create("syzkaller", 0 [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./86") = 0 [pid 6377] <... memfd_create resumed>) = 3 [pid 6377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] mkdir("./87", 0777) = 0 ./strace-static-x86_64: Process 6378 attached [pid 6378] set_robust_list(0x555584a2d760, 24 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6378 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6378] <... set_robust_list resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [ 325.982303][ T6376] [ 325.982303][ T6376] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.982303][ T6376] [pid 6378] chdir("./85") = 0 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 6378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6378] setpgid(0, 0) = 0 [pid 6378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6378] write(3, "1000", 4) = 4 [pid 6378] close(3) = 0 [pid 6378] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6378] write(1, "executing program\n", 18) = 18 [pid 6378] memfd_create("syzkaller", 0 [pid 6376] <... lsetxattr resumed>) = 0 [pid 6378] <... memfd_create resumed>) = 3 [pid 6378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 326.030329][ T6376] [ 326.030329][ T6376] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 326.030329][ T6376] [ 326.070422][ T112] [ 326.070422][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 326.070422][ T112] [pid 6376] exit_group(0) = ? [pid 6376] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6376, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./85/binderfs") = 0 [pid 5851] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5851] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 326.185171][ T5851] [ 326.185171][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 326.185171][ T5851] [ 326.212659][ T5851] [ 326.212659][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 326.212659][ T5851] [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./85/file0") = 0 [pid 5847] <... close resumed>) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] close(3) = 0 [pid 5851] rmdir("./85") = 0 [pid 5851] mkdir("./86", 0777./strace-static-x86_64: Process 6379 attached ) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6379 [pid 6379] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] <... openat resumed>) = 3 [pid 6379] chdir("./86" [pid 5851] ioctl(3, LOOP_CLR_FD [pid 6379] <... chdir resumed>) = 0 [pid 5851] <... ioctl resumed>) = 0 [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] close(3 [pid 6379] <... prctl resumed>) = 0 [pid 6379] setpgid(0, 0) = 0 [pid 5850] <... close resumed>) = 0 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6379] write(3, "1000", 4) = 4 [pid 6379] close(3) = 0 [pid 6379] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6379] write(1, "executing program\n", 18) = 18 [pid 6379] memfd_create("syzkaller", 0) = 3 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6380 ./strace-static-x86_64: Process 6380 attached [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6380] set_robust_list(0x555584a2d760, 24) = 0 [pid 6380] chdir("./86") = 0 [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6380] setpgid(0, 0) = 0 [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6381 ./strace-static-x86_64: Process 6381 attached [pid 6380] <... openat resumed>) = 3 [pid 6381] set_robust_list(0x555584a2d760, 24 [pid 6377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6381] <... set_robust_list resumed>) = 0 [pid 6381] chdir("./87" [pid 6380] write(3, "1000", 4) = 4 [pid 6380] close(3) = 0 [pid 6380] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6380] write(1, "executing program\n", 18) = 18 [pid 6380] memfd_create("syzkaller", 0) = 3 [pid 6380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6381] <... chdir resumed>) = 0 [pid 6378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6381] setpgid(0, 0) = 0 [pid 6381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6381] write(3, "1000", 4) = 4 [pid 6381] close(3) = 0 [pid 6381] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6381] write(1, "executing program\n", 18) = 18 [pid 6381] memfd_create("syzkaller", 0) = 3 [pid 6381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6382 ./strace-static-x86_64: Process 6382 attached [pid 6382] set_robust_list(0x555584a2d760, 24) = 0 [pid 6382] chdir("./86") = 0 [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6382] setpgid(0, 0) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6382] write(3, "1000", 4) = 4 [pid 6382] close(3) = 0 [pid 6380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6382] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6382] write(1, "executing program\n", 18) = 18 [pid 6382] memfd_create("syzkaller", 0) = 3 [pid 6379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6377] <... write resumed>) = 16777216 [pid 6377] munmap(0x7feda9000000, 138412032 [pid 6378] <... write resumed>) = 16777216 [pid 6378] munmap(0x7feda9000000, 138412032 [pid 6377] <... munmap resumed>) = 0 [pid 6377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6377] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6378] <... munmap resumed>) = 0 [pid 6377] close(3 [pid 6378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6377] <... close resumed>) = 0 [pid 6378] <... openat resumed>) = 4 [pid 6377] close(4 [pid 6378] ioctl(4, LOOP_SET_FD, 3 [pid 6377] <... close resumed>) = 0 [ 326.901568][ T6377] loop5: detected capacity change from 0 to 32768 [pid 6378] <... ioctl resumed>) = 0 [pid 6377] mkdir("./file0", 0777) = 0 [pid 6378] close(3 [pid 6377] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6378] <... close resumed>) = 0 [pid 6378] close(4) = 0 [pid 6378] mkdir("./file0", 0777) = 0 [ 326.950418][ T6378] loop2: detected capacity change from 0 to 32768 [pid 6378] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 326.992293][ T6377] [ 326.992293][ T6377] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 326.992293][ T6377] [pid 6382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6377] <... mount resumed>) = 0 [pid 6377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6377] chdir("./file0") = 0 [pid 6377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6377] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6378] <... mount resumed>) = 0 [pid 6378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 327.093537][ T6378] [ 327.093537][ T6378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.093537][ T6378] [ 327.104724][ T6377] [ 327.104724][ T6377] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.104724][ T6377] [ 327.126502][ T6377] [ 327.126502][ T6377] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.126502][ T6377] [pid 6378] chdir("./file0" [pid 6377] <... lsetxattr resumed>) = 0 [pid 6378] <... chdir resumed>) = 0 [pid 6377] exit_group(0 [pid 6378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6377] <... exit_group resumed>) = ? [pid 6378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6377] +++ exited with 0 +++ [pid 6378] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6377, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./85/binderfs") = 0 [ 327.170361][ T113] [ 327.170361][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.170361][ T113] [ 327.187094][ T6378] [ 327.187094][ T6378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.187094][ T6378] [ 327.216358][ T5852] [pid 5852] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6379] <... write resumed>) = 16777216 [pid 6381] <... write resumed>) = 16777216 [pid 6380] <... write resumed>) = 16777216 [pid 6379] munmap(0x7feda9000000, 138412032 [pid 6381] munmap(0x7feda9000000, 138412032 [pid 6378] <... lsetxattr resumed>) = 0 [ 327.216358][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.216358][ T5852] [ 327.223078][ T6378] [ 327.223078][ T6378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.223078][ T6378] [ 327.245863][ T5852] [ 327.245863][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.245863][ T5852] [pid 6378] exit_group(0) = ? [pid 6378] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6378, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 6381] <... munmap resumed>) = 0 [pid 6380] munmap(0x7feda9000000, 138412032 [pid 5849] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6381] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6381] <... openat resumed>) = 4 [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", [pid 6381] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... umount2 resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6379] <... munmap resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5852] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] newfstatat(AT_FDCWD, "./85/file0", [pid 5849] unlink("./85/binderfs" [pid 6379] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... unlink resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 327.282743][ T113] [ 327.282743][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.282743][ T113] [ 327.310713][ T6381] loop1: detected capacity change from 0 to 32768 [pid 5849] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6381] <... ioctl resumed>) = 0 [pid 6380] <... munmap resumed>) = 0 [pid 6379] <... openat resumed>) = 4 [pid 5852] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6380] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] <... openat resumed>) = 4 [pid 6380] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", [pid 6380] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6381] close(3 [pid 6379] ioctl(4, LOOP_SET_FD, 3 [pid 6381] <... close resumed>) = 0 [pid 6380] <... ioctl resumed>) = 0 [pid 5852] getdents64(4, [pid 6381] close(4) = 0 [pid 6381] mkdir("./file0", 0777) = 0 [pid 6381] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, [pid 6379] <... ioctl resumed>) = 0 [pid 6379] close(3 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6379] <... close resumed>) = 0 [pid 6379] close(4) = 0 [pid 6379] mkdir("./file0", 0777) = 0 [pid 6379] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] close(4) = 0 [pid 6380] close(3 [pid 5852] rmdir("./85/file0") = 0 [pid 6380] <... close resumed>) = 0 [pid 5852] getdents64(3, [pid 6380] close(4 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6380] <... close resumed>) = 0 [pid 5852] close(3 [pid 6380] mkdir("./file0", 0777 [pid 5852] <... close resumed>) = 0 [pid 6380] <... mkdir resumed>) = 0 [pid 5852] rmdir("./85" [pid 6380] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] <... rmdir resumed>) = 0 [ 327.341974][ T6380] loop3: detected capacity change from 0 to 32768 [ 327.342240][ T6379] loop0: detected capacity change from 0 to 32768 [ 327.370627][ T5849] [ 327.370627][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.370627][ T5849] [pid 5852] mkdir("./86", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 6381] <... mount resumed>) = 0 [pid 6379] <... mount resumed>) = 0 [pid 5852] close(3 [pid 6381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6381] <... openat resumed>) = 3 [pid 6379] <... openat resumed>) = 3 [pid 6381] chdir("./file0" [pid 6379] chdir("./file0" [pid 6381] <... chdir resumed>) = 0 [pid 6379] <... chdir resumed>) = 0 [pid 6381] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6379] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6379] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 327.399191][ T6381] [ 327.399191][ T6381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.399191][ T6381] [ 327.412685][ T6379] [ 327.412685][ T6379] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.412685][ T6379] [ 327.420771][ T6380] [ 327.420771][ T6380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.420771][ T6380] [ 327.424982][ T5849] [ 327.424982][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.424982][ T5849] [pid 6381] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6379] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6380] <... mount resumed>) = 0 [ 327.463011][ T6379] [ 327.463011][ T6379] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.463011][ T6379] [ 327.473965][ T6381] [ 327.473965][ T6381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.473965][ T6381] [ 327.491243][ T6379] [ 327.491243][ T6379] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.491243][ T6379] [ 327.511151][ T6381] [pid 6380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6380] chdir("./file0") = 0 [pid 6380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6380] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6379] <... lsetxattr resumed>) = 0 [pid 5849] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./85/file0", [pid 6381] <... lsetxattr resumed>) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6381] exit_group(0 [ 327.511151][ T6381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.511151][ T6381] [ 327.537043][ T6380] [ 327.537043][ T6380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.537043][ T6380] [ 327.538379][ T112] [ 327.538379][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.538379][ T112] [pid 5849] umount2("./85/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6381] <... exit_group resumed>) = ? [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6381] +++ exited with 0 +++ [pid 5849] openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6381, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 6379] exit_group(0 [pid 5849] getdents64(4, [pid 5848] <... restart_syscall resumed>) = 0 [pid 6379] <... exit_group resumed>) = ? [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6379] +++ exited with 0 +++ [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] <... close resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] rmdir("./85/file0" [pid 5848] <... openat resumed>) = 3 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] newfstatat(3, "", [pid 5849] getdents64(3, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(3, [pid 5849] close(3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] <... close resumed>) = 0 [pid 5848] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5849] rmdir("./85" [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... restart_syscall resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5848] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5849] mkdir("./86", 0777 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... mkdir resumed>) = 0 [pid 5848] unlink("./87/binderfs" [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] <... unlink resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] <... openat resumed>) = 3 [pid 5848] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] ioctl(3, LOOP_CLR_FD [pid 5847] <... openat resumed>) = 3 [pid 5847] newfstatat(3, "", [pid 5849] <... ioctl resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] close(3 [pid 5847] getdents64(3, [pid 6382] <... write resumed>) = 16777216 [ 327.562388][ T113] [ 327.562388][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.562388][ T113] [ 327.599205][ T6380] [ 327.599205][ T6380] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.599205][ T6380] [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5847] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./86/binderfs") = 0 [pid 5847] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6382] munmap(0x7feda9000000, 138412032 [pid 6380] <... lsetxattr resumed>) = 0 [pid 6380] exit_group(0) = ? [pid 6380] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6380, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [ 327.634741][ T5848] [ 327.634741][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.634741][ T5848] [ 327.669705][ T5847] [ 327.669705][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.669705][ T5847] [ 327.681885][ T113] [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./86/binderfs") = 0 [ 327.681885][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.681885][ T113] [ 327.692663][ T5848] [ 327.692663][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.692663][ T5848] [pid 5850] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6382] <... munmap resumed>) = 0 [pid 6382] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6382] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 6382] close(3 [pid 5848] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./87/file0", [pid 6382] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6382] close(4 [pid 5848] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./87/file0" [pid 6382] <... close resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [ 327.730202][ T5847] [ 327.730202][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.730202][ T5847] [ 327.731806][ T5850] [ 327.731806][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.731806][ T5850] [ 327.754915][ T6382] loop4: detected capacity change from 0 to 32768 [pid 5848] rmdir("./87") = 0 [pid 6382] mkdir("./file0", 0777 [pid 5848] mkdir("./88", 0777) = 0 [pid 6382] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6382] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6382] <... mount resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 6382] <... openat resumed>) = 3 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6382] chdir("./file0" [ 327.792480][ T5850] [ 327.792480][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.792480][ T5850] [ 327.827111][ T6382] [ 327.827111][ T6382] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.827111][ T6382] [pid 5847] getdents64(4, [pid 6382] <... chdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6382] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5847] close(4) = 0 [pid 5847] rmdir("./86/file0") = 0 [pid 5847] getdents64(3, [pid 6382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3 [pid 6382] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5847] <... close resumed>) = 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5847] rmdir("./86" [pid 5850] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] <... rmdir resumed>) = 0 [pid 5850] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] mkdir("./87", 0777./strace-static-x86_64: Process 6384 attached [pid 6384] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6384 [pid 5850] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... mkdir resumed>) = 0 [pid 6384] <... set_robust_list resumed>) = 0 [pid 6382] <... lsetxattr resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6384] chdir("./86" [pid 6382] exit_group(0 [pid 5850] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... openat resumed>) = 3 [pid 6384] <... chdir resumed>) = 0 [pid 6382] <... exit_group resumed>) = ? [pid 5850] <... openat resumed>) = 4 [pid 5847] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6385 attached [pid 6384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] newfstatat(4, "", [pid 5847] <... ioctl resumed>) = 0 [pid 6385] set_robust_list(0x555584a2d760, 24 [pid 6384] <... prctl resumed>) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 327.870681][ T6382] [ 327.870681][ T6382] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.870681][ T6382] [ 327.897539][ T6382] [ 327.897539][ T6382] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.897539][ T6382] [ 327.910436][ T112] [ 327.910436][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.910436][ T112] [pid 5847] close(3 [pid 6385] <... set_robust_list resumed>) = 0 [pid 6384] setpgid(0, 0 [pid 5850] getdents64(4, [pid 6385] chdir("./86" [pid 6384] <... setpgid resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] getdents64(4, [pid 6385] <... chdir resumed>) = 0 [pid 6384] <... openat resumed>) = 3 [pid 6382] +++ exited with 0 +++ [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6385 [pid 6384] write(3, "1000", 4 [pid 5850] close(4 [pid 6384] <... write resumed>) = 4 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5850] <... close resumed>) = 0 [pid 6384] close(3 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] rmdir("./86/file0" [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6384] <... close resumed>) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 6385] <... prctl resumed>) = 0 [pid 6384] symlink("/dev/binderfs", "./binderfs" [pid 5850] getdents64(3, executing program [pid 6385] setpgid(0, 0 [pid 6384] <... symlink resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6384] write(1, "executing program\n", 18 [pid 5850] close(3 [pid 6384] <... write resumed>) = 18 [pid 5850] <... close resumed>) = 0 [pid 6384] memfd_create("syzkaller", 0 [pid 5850] rmdir("./86" [pid 6384] <... memfd_create resumed>) = 3 [pid 5850] <... rmdir resumed>) = 0 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] mkdir("./87", 0777 [pid 6384] <... mmap resumed>) = 0x7feda9000000 [pid 5850] <... mkdir resumed>) = 0 [pid 6385] <... setpgid resumed>) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... ioctl resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] close(3 [pid 6385] <... openat resumed>) = 3 [pid 5851] <... openat resumed>) = 3 [pid 6385] write(3, "1000", 4 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./86/binderfs" [pid 6385] <... write resumed>) = 4 [pid 5851] <... unlink resumed>) = 0 [pid 6385] close(3 [pid 5851] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6385] <... close resumed>) = 0 [pid 6385] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6385] write(1, "executing program\n", 18) = 18 [pid 6385] memfd_create("syzkaller", 0) = 3 [pid 6385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [ 328.030486][ T5851] [ 328.030486][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.030486][ T5851] [ 328.070290][ T5851] [ 328.070290][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.070290][ T5851] [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./86/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./86") = 0 [pid 5851] mkdir("./87", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5848] <... close resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6386 attached [pid 6386] set_robust_list(0x555584a2d760, 24 [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6386 [pid 6386] <... set_robust_list resumed>) = 0 [pid 6386] chdir("./88") = 0 [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6386] setpgid(0, 0) = 0 [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6386] write(3, "1000", 4) = 4 [pid 6386] close(3) = 0 [pid 6386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6386] write(1, "executing program\n", 18executing program ) = 18 [pid 6386] memfd_create("syzkaller", 0) = 3 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 6387 attached [pid 6387] set_robust_list(0x555584a2d760, 24) = 0 [pid 6387] chdir("./87") = 0 [pid 6387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6387] setpgid(0, 0) = 0 [pid 6387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6387] write(3, "1000", 4) = 4 [pid 6387] close(3) = 0 [pid 6387] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6387] write(1, "executing program\n", 18) = 18 [pid 6387] memfd_create("syzkaller", 0 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6387 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6387] <... memfd_create resumed>) = 3 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] <... close resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6388 ./strace-static-x86_64: Process 6388 attached [pid 6388] set_robust_list(0x555584a2d760, 24) = 0 [pid 6388] chdir("./87") = 0 [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6388] setpgid(0, 0) = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6388] write(3, "1000", 4) = 4 [pid 6388] close(3) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6388] write(1, "executing program\n", 18) = 18 [pid 6388] memfd_create("syzkaller", 0) = 3 [pid 6388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6389 ./strace-static-x86_64: Process 6389 attached [pid 6389] set_robust_list(0x555584a2d760, 24) = 0 [pid 6389] chdir("./87") = 0 [pid 6389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6389] setpgid(0, 0) = 0 [pid 6389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6389] write(3, "1000", 4) = 4 [pid 6389] close(3) = 0 [pid 6389] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6389] write(1, "executing program\n", 18) = 18 [pid 6389] memfd_create("syzkaller", 0) = 3 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6384] <... write resumed>) = 16777216 [pid 6389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6384] munmap(0x7feda9000000, 138412032 [pid 6385] <... write resumed>) = 16777216 [pid 6385] munmap(0x7feda9000000, 138412032 [pid 6384] <... munmap resumed>) = 0 [pid 6385] <... munmap resumed>) = 0 [pid 6385] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6384] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 6385] ioctl(4, LOOP_SET_FD, 3 [pid 6384] <... ioctl resumed>) = 0 [pid 6385] <... ioctl resumed>) = 0 [pid 6384] close(3 [pid 6385] close(3) = 0 [pid 6385] close(4) = 0 [pid 6385] mkdir("./file0", 0777) = 0 [pid 6385] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6384] <... close resumed>) = 0 [ 329.001796][ T6384] loop5: detected capacity change from 0 to 32768 [ 329.002611][ T6385] loop2: detected capacity change from 0 to 32768 [pid 6384] close(4) = 0 [pid 6384] mkdir("./file0", 0777) = 0 [pid 6385] <... mount resumed>) = 0 [pid 6384] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6385] chdir("./file0") = 0 [pid 6385] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 329.050942][ T6385] [ 329.050942][ T6385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.050942][ T6385] [pid 6385] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6384] <... mount resumed>) = 0 [pid 6384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 329.107543][ T6385] [ 329.107543][ T6385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.107543][ T6385] [ 329.113810][ T6384] [ 329.113810][ T6384] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.113810][ T6384] [pid 6384] chdir("./file0") = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6384] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6386] <... write resumed>) = 16777216 [pid 6385] <... lsetxattr resumed>) = 0 [ 329.181786][ T6385] [ 329.181786][ T6385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.181786][ T6385] [ 329.195530][ T6384] [ 329.195530][ T6384] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.195530][ T6384] [ 329.215475][ T112] [ 329.215475][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.215475][ T112] [ 329.220027][ T6384] [pid 6386] munmap(0x7feda9000000, 138412032 [pid 6385] exit_group(0) = ? [pid 6385] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [ 329.220027][ T6384] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.220027][ T6384] [pid 6388] <... write resumed>) = 16777216 [pid 6387] <... write resumed>) = 16777216 [pid 5849] <... restart_syscall resumed>) = 0 [pid 6384] <... lsetxattr resumed>) = 0 [pid 6388] munmap(0x7feda9000000, 138412032 [pid 6384] exit_group(0) = ? [pid 5849] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6386] <... munmap resumed>) = 0 [pid 6384] +++ exited with 0 +++ [pid 5849] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6386] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5849] <... openat resumed>) = 3 [pid 6386] <... openat resumed>) = 4 [pid 5849] newfstatat(3, "", [pid 6386] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6384, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./86/binderfs") = 0 [pid 5849] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6386] <... ioctl resumed>) = 0 [pid 6386] close(3 [pid 6387] munmap(0x7feda9000000, 138412032 [pid 6386] <... close resumed>) = 0 [pid 6386] close(4) = 0 [pid 6386] mkdir("./file0", 0777) = 0 [pid 6386] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 6388] <... munmap resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] getdents64(3, [pid 6388] <... openat resumed>) = 4 [pid 6388] ioctl(4, LOOP_SET_FD, 3 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 329.267655][ T113] [ 329.267655][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.267655][ T113] [ 329.286877][ T6386] loop1: detected capacity change from 0 to 32768 [ 329.299219][ T5849] [ 329.299219][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.299219][ T5849] [pid 6387] <... munmap resumed>) = 0 [pid 5852] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6387] ioctl(4, LOOP_SET_FD, 3 [pid 6388] <... ioctl resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./86/binderfs", [pid 6388] close(3) = 0 [pid 6388] close(4 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6388] <... close resumed>) = 0 [pid 6389] <... write resumed>) = 16777216 [pid 6388] mkdir("./file0", 0777 [pid 5852] unlink("./86/binderfs" [pid 6389] munmap(0x7feda9000000, 138412032 [pid 5852] <... unlink resumed>) = 0 [pid 6388] <... mkdir resumed>) = 0 [pid 6387] <... ioctl resumed>) = 0 [pid 6387] close(3) = 0 [pid 6387] close(4) = 0 [pid 6387] mkdir("./file0", 0777) = 0 [pid 6387] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6388] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5852] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6386] <... mount resumed>) = 0 [pid 6386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 329.328132][ T6388] loop3: detected capacity change from 0 to 32768 [ 329.330834][ T5849] [ 329.330834][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.330834][ T5849] [ 329.348807][ T6387] loop0: detected capacity change from 0 to 32768 [ 329.360297][ T6386] [ 329.360297][ T6386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.360297][ T6386] [pid 6386] chdir("./file0") = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6386] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6386] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6389] <... munmap resumed>) = 0 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6388] <... mount resumed>) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./86/file0") = 0 [ 329.390355][ T6388] [ 329.390355][ T6388] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.390355][ T6388] [ 329.394225][ T6386] [ 329.394225][ T6386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.394225][ T6386] [ 329.410360][ T5852] [ 329.410360][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.410360][ T5852] [ 329.422384][ T6387] [ 329.422384][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.422384][ T6387] [ 329.437463][ T5852] [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./86") = 0 [pid 5849] mkdir("./87", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6389] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] <... umount2 resumed>) = 0 [pid 6389] <... openat resumed>) = 4 [pid 6388] <... openat resumed>) = 3 [pid 5852] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 329.437463][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.437463][ T5852] [ 329.454708][ T6386] [ 329.454708][ T6386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.454708][ T6386] [ 329.472253][ T112] [ 329.472253][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.472253][ T112] [pid 6389] ioctl(4, LOOP_SET_FD, 3 [pid 6388] chdir("./file0" [pid 6387] <... mount resumed>) = 0 [pid 6386] <... lsetxattr resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6388] <... chdir resumed>) = 0 [pid 6388] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6389] <... ioctl resumed>) = 0 [pid 6388] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] umount2("./86/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6388] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6387] chdir("./file0") = 0 [pid 6387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5852] openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6389] close(3 [pid 6387] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6386] exit_group(0 [pid 5852] <... openat resumed>) = 4 [pid 6389] <... close resumed>) = 0 [pid 6386] <... exit_group resumed>) = ? [pid 5852] newfstatat(4, "", [pid 6389] close(4) = 0 [pid 6389] mkdir("./file0", 0777) = 0 [pid 6386] +++ exited with 0 +++ [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6389] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6386, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [ 329.490686][ T6389] loop4: detected capacity change from 0 to 32768 [ 329.498645][ T6388] [ 329.498645][ T6388] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.498645][ T6388] [ 329.515572][ T6388] [ 329.515572][ T6388] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.515572][ T6388] [ 329.516590][ T6387] [ 329.516590][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.516590][ T6387] [pid 5848] restart_syscall(<... resuming interrupted clone ...> [pid 5852] getdents64(4, [pid 5848] <... restart_syscall resumed>) = 0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... close resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] rmdir("./86/file0" [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", [pid 5852] <... rmdir resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6388] <... lsetxattr resumed>) = 0 [pid 5852] getdents64(3, [pid 5848] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6389] <... mount resumed>) = 0 [pid 6388] exit_group(0 [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5852] close(3 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] <... close resumed>) = 0 [pid 5848] unlink("./88/binderfs" [pid 6388] <... exit_group resumed>) = ? [pid 6389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] <... unlink resumed>) = 0 [pid 6389] chdir("./file0") = 0 [ 329.550582][ T6389] [ 329.550582][ T6389] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.550582][ T6389] [ 329.576279][ T6387] [ 329.576279][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.576279][ T6387] [ 329.576324][ T113] [ 329.576324][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.576324][ T113] [pid 6389] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6389] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6388] +++ exited with 0 +++ [pid 5852] rmdir("./86" [pid 5848] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] <... rmdir resumed>) = 0 [pid 5852] mkdir("./87", 0777 [pid 5850] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5850] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 6387] <... lsetxattr resumed>) = 0 [pid 5852] close(3 [pid 5850] getdents64(3, [ 329.603454][ T6389] [ 329.603454][ T6389] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.603454][ T6389] [ 329.616218][ T5848] [ 329.616218][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.616218][ T5848] [ 329.634021][ T113] [ 329.634021][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.634021][ T113] [ 329.636743][ T6389] [ 329.636743][ T6389] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6387] exit_group(0) = ? [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6387] +++ exited with 0 +++ [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6387, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5850] unlink("./87/binderfs" [pid 5847] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] <... unlink resumed>) = 0 [ 329.636743][ T6389] [pid 6389] <... lsetxattr resumed>) = 0 [pid 5847] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6389] exit_group(0 [pid 5847] <... openat resumed>) = 3 [pid 6389] <... exit_group resumed>) = ? [pid 6389] +++ exited with 0 +++ [pid 5847] newfstatat(3, "", [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6389, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, [pid 5851] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... openat resumed>) = 3 [pid 5847] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] getdents64(3, [pid 5847] unlink("./87/binderfs" [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5847] <... unlink resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 329.684911][ T5848] [ 329.684911][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.684911][ T5848] [ 329.701023][ T5850] [ 329.701023][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.701023][ T5850] [ 329.708848][ T112] [ 329.708848][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.708848][ T112] [ 329.729827][ T5847] [pid 5851] unlink("./87/binderfs") = 0 [pid 5851] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = 0 [ 329.729827][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.729827][ T5847] [ 329.737331][ T5850] [ 329.737331][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.737331][ T5850] [ 329.754387][ T5851] [ 329.754387][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.754387][ T5851] [ 329.773350][ T5847] [ 329.773350][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.773350][ T5847] [pid 5848] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./88/file0", [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./87/file0", [pid 5848] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... openat resumed>) = 4 [pid 5850] newfstatat(4, "", [pid 5848] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, [pid 5848] newfstatat(4, "", [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] getdents64(4, [pid 5851] <... umount2 resumed>) = 0 [pid 5850] close(4) = 0 [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] rmdir("./87/file0" [pid 5851] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(4, [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] newfstatat(AT_FDCWD, "./87/file0", [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] close(4 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... rmdir resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./87/file0", [pid 5851] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(3, [pid 5848] rmdir("./88/file0" [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... close resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./87" [pid 5848] <... rmdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... rmdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] getdents64(3, [pid 5847] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 4 [pid 5850] mkdir("./88", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6390 attached [pid 5851] newfstatat(4, "", [pid 5850] <... openat resumed>) = 3 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6390] set_robust_list(0x555584a2d760, 24 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6390 [pid 5848] close(3 [pid 5847] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6390] <... set_robust_list resumed>) = 0 [pid 5851] getdents64(4, [pid 5850] <... ioctl resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 6390] chdir("./87" [pid 5851] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] close(3 [pid 5848] rmdir("./88" [pid 5847] <... openat resumed>) = 4 [pid 5851] getdents64(4, [ 329.784461][ T5851] [ 329.784461][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.784461][ T5851] [pid 5847] newfstatat(4, "", [pid 5851] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] close(4 [pid 5848] mkdir("./89", 0777 [pid 5847] getdents64(4, [pid 5851] <... close resumed>) = 0 [pid 6390] <... chdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] rmdir("./87/file0" [pid 5848] <... mkdir resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] getdents64(4, [pid 6390] <... prctl resumed>) = 0 [pid 6390] setpgid(0, 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6390] <... setpgid resumed>) = 0 [pid 6390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] getdents64(3, [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5847] close(4./strace-static-x86_64: Process 6391 attached [pid 6390] <... openat resumed>) = 3 [pid 5851] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5847] <... close resumed>) = 0 [pid 5851] close(3 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 5847] rmdir("./87/file0" [pid 6391] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6391 [pid 5851] <... close resumed>) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 6391] <... set_robust_list resumed>) = 0 [pid 6390] write(3, "1000", 4 [pid 5851] rmdir("./87"executing program [pid 5848] close(3 [pid 5847] <... rmdir resumed>) = 0 [pid 6390] <... write resumed>) = 4 [pid 5851] <... rmdir resumed>) = 0 [pid 6390] close(3) = 0 [pid 6390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6390] write(1, "executing program\n", 18) = 18 [pid 6390] memfd_create("syzkaller", 0) = 3 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] mkdir("./88", 0777 [pid 5847] getdents64(3, [pid 6391] chdir("./87" [pid 5851] <... mkdir resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6391] <... chdir resumed>) = 0 [pid 5847] close(3 [pid 5851] <... openat resumed>) = 3 [pid 6391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... close resumed>) = 0 [pid 6391] <... prctl resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5847] rmdir("./87" [pid 6391] setpgid(0, 0 [pid 5851] <... ioctl resumed>) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6391] <... setpgid resumed>) = 0 [pid 5851] close(3 [pid 5847] mkdir("./88", 0777) = 0 [pid 6391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6391] <... openat resumed>) = 3 [pid 5847] <... openat resumed>) = 3 [pid 6391] write(3, "1000", 4 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6391] <... write resumed>) = 4 [pid 6391] close(3 [pid 5847] <... ioctl resumed>) = 0 [pid 6391] <... close resumed>) = 0 [pid 5847] close(3 [pid 6391] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6391] write(1, "executing program\n", 18) = 18 [pid 6391] memfd_create("syzkaller", 0) = 3 [pid 5850] <... close resumed>) = 0 [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6392 attached [pid 6392] set_robust_list(0x555584a2d760, 24 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6392 [pid 6392] <... set_robust_list resumed>) = 0 [pid 6392] chdir("./88") = 0 [pid 6392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6392] setpgid(0, 0) = 0 [pid 6392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6392] write(3, "1000", 4) = 4 [pid 6392] close(3) = 0 [pid 6392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6392] write(1, "executing program\n", 18executing program ) = 18 [pid 6392] memfd_create("syzkaller", 0) = 3 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6393 ./strace-static-x86_64: Process 6393 attached [pid 6393] set_robust_list(0x555584a2d760, 24) = 0 [pid 6393] chdir("./89") = 0 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6393] setpgid(0, 0) = 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6393] write(3, "1000", 4) = 4 [pid 6393] close(3) = 0 [pid 6393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6393] write(1, "executing program\n", 18executing program ) = 18 [pid 6393] memfd_create("syzkaller", 0) = 3 [pid 6393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6394 ./strace-static-x86_64: Process 6394 attached [pid 6394] set_robust_list(0x555584a2d760, 24) = 0 [pid 6394] chdir("./88") = 0 [pid 6394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6394] setpgid(0, 0) = 0 [pid 6394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6394] write(3, "1000", 4) = 4 [pid 6394] close(3) = 0 [pid 6394] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6394] write(1, "executing program\n", 18) = 18 [pid 5847] <... close resumed>) = 0 [pid 6394] memfd_create("syzkaller", 0) = 3 [pid 6394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6395 attached , child_tidptr=0x555584a2d750) = 6395 [pid 6395] set_robust_list(0x555584a2d760, 24) = 0 [pid 6395] chdir("./88") = 0 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6395] setpgid(0, 0) = 0 [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6395] write(3, "1000", 4) = 4 [pid 6395] close(3) = 0 [pid 6395] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6395] write(1, "executing program\n", 18) = 18 [pid 6395] memfd_create("syzkaller", 0) = 3 [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6390] <... write resumed>) = 16777216 [pid 6390] munmap(0x7feda9000000, 138412032) = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6390] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6390] close(3) = 0 [pid 6391] <... write resumed>) = 16777216 [pid 6390] close(4 [pid 6391] munmap(0x7feda9000000, 138412032 [pid 6390] <... close resumed>) = 0 [pid 6390] mkdir("./file0", 0777) = 0 [ 330.730559][ T6390] loop2: detected capacity change from 0 to 32768 [pid 6390] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6391] <... munmap resumed>) = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6391] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6391] close(3) = 0 [pid 6391] close(4) = 0 [pid 6391] mkdir("./file0", 0777) = 0 [ 330.807009][ T6390] [ 330.807009][ T6390] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.807009][ T6390] [ 330.824122][ T6391] loop5: detected capacity change from 0 to 32768 [pid 6391] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6390] <... mount resumed>) = 0 [pid 6390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6390] chdir("./file0") = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6390] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6391] <... mount resumed>) = 0 [pid 6391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6391] chdir("./file0") = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 330.861764][ T6391] [ 330.861764][ T6391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.861764][ T6391] [ 330.883263][ T6390] [ 330.883263][ T6390] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.883263][ T6390] [ 330.908797][ T6391] [pid 6391] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6393] <... write resumed>) = 16777216 [pid 6392] <... write resumed>) = 16777216 [pid 6393] munmap(0x7feda9000000, 138412032 [pid 6392] munmap(0x7feda9000000, 138412032 [pid 6393] <... munmap resumed>) = 0 [pid 6393] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6390] <... lsetxattr resumed>) = 0 [ 330.908797][ T6391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.908797][ T6391] [ 330.924851][ T6390] [ 330.924851][ T6390] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.924851][ T6390] [ 330.940580][ T6391] [ 330.940580][ T6391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.940580][ T6391] [pid 6390] exit_group(0 [pid 6393] <... openat resumed>) = 4 [pid 6390] <... exit_group resumed>) = ? [pid 6393] ioctl(4, LOOP_SET_FD, 3 [pid 6390] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6390, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6391] <... lsetxattr resumed>) = 0 [pid 6393] <... ioctl resumed>) = 0 [pid 6392] <... munmap resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 6392] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6393] close(3 [pid 6392] <... openat resumed>) = 4 [pid 6393] <... close resumed>) = 0 [pid 6392] ioctl(4, LOOP_SET_FD, 3 [ 330.970466][ T112] [ 330.970466][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.970466][ T112] [ 330.983880][ T6393] loop1: detected capacity change from 0 to 32768 [ 330.984830][ T113] [ 330.984830][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.984830][ T113] [pid 5849] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6393] close(4 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6393] <... close resumed>) = 0 [pid 6391] exit_group(0 [pid 5849] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6391] <... exit_group resumed>) = ? [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6391] +++ exited with 0 +++ [pid 5849] getdents64(3, [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6391, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5849] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./87/binderfs") = 0 [pid 5849] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6393] mkdir("./file0", 0777) = 0 [pid 5852] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6392] <... ioctl resumed>) = 0 [pid 5852] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6392] close(3 [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6393] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6392] <... close resumed>) = 0 [pid 5852] unlink("./87/binderfs" [pid 6392] close(4 [pid 5852] <... unlink resumed>) = 0 [pid 6392] <... close resumed>) = 0 [pid 5852] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6392] mkdir("./file0", 0777) = 0 [ 331.014792][ T6392] loop3: detected capacity change from 0 to 32768 [ 331.029189][ T5849] [ 331.029189][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.029189][ T5849] [ 331.050366][ T5852] [ 331.050366][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.050366][ T5852] [ 331.052210][ T6393] [ 331.052210][ T6393] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6392] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6394] <... write resumed>) = 16777216 [pid 6394] munmap(0x7feda9000000, 138412032 [pid 6393] <... mount resumed>) = 0 [pid 6392] <... mount resumed>) = 0 [ 331.052210][ T6393] [ 331.075999][ T5849] [ 331.075999][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.075999][ T5849] [ 331.083360][ T5852] [ 331.083360][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.083360][ T5852] [ 331.109238][ T6392] [ 331.109238][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.109238][ T6392] [pid 6392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6392] <... openat resumed>) = 3 [pid 5852] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6393] <... openat resumed>) = 3 [pid 6392] chdir("./file0" [pid 6393] chdir("./file0" [pid 6392] <... chdir resumed>) = 0 [pid 6393] <... chdir resumed>) = 0 [pid 6392] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6393] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6392] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6394] <... munmap resumed>) = 0 [pid 6393] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5852] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4) = 0 [pid 5852] rmdir("./87/file0") = 0 [pid 5852] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5852] close(3) = 0 [pid 5852] rmdir("./87" [pid 5849] newfstatat(AT_FDCWD, "./87/file0", [pid 6394] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./87/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6394] <... openat resumed>) = 4 [ 331.157387][ T6392] [ 331.157387][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.157387][ T6392] [ 331.169602][ T6393] [ 331.169602][ T6393] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.169602][ T6393] [ 331.181986][ T6393] [ 331.181986][ T6393] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.181986][ T6393] [ 331.182626][ T6392] [ 331.182626][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.182626][ T6392] [pid 5852] <... rmdir resumed>) = 0 [pid 6394] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./87/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./87") = 0 [pid 5849] mkdir("./88", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6395] <... write resumed>) = 16777216 [pid 5852] mkdir("./88", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 [pid 6395] munmap(0x7feda9000000, 138412032 [pid 6394] <... ioctl resumed>) = 0 [pid 6393] <... lsetxattr resumed>) = 0 [pid 6394] close(3 [pid 6393] exit_group(0 [pid 6394] <... close resumed>) = 0 [pid 6394] close(4) = 0 [pid 6394] mkdir("./file0", 0777 [pid 6393] <... exit_group resumed>) = ? [ 331.204695][ T6394] loop4: detected capacity change from 0 to 32768 [pid 6394] <... mkdir resumed>) = 0 [pid 6393] +++ exited with 0 +++ [pid 6392] <... lsetxattr resumed>) = 0 [pid 6394] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 6392] exit_group(0 [pid 5848] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", [pid 6392] <... exit_group resumed>) = ? [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6395] <... munmap resumed>) = 0 [pid 6392] +++ exited with 0 +++ [pid 5848] getdents64(3, [pid 6395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6395] <... openat resumed>) = 4 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6392, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] restart_syscall(<... resuming interrupted clone ...> [pid 5848] newfstatat(AT_FDCWD, "./89/binderfs", [pid 5850] <... restart_syscall resumed>) = 0 [pid 5850] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] unlink("./89/binderfs" [pid 5850] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... unlink resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 331.250212][ T112] [ 331.250212][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.250212][ T112] [ 331.260517][ T113] [ 331.260517][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.260517][ T113] [ 331.280801][ T6395] loop0: detected capacity change from 0 to 32768 [ 331.296012][ T5848] [pid 5850] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./88/binderfs" [pid 6395] <... ioctl resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5850] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6395] close(3) = 0 [pid 6395] close(4) = 0 [pid 6395] mkdir("./file0", 0777) = 0 [pid 6395] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6394] <... mount resumed>) = 0 [ 331.296012][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.296012][ T5848] [ 331.308429][ T5848] [ 331.308429][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.308429][ T5848] [ 331.320154][ T6394] [ 331.320154][ T6394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.320154][ T6394] [ 331.332523][ T5850] [ 331.332523][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.332523][ T5850] [pid 6394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6394] chdir("./file0") = 0 [pid 6394] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 331.361860][ T5850] [ 331.361860][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.361860][ T5850] [ 331.376157][ T6394] [ 331.376157][ T6394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.376157][ T6394] [ 331.394719][ T6394] [ 331.394719][ T6394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.394719][ T6394] [ 331.405567][ T6395] [pid 6394] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5850] <... umount2 resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5850] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [ 331.405567][ T6395] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.405567][ T6395] [pid 5848] newfstatat(AT_FDCWD, "./89/file0", [pid 6394] <... lsetxattr resumed>) = 0 [pid 5850] getdents64(4, [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] <... mount resumed>) = 0 [pid 6394] exit_group(0 [pid 5850] <... close resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6394] <... exit_group resumed>) = ? [pid 5850] rmdir("./88/file0" [pid 5848] <... openat resumed>) = 4 [pid 5850] <... rmdir resumed>) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3 [pid 6395] <... openat resumed>) = 3 [pid 6394] +++ exited with 0 +++ [pid 5850] <... close resumed>) = 0 [pid 5848] newfstatat(4, "", [pid 6395] chdir("./file0" [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6395] <... chdir resumed>) = 0 [pid 5848] getdents64(4, [pid 6395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5850] rmdir("./88" [pid 5848] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6395] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5848] getdents64(4, [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6394, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5850] <... rmdir resumed>) = 0 [pid 5851] restart_syscall(<... resuming interrupted clone ...> [pid 5850] mkdir("./89", 0777 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD [pid 5851] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] <... ioctl resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 331.436990][ T112] [ 331.436990][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.436990][ T112] [ 331.470220][ T6395] [ 331.470220][ T6395] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.470220][ T6395] [pid 5850] close(3 [pid 5851] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./88/binderfs") = 0 [pid 5851] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] close(4) = 0 [pid 6395] <... lsetxattr resumed>) = 0 [pid 5848] rmdir("./89/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [ 331.500079][ T6395] [ 331.500079][ T6395] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.500079][ T6395] [ 331.513777][ T5851] [ 331.513777][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.513777][ T5851] [ 331.526244][ T112] [ 331.526244][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.526244][ T112] [ 331.541809][ T5851] [ 331.541809][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 5848] close(3 [pid 6395] exit_group(0 [pid 5848] <... close resumed>) = 0 [pid 6395] <... exit_group resumed>) = ? [pid 5848] rmdir("./89" [pid 6395] +++ exited with 0 +++ [pid 5849] <... close resumed>) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] mkdir("./90", 0777 [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6395, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5847] restart_syscall(<... resuming interrupted clone ...> [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 ./strace-static-x86_64: Process 6396 attached [pid 5847] <... restart_syscall resumed>) = 0 [pid 6396] set_robust_list(0x555584a2d760, 24 [pid 5848] ioctl(3, LOOP_CLR_FD [pid 6396] <... set_robust_list resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6396 [pid 5848] <... ioctl resumed>) = 0 [pid 6396] chdir("./88" [pid 5848] close(3 [pid 5847] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6396] <... chdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 331.541809][ T5851] [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./88/binderfs") = 0 [pid 5847] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 6396] <... prctl resumed>) = 0 [pid 6396] setpgid(0, 0) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6397 attached [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6397 [pid 6397] set_robust_list(0x555584a2d760, 24) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 6397] chdir("./88" [pid 6396] <... openat resumed>) = 3 [pid 6397] <... chdir resumed>) = 0 [pid 6397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6397] setpgid(0, 0) = 0 [pid 6397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6397] write(3, "1000", 4) = 4 [pid 6397] close(3) = 0 [pid 6397] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6397] write(1, "executing program\n", 18) = 18 [pid 6396] write(3, "1000", 4 [pid 5851] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6396] <... write resumed>) = 4 [pid 6397] memfd_create("syzkaller", 0) = 3 [pid 6397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6396] close(3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6396] <... close resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./88/file0", [pid 6396] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6396] <... symlink resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6396] write(1, "executing program\n", 18executing program [pid 5851] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] <... write resumed>) = 18 [pid 6396] memfd_create("syzkaller", 0 [pid 5851] <... openat resumed>) = 4 [pid 5851] newfstatat(4, "", [pid 6396] <... memfd_create resumed>) = 3 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [ 331.608465][ T5847] [ 331.608465][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.608465][ T5847] [ 331.631471][ T5847] [ 331.631471][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.631471][ T5847] [pid 5851] rmdir("./88/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./88") = 0 [pid 5851] mkdir("./89", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5847] <... umount2 resumed>) = 0 [pid 5851] ioctl(3, LOOP_CLR_FD [pid 5847] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... ioctl resumed>) = 0 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] close(3 [pid 5847] newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... close resumed>) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5847] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(4, [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6398 [pid 5847] getdents64(4, ./strace-static-x86_64: Process 6398 attached 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 6398] set_robust_list(0x555584a2d760, 24 [pid 5847] close(4 [pid 6398] <... set_robust_list resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 6398] chdir("./89" [pid 5847] rmdir("./88/file0" [pid 6398] <... chdir resumed>) = 0 [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6398] setpgid(0, 0 [pid 5847] getdents64(3, [pid 6398] <... setpgid resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] close(3 [pid 6398] <... openat resumed>) = 3 [pid 6398] write(3, "1000", 4 [pid 5847] <... close resumed>) = 0 [pid 6398] <... write resumed>) = 4 [pid 5847] rmdir("./88" [pid 6398] close(3executing program ) = 0 [pid 5847] <... rmdir resumed>) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] mkdir("./89", 0777 [pid 6398] write(1, "executing program\n", 18) = 18 [pid 6398] memfd_create("syzkaller", 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6398] <... memfd_create resumed>) = 3 [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6398] <... mmap resumed>) = 0x7feda9000000 [pid 5847] <... openat resumed>) = 3 [pid 5847] ioctl(3, LOOP_CLR_FD) = 0 [pid 5847] close(3 [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6399 ./strace-static-x86_64: Process 6399 attached [pid 6399] set_robust_list(0x555584a2d760, 24) = 0 [pid 6399] chdir("./90") = 0 [pid 6399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6399] setpgid(0, 0) = 0 [pid 6399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6399] write(3, "1000", 4) = 4 [pid 6399] close(3) = 0 [pid 6399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216executing program [pid 6399] write(1, "executing program\n", 18) = 18 [pid 6399] memfd_create("syzkaller", 0) = 3 [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6400 attached , child_tidptr=0x555584a2d750) = 6400 [pid 6400] set_robust_list(0x555584a2d760, 24) = 0 [pid 6400] chdir("./89") = 0 [pid 6400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6400] setpgid(0, 0) = 0 [pid 6400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6400] write(3, "1000", 4) = 4 [pid 6400] close(3) = 0 [pid 6400] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6400] write(1, "executing program\n", 18) = 18 [pid 6400] memfd_create("syzkaller", 0) = 3 [pid 6400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6401 ./strace-static-x86_64: Process 6401 attached [pid 6401] set_robust_list(0x555584a2d760, 24) = 0 [pid 6401] chdir("./89") = 0 [pid 6401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6401] setpgid(0, 0) = 0 [pid 6401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6401] write(3, "1000", 4) = 4 [pid 6401] close(3) = 0 [pid 6401] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6401] write(1, "executing program\n", 18) = 18 [pid 6401] memfd_create("syzkaller", 0) = 3 [pid 6401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6397] <... write resumed>) = 16777216 [pid 6397] munmap(0x7feda9000000, 138412032 [pid 6401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6397] <... munmap resumed>) = 0 [pid 6396] <... write resumed>) = 16777216 [pid 6397] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6396] munmap(0x7feda9000000, 138412032 [pid 6397] <... openat resumed>) = 4 [pid 6397] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6396] <... munmap resumed>) = 0 [pid 6397] close(3 [pid 6396] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6397] <... close resumed>) = 0 [pid 6397] close(4 [pid 6396] <... openat resumed>) = 4 [ 332.485051][ T6397] loop5: detected capacity change from 0 to 32768 [pid 6397] <... close resumed>) = 0 [pid 6396] ioctl(4, LOOP_SET_FD, 3 [pid 6397] mkdir("./file0", 0777) = 0 [pid 6396] <... ioctl resumed>) = 0 [pid 6397] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 6396] close(3 [pid 6397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6396] <... close resumed>) = 0 [pid 6397] <... openat resumed>) = 3 [pid 6396] close(4 [pid 6397] chdir("./file0" [pid 6396] <... close resumed>) = 0 [pid 6397] <... chdir resumed>) = 0 [pid 6396] mkdir("./file0", 0777 [pid 6397] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6396] <... mkdir resumed>) = 0 [pid 6397] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6396] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 332.541482][ T6396] loop2: detected capacity change from 0 to 32768 [ 332.554321][ T6397] [ 332.554321][ T6397] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.554321][ T6397] [ 332.580830][ T6397] [ 332.580830][ T6397] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.580830][ T6397] [pid 6397] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6398] <... write resumed>) = 16777216 [pid 6399] <... write resumed>) = 16777216 [pid 6396] <... mount resumed>) = 0 [pid 6398] munmap(0x7feda9000000, 138412032 [pid 6396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6396] chdir("./file0") = 0 [pid 6396] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 332.605298][ T6396] [ 332.605298][ T6396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.605298][ T6396] [ 332.641745][ T6397] [ 332.641745][ T6397] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.641745][ T6397] [pid 6396] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6399] munmap(0x7feda9000000, 138412032 [pid 6398] <... munmap resumed>) = 0 [pid 6397] <... lsetxattr resumed>) = 0 [pid 6399] <... munmap resumed>) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6398] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 332.676553][ T6396] [ 332.676553][ T6396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.676553][ T6396] [ 332.700239][ T112] [ 332.700239][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.700239][ T112] [ 332.707369][ T6396] [ 332.707369][ T6396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.707369][ T6396] [pid 6399] ioctl(4, LOOP_SET_FD, 3 [pid 6398] <... openat resumed>) = 4 [pid 6397] exit_group(0 [pid 6398] ioctl(4, LOOP_SET_FD, 3 [pid 6397] <... exit_group resumed>) = ? [pid 6399] <... ioctl resumed>) = 0 [pid 6397] +++ exited with 0 +++ [pid 6396] <... lsetxattr resumed>) = 0 [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6397, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 6398] <... ioctl resumed>) = 0 [pid 6398] close(3) = 0 [pid 6398] close(4) = 0 [pid 6398] mkdir("./file0", 0777 [pid 5852] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6396] exit_group(0 [pid 5852] <... openat resumed>) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6396] <... exit_group resumed>) = ? [pid 5852] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./88/binderfs") = 0 [pid 5852] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6398] <... mkdir resumed>) = 0 [pid 6398] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6399] close(3 [pid 6396] +++ exited with 0 +++ [pid 6399] <... close resumed>) = 0 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6396, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 6399] close(4 [pid 5849] restart_syscall(<... resuming interrupted clone ...> [pid 6399] <... close resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 6399] mkdir("./file0", 0777 [pid 5849] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6399] <... mkdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 332.742659][ T6399] loop1: detected capacity change from 0 to 32768 [ 332.746401][ T6398] loop3: detected capacity change from 0 to 32768 [ 332.754132][ T113] [ 332.754132][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.754132][ T113] [ 332.779865][ T5852] [ 332.779865][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.779865][ T5852] [pid 5849] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./88/binderfs") = 0 [pid 5849] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6398] <... mount resumed>) = 0 [pid 6398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6398] chdir("./file0") = 0 [pid 6398] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 332.804634][ T6398] [ 332.804634][ T6398] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.804634][ T6398] [ 332.806250][ T6399] [ 332.806250][ T6399] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.806250][ T6399] [ 332.826554][ T5852] [ 332.826554][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.826554][ T5852] [ 332.848117][ T6398] [pid 6398] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] <... umount2 resumed>) = 0 [pid 6399] <... mount resumed>) = 0 [pid 5852] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6399] chdir("./file0" [pid 5852] newfstatat(AT_FDCWD, "./88/file0", [pid 6399] <... chdir resumed>) = 0 [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 332.848117][ T6398] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.848117][ T6398] [ 332.864344][ T5849] [ 332.864344][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.864344][ T5849] [ 332.892617][ T6398] [ 332.892617][ T6398] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.892617][ T6398] [pid 5852] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 5852] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6400] <... write resumed>) = 16777216 [pid 6398] <... lsetxattr resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [ 332.909156][ T6399] [ 332.909156][ T6399] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.909156][ T6399] [ 332.909216][ T5849] [ 332.909216][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.909216][ T5849] [ 332.939018][ T113] [ 332.939018][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.939018][ T113] [ 332.952014][ T6399] [pid 5852] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(4, [pid 6398] exit_group(0 [pid 5852] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6398] <... exit_group resumed>) = ? [pid 6400] munmap(0x7feda9000000, 138412032 [pid 5852] getdents64(4, [pid 6399] <... lsetxattr resumed>) = 0 [pid 6398] +++ exited with 0 +++ [pid 5852] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5852] close(4 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6398, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 6399] exit_group(0 [pid 5852] <... close resumed>) = 0 [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5850] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6399] <... exit_group resumed>) = ? [pid 5852] rmdir("./88/file0" [pid 5850] unlink("./89/binderfs") = 0 [pid 5850] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] <... munmap resumed>) = 0 [pid 6399] +++ exited with 0 +++ [pid 5852] <... rmdir resumed>) = 0 [pid 6400] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] getdents64(3, [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6399, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 6401] <... write resumed>) = 16777216 [pid 6400] <... openat resumed>) = 4 [ 332.952014][ T6399] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.952014][ T6399] [ 332.968523][ T113] [ 332.968523][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.968523][ T113] [ 332.984231][ T5850] [ 332.984231][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.984231][ T5850] [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 6400] ioctl(4, LOOP_SET_FD, 3 [pid 5852] close(3 [pid 6401] munmap(0x7feda9000000, 138412032 [pid 6400] <... ioctl resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5849] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5852] rmdir("./88" [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... rmdir resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./88/file0", [pid 5848] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] mkdir("./89", 0777 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5852] <... mkdir resumed>) = 0 [pid 5849] umount2("./88/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] newfstatat(3, "", [pid 6400] close(3 [pid 5852] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6400] <... close resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] getdents64(3, [pid 6400] close(4 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5849] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 6400] <... close resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5849] newfstatat(4, "", [pid 5848] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6400] mkdir("./file0", 0777 [pid 5852] close(3 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6400] <... mkdir resumed>) = 0 [pid 5849] getdents64(4, [pid 5848] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5849] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6400] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5849] getdents64(4, [pid 5848] unlink("./90/binderfs" [pid 5849] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] <... unlink resumed>) = 0 [pid 5849] close(4 [pid 5848] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5849] <... close resumed>) = 0 [pid 5849] rmdir("./88/file0") = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./88") = 0 [ 333.006052][ T6400] loop4: detected capacity change from 0 to 32768 [ 333.010598][ T5850] [ 333.010598][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.010598][ T5850] [ 333.038706][ T6400] [ 333.038706][ T6400] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.038706][ T6400] [ 333.050340][ T5848] [ 333.050340][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6401] <... munmap resumed>) = 0 [pid 5849] mkdir("./89", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 [pid 6401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 333.050340][ T5848] [pid 6401] ioctl(4, LOOP_SET_FD, 3 [pid 6400] <... mount resumed>) = 0 [pid 6400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6400] chdir("./file0") = 0 [pid 6400] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6400] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6401] <... ioctl resumed>) = 0 [pid 6401] close(3) = 0 [pid 6401] close(4) = 0 [pid 6401] mkdir("./file0", 0777 [pid 5850] <... umount2 resumed>) = 0 [pid 6401] <... mkdir resumed>) = 0 [pid 5850] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6401] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./90/file0" [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... rmdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] getdents64(3, [pid 5850] <... openat resumed>) = 4 [pid 5848] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] close(3 [pid 5850] getdents64(4, [pid 5848] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, [pid 5848] rmdir("./90" [pid 5850] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] close(4 [pid 5848] <... rmdir resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5848] mkdir("./91", 0777 [pid 5850] rmdir("./89/file0") = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 333.081805][ T5848] [ 333.081805][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.081805][ T5848] [ 333.082074][ T6401] loop0: detected capacity change from 0 to 32768 [ 333.094526][ T6400] [ 333.094526][ T6400] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.094526][ T6400] [pid 5848] close(3 [pid 5850] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./89") = 0 [pid 5850] mkdir("./90", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 333.158717][ T6400] [ 333.158717][ T6400] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.158717][ T6400] [ 333.173670][ T6401] [ 333.173670][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.173670][ T6401] [pid 5850] ioctl(3, LOOP_CLR_FD [pid 6400] <... lsetxattr resumed>) = 0 [pid 6401] <... mount resumed>) = 0 [pid 6400] exit_group(0) = ? [pid 6400] +++ exited with 0 +++ [pid 5850] <... ioctl resumed>) = 0 [pid 6401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6400, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 6401] <... openat resumed>) = 3 [pid 5850] close(3 [pid 5851] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6401] chdir("./file0" [pid 5851] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6401] <... chdir resumed>) = 0 [pid 6401] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5851] <... openat resumed>) = 3 [pid 6401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6401] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [ 333.215815][ T112] [ 333.215815][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.215815][ T112] [ 333.238695][ T6401] [ 333.238695][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.238695][ T6401] [pid 5851] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./89/binderfs") = 0 [pid 5851] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6401] <... lsetxattr resumed>) = 0 [pid 6401] exit_group(0) = ? [pid 6401] +++ exited with 0 +++ [pid 5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6401, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [ 333.270714][ T6401] [ 333.270714][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.270714][ T6401] [ 333.302203][ T113] [ 333.302203][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.302203][ T113] [pid 5847] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [ 333.321809][ T5851] [ 333.321809][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.321809][ T5851] [pid 5847] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5847] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] unlink("./89/binderfs") = 0 [ 333.371663][ T5851] [ 333.371663][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.371663][ T5851] [pid 5847] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./89/file0") = 0 [pid 5851] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./89") = 0 [pid 5851] mkdir("./90", 0777 [pid 5852] <... close resumed>) = 0 [pid 5851] <... mkdir resumed>) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 [ 333.413578][ T5847] [ 333.413578][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.413578][ T5847] [ 333.425044][ T5847] [ 333.425044][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.425044][ T5847] [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6402 attached [pid 6402] set_robust_list(0x555584a2d760, 24 [pid 5852] <... clone resumed>, child_tidptr=0x555584a2d750) = 6402 [pid 6402] <... set_robust_list resumed>) = 0 [pid 6402] chdir("./89" [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6403 attached [pid 6402] <... chdir resumed>) = 0 [pid 5847] <... umount2 resumed>) = 0 [pid 6403] set_robust_list(0x555584a2d760, 24) = 0 [pid 6403] chdir("./89") = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555584a2d750) = 6403 [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6403] setpgid(0, 0) = 0 executing program [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6402] <... prctl resumed>) = 0 [pid 5847] newfstatat(AT_FDCWD, "./89/file0", [pid 6402] setpgid(0, 0 [pid 6403] <... openat resumed>) = 3 [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6402] <... setpgid resumed>) = 0 [pid 5847] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6403] write(3, "1000", 4) = 4 [pid 6402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6403] close(3) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6403] write(1, "executing program\n", 18 [pid 6402] <... openat resumed>) = 3 [pid 5847] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6403] <... write resumed>) = 18 [pid 6403] memfd_create("syzkaller", 0) = 3 [pid 5847] openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6402] write(3, "1000", 4 [pid 6403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6402] <... write resumed>) = 4 [pid 5847] <... openat resumed>) = 4 [pid 6402] close(3 [pid 5847] newfstatat(4, "", [pid 6402] <... close resumed>) = 0 [pid 6402] symlink("/dev/binderfs", "./binderfs" [pid 5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6402] <... symlink resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5847] getdents64(4, [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6402] write(1, "executing program\n", 18executing program [pid 5847] <... getdents64 resumed>0x555584a36830 /* 2 entries */, 32768) = 48 [pid 6402] <... write resumed>) = 18 [pid 5847] getdents64(4, [pid 5848] <... clone resumed>, child_tidptr=0x555584a2d750) = 6404 [pid 6402] memfd_create("syzkaller", 0 [pid 5847] <... getdents64 resumed>0x555584a36830 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6404 attached [pid 5847] close(4 [pid 6402] <... memfd_create resumed>) = 3 [pid 5847] <... close resumed>) = 0 [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5847] rmdir("./89/file0") = 0 [pid 6404] set_robust_list(0x555584a2d760, 24 [pid 6402] <... mmap resumed>) = 0x7feda9000000 [pid 5847] getdents64(3, [pid 6404] <... set_robust_list resumed>) = 0 [pid 5847] <... getdents64 resumed>0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 6404] chdir("./91" [pid 5847] close(3 [pid 6404] <... chdir resumed>) = 0 [pid 6404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... close resumed>) = 0 [pid 6404] <... prctl resumed>) = 0 [pid 5847] rmdir("./89" [pid 6404] setpgid(0, 0) = 0 [pid 6404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... rmdir resumed>) = 0 [pid 6404] <... openat resumed>) = 3 [pid 6404] write(3, "1000", 4) = 4 [pid 6404] close(3) = 0 [pid 6404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6404] write(1, "executing program\n", 18 [pid 5850] <... close resumed>) = 0 executing program [pid 5847] mkdir("./90", 0777 [pid 6404] <... write resumed>) = 18 [pid 6404] memfd_create("syzkaller", 0 [pid 5847] <... mkdir resumed>) = 0 [pid 6404] <... memfd_create resumed>) = 3 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 ./strace-static-x86_64: Process 6405 attached [pid 5847] <... openat resumed>) = 3 [pid 5850] <... clone resumed>, child_tidptr=0x555584a2d750) = 6405 [pid 5847] ioctl(3, LOOP_CLR_FD [pid 6405] set_robust_list(0x555584a2d760, 24) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5847] close(3 [pid 6405] chdir("./90") = 0 [pid 6405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6405] setpgid(0, 0) = 0 [pid 6405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6405] write(3, "1000", 4) = 4 [pid 6405] close(3) = 0 [pid 6405] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6405] write(1, "executing program\n", 18) = 18 [pid 6405] memfd_create("syzkaller", 0) = 3 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555584a2d750) = 6406 ./strace-static-x86_64: Process 6406 attached [pid 6406] set_robust_list(0x555584a2d760, 24) = 0 [pid 6406] chdir("./90") = 0 [pid 6406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6406] setpgid(0, 0) = 0 [pid 6406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6406] write(3, "1000", 4) = 4 [pid 6406] close(3) = 0 [pid 6406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6406] write(1, "executing program\n", 18executing program ) = 18 [pid 6406] memfd_create("syzkaller", 0) = 3 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5847] <... close resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6407 attached [pid 6407] set_robust_list(0x555584a2d760, 24 [pid 5847] <... clone resumed>, child_tidptr=0x555584a2d750) = 6407 [pid 6407] <... set_robust_list resumed>) = 0 [pid 6407] chdir("./90") = 0 [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6407] setpgid(0, 0) = 0 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6407] write(3, "1000", 4) = 4 [pid 6407] close(3) = 0 [pid 6407] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6407] write(1, "executing program\n", 18) = 18 [pid 6407] memfd_create("syzkaller", 0) = 3 [pid 6407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feda9000000 [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6403] <... write resumed>) = 16777216 [pid 6402] <... write resumed>) = 16777216 [pid 6403] munmap(0x7feda9000000, 138412032 [pid 6407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6402] munmap(0x7feda9000000, 138412032 [pid 6403] <... munmap resumed>) = 0 [pid 6404] <... write resumed>) = 16777216 [pid 6404] munmap(0x7feda9000000, 138412032 [pid 6403] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6402] <... munmap resumed>) = 0 [pid 6403] <... openat resumed>) = 4 [pid 6403] ioctl(4, LOOP_SET_FD, 3 [pid 6405] <... write resumed>) = 16777216 [pid 6402] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6405] munmap(0x7feda9000000, 138412032 [pid 6402] <... openat resumed>) = 4 [pid 6402] ioctl(4, LOOP_SET_FD, 3 [pid 6403] <... ioctl resumed>) = 0 [pid 6402] <... ioctl resumed>) = 0 [pid 6403] close(3 [pid 6402] close(3 [pid 6403] <... close resumed>) = 0 [pid 6402] <... close resumed>) = 0 [pid 6403] close(4 [pid 6402] close(4 [pid 6403] <... close resumed>) = 0 [pid 6402] <... close resumed>) = 0 [pid 6403] mkdir("./file0", 0777) = 0 [pid 6403] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6402] mkdir("./file0", 0777) = 0 [pid 6402] mount("/dev/loop5", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6404] <... munmap resumed>) = 0 [ 334.371514][ T6403] loop2: detected capacity change from 0 to 32768 [ 334.392000][ T6402] loop5: detected capacity change from 0 to 32768 [ 334.413070][ T6402] [ 334.413070][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [pid 6404] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6404] close(3) = 0 [pid 6404] close(4) = 0 [pid 6402] <... mount resumed>) = 0 [pid 6404] mkdir("./file0", 0777) = 0 [pid 6405] <... munmap resumed>) = 0 [pid 6404] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 6402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6402] chdir("./file0" [pid 6405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6402] <... chdir resumed>) = 0 [pid 6402] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6405] <... openat resumed>) = 4 [pid 6402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 334.413070][ T6402] [ 334.430815][ T6404] loop1: detected capacity change from 0 to 32768 [ 334.455010][ T6403] [ 334.455010][ T6403] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.455010][ T6403] [pid 6405] ioctl(4, LOOP_SET_FD, 3 [pid 6402] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6405] <... ioctl resumed>) = 0 [pid 6405] close(3) = 0 [pid 6403] <... mount resumed>) = 0 [pid 6405] close(4 [pid 6403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6405] <... close resumed>) = 0 [pid 6403] <... openat resumed>) = 3 [pid 6405] mkdir("./file0", 0777 [pid 6403] chdir("./file0") = 0 [pid 6403] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6405] <... mkdir resumed>) = 0 [pid 6403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6405] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [ 334.480870][ T6402] [ 334.480870][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.480870][ T6402] [ 334.488888][ T6405] loop3: detected capacity change from 0 to 32768 [ 334.499351][ T6404] [ 334.499351][ T6404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.499351][ T6404] [ 334.519065][ T6403] [ 334.519065][ T6403] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.519065][ T6403] [pid 6403] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6404] <... mount resumed>) = 0 [pid 6404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6404] chdir("./file0") = 0 [ 334.528532][ T6405] [ 334.528532][ T6405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.528532][ T6405] [ 334.532074][ T6402] [ 334.532074][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.532074][ T6402] [ 334.562486][ T6403] [ 334.562486][ T6403] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.562486][ T6403] [pid 6405] <... mount resumed>) = 0 [pid 6404] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6404] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6405] chdir("./file0") = 0 [pid 6405] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6405] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6403] <... lsetxattr resumed>) = 0 [pid 6406] <... write resumed>) = 16777216 [pid 6403] exit_group(0) = ? [pid 6403] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6403, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> [ 334.580617][ T6404] [ 334.580617][ T6404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.580617][ T6404] [ 334.604951][ T6405] [ 334.604951][ T6405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.604951][ T6405] [ 334.616068][ T6404] [ 334.616068][ T6404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.616068][ T6404] [ 334.617484][ T112] [pid 6406] munmap(0x7feda9000000, 138412032 [pid 6402] <... lsetxattr resumed>) = 0 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5849] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./89/binderfs") = 0 [pid 5849] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6402] exit_group(0) = ? [ 334.617484][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.617484][ T112] [ 334.627751][ T113] [ 334.627751][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.627751][ T113] [pid 6402] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6402, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...> [pid 6404] <... lsetxattr resumed>) = 0 [pid 6404] exit_group(0) = ? [pid 6404] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6404, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5852] <... restart_syscall resumed>) = 0 [pid 5848] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6406] <... munmap resumed>) = 0 [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./91/binderfs") = 0 [pid 5848] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6405] <... lsetxattr resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", [pid 6406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6406] <... openat resumed>) = 4 [pid 6406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6405] exit_group(0 [ 334.678038][ T6405] [ 334.678038][ T6405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.678038][ T6405] [ 334.700088][ T5848] [ 334.700088][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.700088][ T5848] [ 334.720084][ T6406] loop4: detected capacity change from 0 to 32768 [pid 5852] getdents64(3, [pid 6405] <... exit_group resumed>) = ? [pid 5852] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6405] +++ exited with 0 +++ [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 334.727759][ T5849] [ 334.727759][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.727759][ T5849] [ 334.728618][ T113] [ 334.728618][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.728618][ T113] [ 334.751817][ T5848] [ 334.751817][ T5848] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.751817][ T5848] [ 334.752723][ T5849] [ 334.752723][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.752723][ T5849] [ 334.763759][ T112] [pid 6406] close(3 [pid 5852] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6406] <... close resumed>) = 0 [pid 6406] close(4 [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6405, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5852] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6406] <... close resumed>) = 0 [pid 6406] mkdir("./file0", 0777 [pid 5852] unlink("./89/binderfs" [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6406] <... mkdir resumed>) = 0 [pid 5850] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] <... unlink resumed>) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./91/file0", [pid 6406] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic," [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./91/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x555584a36830 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x555584a36830 /* 0 entries */, 32768) = 0 [pid 5850] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5848] close(4) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5848] rmdir("./91/file0") = 0 [pid 5848] getdents64(3, 0x555584a2e7f0 /* 0 entries */, 32768) = 0 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 334.763759][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.763759][ T112] [pid 5852] umount2("./89/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5850] getdents64(3, [pid 5848] close(3) = 0 [pid 5850] <... getdents64 resumed>0x555584a2e7f0 /* 4 entries */, 32768) = 112 [pid 5848] rmdir("./91") = 0 [pid 5848] mkdir("./92", 0777) = 0 [pid 5850] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 334.807573][ T6406] [ 334.807573][ T6406] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.807573][ T6406] [ 334.842112][ T112] ================================================================== [ 334.850296][ T112] BUG: KASAN: slab-use-after-free in txEnd+0x354/0x560 [ 334.857238][ T112] Write of size 8 at addr ffff888027a4b040 by task jfsCommit/112 [ 334.865020][ T112] [ 334.867373][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 334.877921][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.888014][ T112] Call Trace: [ 334.891318][ T112] [ 334.894272][ T112] dump_stack_lvl+0x241/0x360 [ 334.898997][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.904246][ T112] ? __pfx__printk+0x10/0x10 [ 334.908882][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.910586][ T5852] [ 334.910586][ T5852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 334.910586][ T5852] [ 334.914547][ T112] ? _printk+0xd5/0x120 [ 334.929137][ T112] ? __virt_addr_valid+0x183/0x530 [ 334.934325][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.939998][ T112] print_report+0x169/0x550 [ 334.944525][ T112] ? __virt_addr_valid+0x183/0x530 [ 334.949653][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.955296][ T112] ? __virt_addr_valid+0x45f/0x530 [ 334.960426][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.966073][ T112] ? __phys_addr+0xba/0x170 [ 334.970601][ T112] ? txEnd+0x354/0x560 [ 334.974691][ T112] kasan_report+0x143/0x180 [ 334.979214][ T112] ? txEnd+0x354/0x560 [ 334.983653][ T112] kasan_check_range+0x282/0x290 [ 334.988611][ T112] txEnd+0x354/0x560 [ 334.992529][ T112] jfs_lazycommit+0x634/0xb80 [ 334.997226][ T112] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 335.003160][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.008818][ T112] ? lockdep_hardirqs_on+0x99/0x150 [ 335.014042][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 335.019261][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 335.025095][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.030783][ T112] ? __kthread_parkme+0x169/0x1d0 [ 335.035840][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 335.041069][ T112] kthread+0x2f2/0x390 [ 335.045212][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 335.050440][ T112] ? __pfx_kthread+0x10/0x10 [ 335.055073][ T112] ret_from_fork+0x4d/0x80 [ 335.059508][ T112] ? __pfx_kthread+0x10/0x10 [ 335.064121][ T112] ret_from_fork_asm+0x1a/0x30 [ 335.068915][ T112] [ 335.071976][ T112] [ 335.074295][ T112] Allocated by task 6404: [ 335.078620][ T112] kasan_save_track+0x3f/0x80 [ 335.083311][ T112] __kasan_kmalloc+0x98/0xb0 [ 335.087911][ T112] __kmalloc_cache_noprof+0x243/0x390 [ 335.093300][ T112] lmLogOpen+0x320/0x1040 [ 335.097650][ T112] jfs_mount_rw+0xf1/0x6a0 [ 335.102078][ T112] jfs_fill_super+0x775/0xd90 [ 335.106762][ T112] get_tree_bdev_flags+0x48e/0x5c0 [ 335.111889][ T112] vfs_get_tree+0x92/0x2b0 [ 335.116319][ T112] do_new_mount+0x2be/0xb40 [ 335.120838][ T112] __se_sys_mount+0x2d6/0x3c0 [ 335.125526][ T112] do_syscall_64+0xf3/0x230 [ 335.130045][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.135953][ T112] [ 335.138271][ T112] Freed by task 5848: [ 335.142280][ T112] kasan_save_track+0x3f/0x80 [ 335.146960][ T112] kasan_save_free_info+0x40/0x50 [ 335.152002][ T112] __kasan_slab_free+0x59/0x70 [ 335.156770][ T112] kfree+0x196/0x430 [ 335.160675][ T112] lmLogClose+0x2a1/0x530 [ 335.165014][ T112] jfs_umount+0x2ce/0x3a0 [ 335.169352][ T112] jfs_put_super+0x8a/0x190 [ 335.173900][ T112] generic_shutdown_super+0x13b/0x2d0 [ 335.179290][ T112] kill_block_super+0x44/0x90 [ 335.183978][ T112] deactivate_locked_super+0xc6/0x130 [ 335.189364][ T112] cleanup_mnt+0x41f/0x4b0 [ 335.193793][ T112] task_work_run+0x251/0x310 [ 335.198421][ T112] ptrace_notify+0x2d2/0x380 [ 335.203109][ T112] syscall_exit_work+0xc7/0x1d0 [ 335.207974][ T112] syscall_exit_to_user_mode+0x24a/0x340 [ 335.213619][ T112] do_syscall_64+0x100/0x230 [ 335.218222][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.224157][ T112] [ 335.226476][ T112] The buggy address belongs to the object at ffff888027a4b000 [ 335.226476][ T112] which belongs to the cache kmalloc-1k of size 1024 [ 335.240541][ T112] The buggy address is located 64 bytes inside of [ 335.240541][ T112] freed 1024-byte region [ffff888027a4b000, ffff888027a4b400) [ 335.254347][ T112] [ 335.256667][ T112] The buggy address belongs to the physical page: [ 335.263072][ T112] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27a48 [ 335.271834][ T112] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 335.280335][ T112] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 335.287879][ T112] page_type: f5(slab) [ 335.291875][ T112] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 335.300472][ T112] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 335.309061][ T112] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 335.317735][ T112] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 335.326490][ T112] head: 00fff00000000003 ffffea00009e9201 ffffffffffffffff 0000000000000000 [ 335.335164][ T112] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 335.343927][ T112] page dumped because: kasan: bad access detected [ 335.350338][ T112] page_owner tracks the page as allocated [ 335.356050][ T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 666, tgid 666 (kworker/u8:5), ts 9876054284, free_ts 0 [ 335.374480][ T112] post_alloc_hook+0x1f3/0x230 [ 335.379272][ T112] get_page_from_freelist+0x365c/0x37a0 [ 335.384828][ T112] __alloc_pages_noprof+0x292/0x710 [ 335.390037][ T112] alloc_slab_page+0x59/0x110 [ 335.394724][ T112] allocate_slab+0x5a/0x2b0 [ 335.399234][ T112] ___slab_alloc+0xc27/0x14a0 [ 335.403929][ T112] __slab_alloc+0x58/0xa0 [ 335.408273][ T112] __kmalloc_cache_node_noprof+0x294/0x3a0 [ 335.414093][ T112] blk_mq_alloc_and_init_hctx+0x17f/0xd50 [ 335.419827][ T112] blk_mq_realloc_hw_ctxs+0x19c/0xb00 [ 335.425207][ T112] blk_mq_init_allocated_queue+0x3f6/0x14c0 [ 335.431109][ T112] blk_mq_alloc_queue+0x1d3/0x2f0 [ 335.436144][ T112] scsi_alloc_sdev+0x76c/0xb80 [ 335.440914][ T112] scsi_probe_and_add_lun+0x1d4/0x4bd0 [ 335.446387][ T112] __scsi_scan_target+0x205/0x1080 [ 335.451518][ T112] scsi_scan_host_selected+0x37e/0x690 [ 335.456985][ T112] page_owner free stack trace missing [ 335.462348][ T112] [ 335.464668][ T112] Memory state around the buggy address: [ 335.470295][ T112] ffff888027a4af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 335.478358][ T112] ffff888027a4af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 335.486425][ T112] >ffff888027a4b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.494513][ T112] ^ [ 335.500684][ T112] ffff888027a4b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [pid 5850] unlink("./90/binderfs") = 0 [pid 6407] <... write resumed>) = 16777216 [pid 6407] munmap(0x7feda9000000, 138412032 [pid 6406] <... mount resumed>) = 0 [pid 6407] <... munmap resumed>) = 0 [pid 6406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 6407] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6406] <... openat resumed>) = 3 [pid 6407] <... openat resumed>) = 4 [ 335.508752][ T112] ffff888027a4b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.516817][ T112] ================================================================== [pid 6406] chdir("./file0" [pid 6407] ioctl(4, LOOP_SET_FD, 3 [pid 6406] <... chdir resumed>) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6406] lsetxattr("./file1", "system.posix_acl_access", NULL, 0, 0 [pid 6407] <... ioctl resumed>) = 0 [pid 5850] umount2("./90/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5848] <... close resumed>) = 0 [pid 6407] close(3 [ 335.552635][ T6406] [ 335.552635][ T6406] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.552635][ T6406] [ 335.563393][ T6407] loop0: detected capacity change from 0 to 32768 [ 335.590084][ T6406] [ 335.590084][ T6406] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.590084][ T6406] [ 335.602650][ T5850] [ 335.602650][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.602650][ T5850] [ 335.604665][ T112] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 335.604684][ T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 335.604715][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.604733][ T112] Call Trace: [ 335.604743][ T112] [ 335.604754][ T112] dump_stack_lvl+0x241/0x360 [ 335.604798][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.604835][ T112] ? __pfx__printk+0x10/0x10 [ 335.604870][ T112] ? preempt_schedule+0xe1/0xf0 [ 335.604907][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.604936][ T112] ? vscnprintf+0x5d/0x90 [ 335.604967][ T112] panic+0x349/0x880 [ 335.605000][ T112] ? check_panic_on_warn+0x21/0xb0 [ 335.605035][ T112] ? __pfx_panic+0x10/0x10 [ 335.605066][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.605097][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.605124][ T112] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 335.605159][ T112] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.605193][ T112] ? print_report+0x502/0x550 [ 335.605228][ T112] check_panic_on_warn+0x86/0xb0 [ 335.605261][ T112] ? txEnd+0x354/0x560 [ 335.605296][ T112] end_report+0x77/0x160 [ 335.605327][ T112] kasan_report+0x154/0x180 [ 335.605360][ T112] ? txEnd+0x354/0x560 [ 335.605397][ T112] kasan_check_range+0x282/0x290 [ 335.605432][ T112] txEnd+0x354/0x560 [ 335.605469][ T112] jfs_lazycommit+0x634/0xb80 [ 335.605505][ T112] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 335.605538][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.605565][ T112] ? lockdep_hardirqs_on+0x99/0x150 [ 335.605605][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 335.605649][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 335.605690][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.605717][ T112] ? __kthread_parkme+0x169/0x1d0 [ 335.605748][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 335.605786][ T112] kthread+0x2f2/0x390 [ 335.605817][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 335.605854][ T112] ? __pfx_kthread+0x10/0x10 [ 335.605887][ T112] ret_from_fork+0x4d/0x80 [ 335.605915][ T112] ? __pfx_kthread+0x10/0x10 [ 335.605947][ T112] ret_from_fork_asm+0x1a/0x30 [ 335.605979][ T112] [ 335.613345][ T112] Kernel Offset: disabled